last executing test programs: 1m19.196398115s ago: executing program 2 (id=101): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x6, 0x7, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r4 = syz_open_procfs$userns(r3, &(0x7f0000000180)) (async) fdatasync(r2) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "690ab411e72468a9", "e1bd9c8b019ed97b517f15f283403c88e93a6101b8337379f9f1961ff19d9610", "3d97271e", "ba6a0b0a8ddb35d0"}, 0x38) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1, 0x26028}, [@IFLA_OPERSTATE={0x5, 0x10, 0xf}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfa75}, @IFLA_IFALIASn={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000845}, 0x8000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x315}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000041}, 0x4c000) (async) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)={0x448, 0x3f4, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x2, 0x21, [0x10000, 0x6, 0x8, 0x1, 0x6, 0xfffff544, 0xc, 0x7, 0x236, 0xa6, 0x40b, 0x2, 0x9, 0x1000, 0x6, 0x3, 0x7f, 0x1, 0x5, 0xffffffff, 0x8, 0x4a, 0x4, 0xa, 0x9, 0x18, 0x10001, 0x401, 0x10000, 0x3, 0x0, 0xaa1, 0xf, 0x187, 0x1, 0x3, 0x100, 0x8, 0xfffffff5, 0x5, 0xc, 0x80000000, 0x5, 0x7, 0x8, 0x6, 0x0, 0x7ff, 0x7, 0x7c4, 0x7, 0xe, 0x9, 0x4, 0x1ff, 0x63c, 0x0, 0x6, 0x7, 0x1, 0x5, 0x1fc00, 0x8, 0x1000], [0x9, 0x2af, 0xff, 0x2, 0x6, 0x0, 0x6, 0x3, 0xd, 0x8, 0x0, 0x3, 0x0, 0x6, 0x4, 0xf, 0xb, 0x97, 0x4, 0x4, 0x5, 0x9, 0x0, 0x8, 0x9, 0x4, 0x800, 0x3, 0x8, 0xc, 0x9, 0x936, 0x6, 0x80000001, 0xfff, 0x8000, 0x5, 0x9, 0xa, 0x401, 0x9, 0x7, 0x5, 0x6, 0x1, 0x1, 0xff, 0x0, 0x400, 0x6, 0xd, 0x4, 0x6, 0xff, 0x74, 0x9, 0x1, 0x100, 0x8, 0x9, 0x1, 0x9, 0x3, 0x5], [0x5, 0x5, 0x3, 0x2, 0xfffffff5, 0x3, 0x1, 0x5, 0x8, 0x9, 0x4, 0x3ff, 0x0, 0x10001, 0x7, 0x2, 0x2, 0x9, 0x8, 0xfffff409, 0x101, 0x8, 0x1, 0x3, 0x29e2, 0xfffffff7, 0x5, 0x100, 0x5, 0x4, 0x5, 0x5, 0x0, 0xb5f9, 0x80, 0x101, 0x9, 0x81, 0x3, 0xfe, 0x7ff, 0x2, 0x200, 0x10, 0x432, 0x1ff, 0x9, 0x8, 0x4, 0x4, 0x2, 0x3, 0x7, 0xfffffffc, 0x9, 0x9, 0xfffffff9, 0x2, 0x7, 0x6, 0x1, 0x7, 0xb, 0x1], [0x80, 0x43, 0x4, 0x8, 0xffffffff, 0xfffffffa, 0x0, 0x8, 0x9, 0x186, 0x3, 0xb, 0x3, 0xd, 0x5, 0x200, 0x8, 0x1, 0x6, 0x6, 0xdb, 0x4, 0x4, 0x4, 0x6, 0x5, 0x6, 0x8000, 0x401, 0xb, 0xfffffff1, 0x4, 0x2, 0x1, 0xd1, 0x3, 0xb4fe, 0x7fff, 0xffffffff, 0x40, 0x1, 0xd, 0x80000000, 0x1, 0xc, 0xb, 0x10000, 0x4, 0x7ff, 0xfffffff7, 0x8, 0x7, 0x0, 0x4, 0x100, 0x6, 0x8, 0x4, 0x1, 0x400, 0xfffff270, 0x4, 0xf7, 0xfffffffd], 0x26, ['+\x0e\xae/.{(@\xf3)&@-\\*\x00', 'TIPCv2\x00', '{.\'{@*\x00', 'ns/user\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) setns(r0, 0x8000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000a00)={0x8}) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x400) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000b80)={0x11, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7f}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x28) (async) openat$cgroup(r0, &(0x7f0000000bc0)='syz0\x00', 0x200002, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000c00)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'syztnl0\x00', r8, 0x4, 0x2, 0x0, 0x3c33, 0x1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0xf880, 0x3, 0x9}}) (async) fcntl$setlease(r4, 0x400, 0x2) (async) fcntl$getflags(r4, 0x1) (async) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000d00)={0xff, 0x3, 0xb, 0x28, 0x7, 0x24, 0x17, "81819e3a6c16b735e6d6c50bc347985faf6bf235", "1f54828d3d29369d89f3dd8e4fede4c0802c1290"}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000d40)={0x0, 0xb9, "da648215f7dfbbc14b4ad93f85767c9ae894e757a2cdf3ac193d75ed68ebeb576566cdfbcaed53e4437e285286853cf43600afd0f962da507ba73be448c0007b06007ac320ae21a827b77357062674648ac2564c58b81d0ef84eddcb7df4afcb14f4d89575e13756c06479c8520b69e7b63d276d6d47735a44fabb3694f3d31045c7190c63c9eca5ef71528e4dca9eb555633aea476d14166a23edf3d3ab8e95e32321edc424946eae443b186db585d9ff626ce7e095af3360"}, &(0x7f0000000e40)=0xc1) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000e80)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0xf8d}, &(0x7f0000000f40)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000f80)={r9, 0x1, 0x9, 0x7, 0x35, 0xa850, 0x5, 0x80, {r10, @in={{0x2, 0x4e24, @loopback}}, 0x1, 0x2d, 0x3, 0x14e0f28e, 0xa98}}, &(0x7f0000001040)=0xb0) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001080)=0x1, 0x4) 1m19.133553419s ago: executing program 2 (id=102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0xd, 0x6b0882) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000100)={&(0x7f00000000c0), 0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001740)={'veth1_to_hsr\x00', &(0x7f0000001680)=@ethtool_rxnfc={0x2d, 0xb, 0x0, {0x3, @esp_ip4_spec={@multicast2, @multicast2, 0x800000, 0x7f}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, 0xffff, 0x7, [0x8, 0x6]}, @tcp_ip4_spec={@multicast2, @remote, 0x4e24, 0x4e21, 0x5}, {0x0, @broadcast, 0x6, 0x7, [0x2, 0x7565]}, 0x2, 0x1}}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000010903000000000000000000020000003c0002000c00028005000100880000001c0001"], 0x50}, 0x1, 0x0, 0x0, 0x404c881}, 0x4000010) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) splice(r4, 0x0, r3, 0x0, 0x80, 0x6) r9 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f0000000000)={&(0x7f0000000180), &(0x7f0000001300)=""/4098, 0x1002}) r10 = fsmount(0xffffffffffffffff, 0x1, 0x1) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000cc0)={'tunl0\x00', 0x0, 0x7800, 0x700, 0x7, 0x5, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x65, 0x0, 0x80, 0x4, 0x0, @rand_addr=0x64010100, @multicast1}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x6c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r9}, @IFLA_GTP_LOCAL6={0x14, 0x8, @mcast1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r10}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r9}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c092}, 0x0) 1m18.500652675s ago: executing program 2 (id=113): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0xe, 0x0, 0xfbffffff) 1m18.444386939s ago: executing program 2 (id=115): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$isdn(0x22, 0x2, 0x10) r3 = socket$isdn(0x22, 0x2, 0x2) r4 = dup3(r3, r2, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000680)={0x0, 0x1, 0x6, @random="fcbf0c8040c8"}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000300)={r5, 0x0, r0, 0x100, 0x80000}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = syz_io_uring_setup(0x116c, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000001c0)={0x79c, r6, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) pipe(0x0) symlink(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0)='./file0\x00') 1m18.148296356s ago: executing program 2 (id=118): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000050000000800000001"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xfff, &(0x7f0000002080)=""/4095}, 0x94) 1m17.851876743s ago: executing program 2 (id=122): getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x4, 0x120f, {{0x1f, 0x4, 0x2, 0x3, 0x7c, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x7a, 0x3, 0x5, [{@loopback, 0x8}, {@rand_addr=0x64010100, 0x40}, {@private=0xa010101, 0x40}, {@multicast2, 0x1}, {@multicast2, 0x3}, {@local, 0x3}, {@empty, 0x7}]}, @cipso={0x86, 0xc, 0x3, [{0x1, 0x6, "699bd4e8"}]}, @rr={0x7, 0x1b, 0x52, [@multicast2, @multicast1, @empty, @private=0xa010102, @local, @loopback]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x8, 0x40000000, {{0x12, 0x4, 0x1, 0x9, 0x48, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010100, {[@end, @generic={0x44, 0x9, "84f589af935937"}, @ssrr={0x89, 0x1b, 0xcb, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @rr={0x7, 0xf, 0x66, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x7, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x8000, 0xff, 0x7}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000b40)={'erspan0\x00', 0x0, 0x40, 0x40, 0xd, 0x7, {{0x11, 0x4, 0x3, 0x21, 0x44, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x23, 0x67, [@rand_addr=0x64010101, @local, @multicast2, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x8a, 0x1, 0x8, [{@broadcast, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0xcf4, 0x4, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x67, 0x0, 0xe, 0x2f, 0x0, @loopback, @loopback, {[@noop]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x78bd29, 0x0, {0x0, 0x0, 0x0, r16, 0x0, 0x17740}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r18 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r18, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1d, r19}, 0x10, &(0x7f0000000080)={&(0x7f0000000400)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x16, 0x1, 0x0, 0x0, "894ef0c1da0c938a90851bda4b0937db5d42a7d4139a517968b9e89a7b0a3374cad3ec29b855075a166ce8d8623623383142bbf13896686b1d4d9821802d6a7d"}, 0x48}, 0x2, 0x0, 0x0, 0x2472ca9aa3d5154b}, 0x10044009) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000800)={@multicast2, @loopback, 0x0}, &(0x7f0000000840)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x208, 0x0, 0xc02, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x850}, 0x80001) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400040, 0x0) ioctl$PTP_EXTTS_REQUEST2(r23, 0x40103d0b, &(0x7f00000000c0)={0x18, 0x2}) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x64}}, 0x0) 1m17.850661443s ago: executing program 32 (id=122): getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x4, 0x120f, {{0x1f, 0x4, 0x2, 0x3, 0x7c, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x7a, 0x3, 0x5, [{@loopback, 0x8}, {@rand_addr=0x64010100, 0x40}, {@private=0xa010101, 0x40}, {@multicast2, 0x1}, {@multicast2, 0x3}, {@local, 0x3}, {@empty, 0x7}]}, @cipso={0x86, 0xc, 0x3, [{0x1, 0x6, "699bd4e8"}]}, @rr={0x7, 0x1b, 0x52, [@multicast2, @multicast1, @empty, @private=0xa010102, @local, @loopback]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x8, 0x40000000, {{0x12, 0x4, 0x1, 0x9, 0x48, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010100, {[@end, @generic={0x44, 0x9, "84f589af935937"}, @ssrr={0x89, 0x1b, 0xcb, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @rr={0x7, 0xf, 0x66, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x7, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x8000, 0xff, 0x7}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000b40)={'erspan0\x00', 0x0, 0x40, 0x40, 0xd, 0x7, {{0x11, 0x4, 0x3, 0x21, 0x44, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x23, 0x67, [@rand_addr=0x64010101, @local, @multicast2, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x8a, 0x1, 0x8, [{@broadcast, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0xcf4, 0x4, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x67, 0x0, 0xe, 0x2f, 0x0, @loopback, @loopback, {[@noop]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x78bd29, 0x0, {0x0, 0x0, 0x0, r16, 0x0, 0x17740}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r18 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r18, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1d, r19}, 0x10, &(0x7f0000000080)={&(0x7f0000000400)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x16, 0x1, 0x0, 0x0, "894ef0c1da0c938a90851bda4b0937db5d42a7d4139a517968b9e89a7b0a3374cad3ec29b855075a166ce8d8623623383142bbf13896686b1d4d9821802d6a7d"}, 0x48}, 0x2, 0x0, 0x0, 0x2472ca9aa3d5154b}, 0x10044009) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000800)={@multicast2, @loopback, 0x0}, &(0x7f0000000840)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x208, 0x0, 0xc02, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x850}, 0x80001) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400040, 0x0) ioctl$PTP_EXTTS_REQUEST2(r23, 0x40103d0b, &(0x7f00000000c0)={0x18, 0x2}) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x64}}, 0x0) 1m7.334063203s ago: executing program 3 (id=300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1m7.268613867s ago: executing program 3 (id=302): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 1m7.250688078s ago: executing program 3 (id=303): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) (async) r2 = socket(0x0, 0x1, 0x8) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1m7.229860799s ago: executing program 3 (id=304): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}}, 0x1, 0x3a34089d, 0x7, 0x2, 0x1b0a}, &(0x7f00000002c0)=0x98) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x20000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, &(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x308}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0xa000400) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) flistxattr(r5, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x36f0516f) 1m6.276302634s ago: executing program 3 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x3a, @loopback, 0x4e24, 0x1, 'rr\x00', 0x2, 0x3, 0x40}, 0x2c) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004000}, 0x4010800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x101}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x5c}}, 0x24008040) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') syz_open_dev$sg(&(0x7f00000003c0), 0x19e3, 0x141780) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000300)={0x3, 'wg2\x00', {0xbf}, 0x5}) (async) preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) 1m5.994990591s ago: executing program 3 (id=331): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xab}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x33, 0x701, 0x70bd2c, 0x25dfdbfe, {0x5}}, 0x14}}, 0x24044094) 1m5.953003693s ago: executing program 33 (id=331): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xab}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x33, 0x701, 0x70bd2c, 0x25dfdbfe, {0x5}}, 0x14}}, 0x24044094) 21.763477757s ago: executing program 1 (id=1190): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x8818, 0x1000000000, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000900000091112c000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 21.703724571s ago: executing program 1 (id=1193): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0|\x88!') 21.599080077s ago: executing program 1 (id=1197): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x4c27e, 0x146) fcntl$setpipe(r0, 0x407, 0xd) fallocate(r1, 0x0, 0x0, 0x3) 21.389937898s ago: executing program 1 (id=1201): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x25e, &(0x7f0000000540)="$eJzs2s9rHGUYB/BnktTUlHQj/mxBfNGDelmanD00SArigqCNUAXp1Ex0ybgbMktgRWxOCp569uRZPHoTpEcvufgXeNBTLjn2II4km7RpTI0Sshv087nsA+98ed935mV4WGbrtTufrCxPxHLei7Esi7GrsRH3spiJsdi3Ea++fOOn59+58d6b863WwtspXZu/PjuXUrr4wo/vf/bdi3d7F979/uIPk7E588HW9tyvm89sXtr64/rH7Sq1q9Tp9lKebnW7vfxWWaSlx6qVZkp3yiKvitTuVMXaQ+PLZXd1tZ/yztL01OpaUVUp7/TTStFPvW7qrfVT/lHe7qRms5mmp4KTWPz2Xl3Hdn3uZtR1/fg3ceFuTP8SjcieSNmTV7Onb2bPbmSXtuu6Meqlcio8//+3ybj/Uj8fUX65vri+OPgdjM8vRzvKKOJKRPweO8dkz6C+9kZr4UraNRNflLf38rfXF8d381/t52ejETNH52cH+fRwfjKmDs4/F4146q/538ZbC3NH5s/HKy8dyDejET9/GN0oYyl2sg/m/3w2pdffah3KX969DgDgv6aZ7juyf2s2HzU+yB/oDxvH9IeH+quJuDwx2r0TUfU/XcnLslgbSrFzpoY11zFFtncDjr/4ubGTzbX/R9rIt/yo4uuzsYxTKsb3bv9ZWc/fFef+0YEcTjGiFxJD9eChj3olAAAAAAAAAAAA/BuHPvprnMZnkqPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLb9GQAA//9gLMXu") bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x71}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x1005, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file1\x00'}, 0x18) rmdir(&(0x7f00000004c0)='./file0\x00') 21.258248586s ago: executing program 1 (id=1209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xa9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x40040c2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) setreuid(0x0, 0xee00) r3 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0x4, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES64=0x0], 0x22, 0x35d, &(0x7f00000012c0)="$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") r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read(r4, &(0x7f0000000800)=""/74, 0xfffffe9d) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/41, 0x29}, 0x7}], 0x1, 0x42, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0x4, 0xffffffa6, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x38, 0x1, 0x4, [{@broadcast, 0x8d24}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x4}]}, @lsrr={0x83, 0x1b, 0x55, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0xd7, 0x0, 0xd, [0xa]}]}}}}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56551, 0x400004, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x13}, {0xffff, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x9, 0x1002, 0x0, 0x2, 0x40000, 0xffff}, [@TCA_NETEM_DELAY_DIST={0x9, 0x2, "fbb0f4a86d"}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r5, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000005c0)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000b00), &(0x7f0000000780), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x6, 0x5}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000c00)={r11, 0x5c, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x9, @private2, 0x9}]}, &(0x7f0000000c40)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@newtaction={0x2e4, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x94, 0x1, [@m_simple={0x90, 0x18, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0x38, 0x3, '\xaa\xaa\xaa\xaa\xaa\x8f\xe8i,\xa5/9\xb7s\xd0\xb87\xecO\x0e\x9d\xb1\xfe)k\xf54H{\x98I\xaf0\bu\x1e\xc1Y\x19\xdf\x8c\x8e9\x9aK\xec9(\x00H\x0f\x97'}]}, {0x1e, 0x6, "c92acebef543cf5eac95ff99fd6f0f8ca3945cf1e27303fef4d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x7c, 0x1, [@m_ct={0x78, 0x17, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x14}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_LABELS={0x14, 0x7, "1fc075f6ec8940afab5885e58057ae3f"}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x1c0, 0x1, [@m_ct={0x54, 0x18, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_LABELS={0x14, 0x7, "0684ea3cfb2f3f7ee0b49972d6633a27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x168, 0x18, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x8, 0x8, 0x75}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x10001, 0x2, 0x800}, 0x0, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7fff, 0x3, 0x400, 0x2a}, 0x3, r10}}]}, {0xdb, 0x6, "05cbb2566de70e651f36b5d0ee3c25c1d7553f17a2da926bc674b715f3074cf6c6b6710cb7620ab6b3500d55cabbc3e6b21187d99be462fbf1b19a3585ee057c42022d6faf60a2b020ba4fe93b0295b09d8dd2274cdeb906f961cb414e3825b18eb56265ae3970942e3b69f4f072050c9c43e99055063c92101231b731a8c961ce306bc20a3c6c32423fc9ed92406f0443e6bfa3e60e489c637ceb3bc5fee2802c2d71f1682bbac90f6595ab12668a8f2d1e4ebf2172a4e23f2678d0f6858c592594e00d332fdddd784efe4322270585952d4d3d16ff5d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x30}}, 0x2) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200000028000480240001800e000100696d6d656469617465000000100002800400028008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a5903e9ffc796c724b61f1973a8b907460d0c5eba9a3dbf8838d14dfcc9120c900ce743f4f9c93fc3cc870e0f67396c0011163b19fca94922cae6e3ea07"], 0x7c}}, 0x0) 20.786142204s ago: executing program 1 (id=1217): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "cc320e4a27cb5791", "1fd33481396ded740000002f1e2500", "62266bd8", "1e00040000000100"}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='\x00', 0x0, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x2, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x700}, [@nested={0x4}]}, 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x511a, 0x8, 0x20002, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xa, 0x80) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000100)={0x1, 0xffff, 0x1}) 20.765315885s ago: executing program 34 (id=1217): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "cc320e4a27cb5791", "1fd33481396ded740000002f1e2500", "62266bd8", "1e00040000000100"}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='\x00', 0x0, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x2, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x700}, [@nested={0x4}]}, 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x511a, 0x8, 0x20002, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xa, 0x80) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000100)={0x1, 0xffff, 0x1}) 1.72035022s ago: executing program 7 (id=1590): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000780)=ANY=[@ANYBLOB='R\x008'], 0x4b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x50490, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.72002251s ago: executing program 0 (id=1591): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x4000080) 1.582072498s ago: executing program 5 (id=1595): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') getdents64(r4, &(0x7f0000000000)=""/77, 0x4d) getdents64(r4, 0xffffffffffffffff, 0x43) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10) openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0xd, 0x0, @void}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="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", 0x129}], 0x1, 0x0, 0x0, 0x10}, 0x4004040) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x2e}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="170900020000000000000100000005000700000000000800090002009c0b000002000100000008000a000000000008001800e000000208001900ac1414aa7310405910a1b61d50e7ee39802365cf2f743f5df032c7974d5bba5f"], 0x44}}, 0x4010) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000300), 0x10000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000c) vmsplice(r8, &(0x7f0000000880)=[{&(0x7f0000000340)="f49ac615163b690c35c54ef98545eabddae7c6a01bd9588729edc4061f5df7c7afd095e2972a6ec5e10c046c1233816cadd77a73e8d7fcad072beec19c87cc4ffb98b0bf318cf8bbb967dc87bf7bf98489ca52f254a583c5112c319afbbacc925d69cbd4ce775448ad55b10f23e7b78c713fd1d070fd7704c10addc3fb337ea7ad548267e7461a0d4d9b370868612dbc2389b0f7e64c1f6d6c734b12047c92e74d5d5a5896d549c322473ff1ed29762977cc8ba57b0b468a38d8e2e43c968e626a3d2f69da84d75b2cc685554d65fd14ff0fc452d7bb5f85e5d5f6cddb2ca9432f20b1e583f4643d9c33", 0xea}], 0x1, 0x1f) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28a21d00}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x10}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc008814}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 1.574099589s ago: executing program 4 (id=1597): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006c00000076000000000401002700efffffe900009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xd, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000001300)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001380)={&(0x7f0000000080)="6071fb6db2cd3136ec130956d586858ee99583a309b7174082d78a2a52507bba6d45ac998501a38b2626725f8f894f9033a1c35ea6c22a5485c286c46fa4fabd8e781d383e55fa5310a5d74c49bc1b03ce5d8ab77810af23a0f89a38ecd2f25e4e7b9658a3bde5649337cca5fbaf906e85df94b48301", &(0x7f0000000240)=""/129, &(0x7f0000000300)="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", &(0x7f0000000100)="ea97816fd1d768830a3aa2d72f731f6096f5a2571508651be694b31b7171ae75", 0x39000, r1, 0x4}, 0x38) 1.508953212s ago: executing program 5 (id=1598): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r1, 0x15, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000002b7080000d574999b7b8af8ff000000009ca200000000000007020000f8ffffffb7030000080000002c15744489c974a37c16e180a5b7040000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@gettaction={0x14, 0x32, 0x605, 0x70bd2f, 0x25dfdbff}, 0x14}}, 0x4000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x13bb711e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x2d) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4030582a, &(0x7f0000000040)) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 1.432277296s ago: executing program 7 (id=1599): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000003c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x110) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) creat(0x0, 0x40) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6gre0\x00', 0x2000004}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4004, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x80, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r2) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="02000000cb4f1f0b4b87573f283383dfc632cfaf6c853d1f40bace457f2984dba82a77a6fbf6c5f90d11004abfcc0524ae785070fd858f31b2ea11be16e18cc82a211e8ff7894319e3727a1804bb540aa13a28b2b487fefcfb6ce568498b", @ANYRES16=r6, @ANYBLOB="020026bd7000fbdbdf250400000008001800e00000010c000f001000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c841}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5, 0x5063}], 0x1, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) getxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x188c42, 0x160) r7 = io_uring_setup(0x69d6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0xfb}) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.431870817s ago: executing program 0 (id=1600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) memfd_secret(0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfce) (rerun: 32) 1.430211247s ago: executing program 4 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200088b, &(0x7f0000000040), 0x0, 0x56b, &(0x7f0000000680)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x800007}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0xe800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r3 = msgget$private(0x0, 0x4) msgsnd(r3, &(0x7f0000000380)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000000240)=""/220) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="79616b5389c5e0a411bd8caeba022e9c6e7acfa6f27499ec478820512653b2356f5eb3c5f6b7f33fc08be9607ff64a8ca71000000000000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x107) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x1c4, 0x0, 0x700, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x8d}}, {0x8}, {0x6, 0x16, 0x8}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x39e7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8f}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x1}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x1}, {0x5}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0xc000}, 0x404) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffa, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffffffffff7c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x3, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0x148}}, 0x844) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) msgrcv(r3, &(0x7f00000003c0)={0x0, ""/183}, 0xbf, 0x2, 0x3000) msgget(0x1, 0x110) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000063012c0000000000950000000000e7ff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000002200)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote}}}}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$nl_route(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a006000", @ANYRES32, @ANYBLOB="020000000800020007000000080002000700000008000200030001000800020000000000140001"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x10) 1.348781971s ago: executing program 0 (id=1603): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) statx(0xffffffffffffffff, 0x0, 0x4000, 0x20, 0x0) 1.184708321s ago: executing program 6 (id=1604): unshare(0x2040400) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJffjUjW1d2EXBgl2IuGhokho6/UGTgq2FJuBCQUHEbZFu/Ae6l+5dCCKoO9dCFalY0NKR+2OayWQmM/k10+R+PjCZc+85N+d8c+fknjt3ztwAKms2+5FGvB/x+moSMd2SNxVF5mxZ7sW/Hl7LHkk0Gt/9ZxJJua5ZPimfT5UL4xHxxwsRn67trHft/oMbi/VG4VHEmfWbd86s3X/w0erNxevL15dvLZz92sefzH994eOFlobu36ny+eKl73z+Fz/54VdX/lT/KIlzcWX0x0vRFsdhmY3ZeF2G2Lp+JCI+yRId/i7HzQkIodJq5etxNCI+G9NRy5cK07H686E2DjhSjVpEY3dJrwLAcaV7Q1U1xwHNc/v+zoOvHPGoZHCeny9OgHbGP1K+5TCenxtNvkhazoyK9zZOH0L9WR2vHo4/fvVw5nFsex/i5Zu9M3II9XSzsRkRn+sUf5K37XQeaRZ/uu1cP4mI+YgYK9v3rQO0IWlJH8X7MLvpM/5aFn/rfkgj4lz5nK2/sM/629/WGnT8AFTTs/PlgXwjW9o6/mVjj+b4J7bGP4+a200d/JJMbtjHv+7jv+bxfjwf96Rt47BszHK5868cbV/xt59d/FW3+ovx38zj5iOrvzkWHITnmxEzbfH/NAu2HP9k8Scdxr9Zkavn+qvj23/+x8VuecOOv/Ek4oOO5z9bo9Istcv1yTMrq/Xl+eJnxzp+9/sf/LZb/Z3jf+cIIu0s2/+TXeJv2f9p+3bZ3+RO51+52b7i6eUnN7vVP9Vz/6d/H0uK882xcs2PNtfX7y5EjCWXyiLl+sX19btnd4+3KPOykT8vFPF/+KXO/X/b678tqonmv8w+3PnejRfd8vbz+m+5mPy60WcbusniX+q9/7f6/0QzN+KXfdbxn+/f+0K3vM7xJweMCgAAAAAAAKopza/BJuncm3Sazs0V82U/E5Np/fba+pdXbt+7tRTxYf55yNE00iT/yMh0sZysrNaXF8rPwzaXz7YtfyUi3ouIX9cm8uW5a7frS8MOHgAAAAAAAAAAAAAAAAAAAN4Sp8r5/837VP+7Vsz/Byqi9w3mdtz/ATghjvIGk8DbLe//ux3i3x1cW4DBcvyH6tL/obr0f6gu/R+qS/+H6tL/obr0f6gu/R8AAAAATqT3vvjsr0lEbHxjIn9kxso8k37hZBvdU+nakbUDGDw9GqrrzaV/g32onL7G//8tvxzw6JsDDEHSaWU+OGjs3vmfddxyy+bB2wYAAAAAAAAAAAAAFD54v/v8/73NDQaOG9P+oLoOMP/fVwfAMbfvr/4fO9x2AIPnHB/oMYs/xrtl9Jr/DwAAAAAAAAAAAAAcmqn8kaRz5VzgqUjTubmIT0XE6RhNVlbry/MR8W5E/KU2+k62vDDsRgMAAAAAAAAAAAAAAAAAAMAJs3b/wY3Fen35bmvifzvWnOxE8y6ovQs3+iiza+KbscetIhn8n2UiIoa+U7Ylnpa3m93z5n8oX+ctWSMtZZKIjSx76AEWiXg7mpEnhvUfCQAAAAAAAAAAAAAAAAAAqqtl7nFnM78ZcIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYPC27v/fI7E0WWzQV+HtiWHHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcT/8PAAD//4RxNqU=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x7e9, 0x2000000000, 0x4002000000000002, 0x3, 0x80, 0x80000003}) unshare(0x400) setsockopt$sock_attach_bpf(r2, 0x10f, 0x85, &(0x7f0000000180), 0x4bd) r3 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r6, 0x0, 0x10}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r7, 0x0, 0x0}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) timer_gettime(r4, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010024bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000000000000080000000000080014000100000000000000000001"], 0x44}}, 0x8000) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 936.706075ms ago: executing program 5 (id=1605): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x200600, &(0x7f00000000c0)=ANY=[], 0x1, 0x3fe, &(0x7f0000000140)="$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") ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x1, 0x10, 0x2, 0xa7e, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x64, 0x0, 0x7, 0x4, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x24, 0xda, 0x1, 0x8, [{@multicast2, 0x1ff}, {@private=0xa010102, 0x2}, {@multicast2, 0x5}, {@multicast1, 0x1}]}, @rr={0x7, 0x23, 0x2f, [@empty, @multicast2, @rand_addr=0x64010101, @broadcast, @multicast1, @local, @multicast1, @private=0xa010101]}]}}}}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x46) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) 886.045738ms ago: executing program 4 (id=1606): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file2\x00'}) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) (rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x1f, 0x5, 0x8, @mcast1, @empty, 0x7800, 0x10, 0xfff, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x2, 0x9, 0x19, @local, @private2, 0x10, 0x10, 0x13, 0x7fffffff}}) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x400c0) (async) r5 = socket(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x64042, 0x12e) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) fallocate(r7, 0x0, 0xbf5, 0x2000402) (async) write$cgroup_subtree(r6, 0x0, 0x32600) (async) write$P9_RATTACH(r6, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x80, 0x1, 0x7}}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84c0}, 0x4048000) mknodat$null(r6, &(0x7f00000001c0)='./file2\x00', 0x20, 0x103) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fchdir(0xffffffffffffffff) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000140)=0x10) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x9) 871.652129ms ago: executing program 0 (id=1607): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2a, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000540)="a9e47d", 0x3}], 0x3) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x14, 0x0, 0x301, 0x1, 0x0, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8}, @void}}}, 0x24}}, 0x20000004) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'pimreg1\x00', {}, {0xff}, 0x58, 0x5, 0x2b}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d2, 0x4d2], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010100, 0xff0000ff, 0x0, 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x1, 0x5}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0xfff7, 0x9}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x6, 0x232dca81d5c5a277, 0x4, 0x2], 0x1, 0x3}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 760.222335ms ago: executing program 4 (id=1608): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$P9_RLERROR(r1, &(0x7f0000001040)={0x9, 0x7, 0x1}, 0x9) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x420e, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000b40)="$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") r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000640)={&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x7}, @fadd={0x58, 0x114, 0x6, {{0x3, 0x8}, 0x0, 0x0, 0x7, 0x3ff, 0x2, 0x36b, 0x40, 0xf0}}], 0x70, 0x4810}, 0x4000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x2, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) close(0xffffffffffffffff) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x1, &(0x7f0000000480)=@raw=[@ldst={0x3, 0x3, 0x3, 0xa, 0x5, 0xfffffffffffffee3, 0xfffffffffffffffb}], 0x0, 0xfffffff5, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r10, 0x0, 0x0, 0x0, 0x10, 0x54f42d0d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}, 0x94) r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001ed000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x42000, 0x0, 0x12, 0x100000c01, 0x74, 0x41, 0x24}) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000180)=0x3, 0x4) 759.107306ms ago: executing program 7 (id=1609): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@jqfmt_vfsv1}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") open(&(0x7f00000003c0)='./file2\x00', 0x842200, 0x8) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@broadcast, @remote, 0xffff00, 0x1fffffeff, 0x0, 0x4, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x8, 0x0, 0x7, 0x6, 0x7, 0x3ff, 'veth0_to_team\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty, 0x8, 0xffffffff}}}, {{@arp={@multicast1, @multicast1, 0xff000000, 0xffffff00, 0x10, 0x2, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x24, 0x5, 0x6, 0x9, 0x0, 'ip6gretap0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x0, 0xcd52ce8690baa844}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @private=0xa010102, @loopback, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="23d97a8de04c", @mac, @empty, @multicast2, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) connect(r0, &(0x7f0000000080)=@sco={0x1f, @none}, 0x80) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x10000}]}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x30, 0x0, 0x1, 0xfffffff0}, 0x28) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 561.154047ms ago: executing program 0 (id=1610): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000009600000000000a20000000000a01040000000000000000010000000900010073797a300000000060000000030a01014000000000000000010000001c0008800c00024000000000000000000c00014000000000000000000900010073797a300000000008000a4000000002140004800800024000000000080001400000000008000b"], 0xa8}}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x841e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x82, 0x4, 0x4, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000003c0)=0x1000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@debug}, {@data_err_ignore}, {@journal_checksum}, {@nobarrier}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x40000000}}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x50, 0x140c, 0x100, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) sigaltstack(&(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)={0x0}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf25050000001c00060002000000000000000c0006002820518612695f73de2f3fbca40000002000000c00030005000000120000000c0002000534000000000000da8304ce055953f02b3d845536c53aa84f7c3576c0c7f2901d45c58a022af419910661efae6527bfb9003966bffeffe50e5e3e38942f144e8674acc2df7b60a4e1a9601ae55f4af46523467d6f74d2fe05698f81d5bd3a992e6eb7eba0d55abdbc55e5e439baf5a6f64c0bf3007d58d856e03fade141bf0229c7f363e1e68f236ae95b5404e57439a15a640455684c6328da17057cef272ed6d3309213"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040811) 502.843561ms ago: executing program 6 (id=1611): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x38}}, 0x41) (async) r2 = socket$kcm(0x21, 0x2, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@resuid}, {@data_journal}, {@resuid}, {@errors_remount}, {@grpjquota}, {@data_writeback}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@nouser_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x1ff}}, {@jqfmt_vfsv1}]}, 0x1, 0x57b, &(0x7f0000000fc0)="$eJzs3c1rHGUYAPBnNpt+a1IoRUUk0IOV2k2T+FHBQz36USzovS7JNJRsuiW7KU0stD3YixcpgogF8a53j8V/wL+ioIUiJejBS2Q2s0ma7CbbZpsP9/eDKe+7M7PvPPvO8/adnd1sAD1rKPunEPFyRHyTRAxERJKvK0a+cmhpu4XHN8azJYnFxc/+ShrbZfXmczX3O5xXXoqI376KOFVY325tbn6qXKmkM3l9uD59dbg2N3/68nR5Mp1Mr4yOjZ19e2z0vXff6Vqsb1z45/tP73949usTC9/98vDo3STOxZF83eo4tuDW6spQDOWvSX+cW7PhSBca202SnT4Anklfnuf9kY0BA9GXZ31bHw1s16EBz9nNiFgEelQi/6FHNecBzWv7Ll0H7xmPPli6AFoff3HpvZE40Lg2OrSQPHFllF3vDnah/ayNX/+8dzdbonvvQwBs6tbtiDhTLK4f/5J8/Ht2ZzrYZm0bxj/YPvez+c+breY/heX5T7SY/xxukbvPYvP8LzzsQjNtZfO/91vOf5dvWg325bUXGnO+/uTS5UqajW0vRsTJ6N+f1Te6n3N24cFiu3Wr53/ZkrXfmAvebG5ReFjc/+Q+E+V6eWtRr3h0O+KVlvPfZLn/kxb9n70eFzps43h677V269rG35HFvg4Pof0z/BTxesv+X7mjlWx8f3K4cT4MN8+K9f6+c/z3du1vLf6ty/r/UBb/gWgX/2Cy+n5t7enb+PHAv2m7dU/EH63ib33+70s+b5T35Y9dL9frMyMR+5JP1j8+urJvs97cPov/5ImNx79W5//BiPiiw/jvHPv51Y7i36H+n9j4/F/T/09fePDxlz+0a3/z+LP+f6tROpk/0sn41+kBbuW1AwAAAAAAgN2mEBFHIimUlsuFQqm09PmOY3GoUKnW6qcuVWevTETju7KD0V9o3ukeWPV5iJH887DN+uia+lhEHI2Ib/sONuql8WplYqeDBwAAAAAAAAAAAAAAAAAAgF3icJvv/2f+2PJf1wd2vU1+8hv4H9s0/7vxS0/AruT/f+hd8h96l/yH3iX/oXfJf+hd8h96l/yH3iX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsunD+fLYsLj2+MZ/WJa3OzU9VrpyfS2lRpena8NF6duVqarFYnK2lpvDq92fNVqtWrI6Mxe324ntbqw7W5+YvT1dkr9YuXp8uT6cW0f1uiAgAAAAAAAAAAAAAAAAAAgL2lNjc/Va5U0pm9W0giaYSyW45nbxeKT7tXceePWeE5FHZ6ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAFf8FAAD//wHaNFI=") sendmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000000000016010000010000001800000000000000100100000e00"], 0xe0}, 0x0) 490.593711ms ago: executing program 4 (id=1612): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10003, 0x3, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x5}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x5, 0x0, 0xb7}}, 0xe8) (async, rerun: 64) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e31000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="030500e733e7344ad77372800b000100627269646765000000080003000a0000000000000000000000000000a6349cc95f4d5e9170bde363d2d8234a71dd452f16644552ae88e247e102973a5500000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 376.190698ms ago: executing program 4 (id=1613): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000100)='=', 0x1, 0x4fed3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB=',\x00'], 0x20) r7 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x2, 0x30b}, &(0x7f0000000280), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 375.682598ms ago: executing program 7 (id=1614): get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x14, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "3199125fd38055fa64da6b"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}}, 0x0) 375.378978ms ago: executing program 6 (id=1615): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$evdev(&(0x7f0000000000), 0x80000000, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) statx(0xffffffffffffffff, 0x0, 0x4000, 0x20, 0x0) 365.377209ms ago: executing program 0 (id=1616): io_setup(0x2278, &(0x7f0000000180)=0x0) r1 = syz_open_dev$mouse(&(0x7f0000001380), 0x4, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001440)='net/ip_mr_vif\x00') r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0), 0xa802, 0x0) r4 = eventfd(0x8000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = eventfd(0x1ff) r7 = syz_open_dev$mouse(&(0x7f0000001680), 0x7, 0x80000) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000026c0), 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = eventfd(0x0) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f00000028c0), 0x40, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r12, 0x26, &(0x7f0000000240)={0x0, 0x2, 0xfffffffffffffffa, 0x1000000000000401}) r13 = socket(0xa, 0x5, 0x0) listen(r13, 0x100) r14 = dup(r13) sendmsg$inet_sctp(r14, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=ANY=[@ANYBLOB="1800000000000000f561fdb5a5a4003d8400030000000000000000000009ffffa4f16ed77d89d63e6eb2fe48330d8db5c0f9b75ddc19c857c8e8a5fb745a5b9bc529decf607feff9bc7feb0877bb72033fb4adfe7b20b9af4df1a195"], 0x18}, 0x8050) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000740)=[{r15, 0x104}], 0x1, 0x0, 0x0, 0x0) pread64(r15, &(0x7f0000000480), 0x1, 0x2) poll(&(0x7f0000000a00)=[{r15}], 0x2e, 0x5) io_submit(r0, 0x9, &(0x7f0000002b40)=[&(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x9e1, 0xffffffffffffffff, &(0x7f0000001280)="35c6c77c388ab1706a0c51758a6898a31210c6b455ecd73204cccd0ea603cad18c5283dd9aeb9ffc00532b09b30fecdae8a46f15b76dafaa88de457e3d7a3baa4f5a7b97bb2798b139ab5790edde81ecabb44eee8ab7feb369498ffc83c8b22df4c11da3ccb685e204629114dec808025a0ceb2a26a36d43fe85e686a175f7f0c9831186300751cdbeaae37b", 0x8c, 0xce, 0x0, 0x3}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f00000013c0)="4b5e7f8c84ab037532e9aa1ce7c3df83cd67d772d10a270d1bb942e33c8915d92d85d7ce39cbd85c3716e8d554d9604c95506f95870be7d08c9e028c15b88a4182858df4d5f9a4af7d442beb39c98c61f5a06a9aa30250b82f3cc6db8a6c705dbe", 0x61, 0x8, 0x0, 0x1, r2}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x5, 0xe, r3, &(0x7f0000001500)="eaf802", 0x3, 0x80000001, 0x0, 0x1, r4}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x2, r5, &(0x7f0000001580)="1d0ed4405db4d3e47ce6def31bde549346cf781af24d11375b590dd4dd9355a72871737f7ac28d9979271a9a99308ddee39044ea584021e50cbbce52d0f52b43abcce84e6356172df5e2b7b70c8d343fab35a8dfda2a89af125a13f975f2c4ad829be57ef90c37a694b864c878b41e9f0bd519addc132bd848d62ea26245303705c452d4a90d6b88bacd143379d6f6fe9620a7274de4e7062f8f2d39d1fb2874db30a6a90dae48a4e1adb1ab1542fc47aa1000fca8c421030f", 0xb9, 0xfffffffffffffffa, 0x0, 0x2, r6}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x1, 0xf8a, r7, &(0x7f00000016c0)="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", 0x1000, 0x2, 0x0, 0x1, r8}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x5, 0x7, r9, &(0x7f0000002740)="5e0902a95d94719cc14f1674d41072296c3726a80dcb9c32f450c068ae57946bd83f34aca2fc1da33127ce76ffd8991c069cc18783c2cce7f4eef70b394fc4f18475b76d9d5dc50eef8d66d9006ee7c635a6a7bc91b31cd447a1021c5cfa339bb9a02a455f494add72377d731919b60fdc111ee5f993a80908919d22fade99547dc8e74299f8d91d3f1157ebfcd6a3eaf31c38b5a95c75ff0f82a36ac60c497a1106b5830331689a3ed90952fb8041426c084cb0b77c6950", 0xb8, 0x8, 0x0, 0x3}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000002bc0)="006bb21b13b10ba1864bda02a417108b33783f15a48906d3e8e9af54b26d82b522", 0x21, 0x5, 0x0, 0x3, r10}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x2, r11, &(0x7f0000002900)="76db05b0e0cfa347df1da24d168839928ed9053465e425ec82af632a53ab6698c191c5bb3133dac7d6a4d4da09b1a5ebe36cb61bd839963d14b06d82dd489cae03193db6fd075c4a02a462ac056ee73cb9f14e0ab31745ad3b2a04fde65cb0fecdedab2ab3f662eb18db68769a85b82ea3e20f95713e3ae439b43f76619c144aacafe5aed8359f6f1f2cddac5105a9bd566ef1625bfa100617bad97137372f1aa6ff9afaf210edb011273f9651975b8f2ada98f3b9d09a9100dccb1270a72e9ab00342f01999632467961b53be5cda9beb7db35d6c1bdf6208888033d8f4973bb70f362cb02350dac8", 0xe9, 0x9, 0x0, 0x2, r12}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x8, 0x27, r14, &(0x7f0000002a40)="82a9728a70279f323567ae76849685210d3ecf9a46c469a8ccb44fc4544f46feafb957c5c5c50331a3c0033d5b42cee8c6630a4ed50d726c62e8ab4625195e38bbdcab695d362c9ed3d5c67c8e4ec690d7cee3932dcb33cc44d4a888cd7eaf194749738df348a6ccdbe0c31970585cd08bad7d959254988108c3556fd00f111823865821e4a3d8261ac09287c95341f2a30f9bad55f407e11a1a8e216b3905dd8ae7588873698f9b31", 0xa9, 0x1, 0x0, 0x0, r15}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r17, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r18, 0x541b, 0x1000000000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r19}, './file0\x00'}) io_submit(r0, 0x3, &(0x7f0000001240)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r17, &(0x7f00000000c0)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x2, r17, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x7, 0xe, r16, &(0x7f0000000200)="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", 0x1000, 0x4, 0x0, 0x0, r20}]) syz_clone(0x410c5000, 0x0, 0x0, 0x0, 0x0, 0x0) 337.44559ms ago: executing program 5 (id=1617): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000003c0)='a', 0x1}, {&(0x7f0000000100)="d44ad9930413d3a08562a47b0fb2295727056cf954f8640b40716ea8c8d87a3dd673aed316036ee7db36cb41c9a55ff81fb611888a3186373a0b68c78157f88577041e1ddf140a7b0699308ac8259d72c0f934d5bd3caef5dad1e2d459094b5dde81a8b6d04b8fc75e3bf762d435fd2826adc5cf15e12d37f2fbe534984e2c2810221a72f202482a72025a2cfde61052e5ac3b647e314bfe018c8c4fe07a70414ebe7fb8f442dd58ea3eaaa2f9c0c23835aeebf6794fac5e149a8803b52a87f37240aff6f1ca1f48e9f6544b507a23504be111d7462fe5949e7629ccc77388c3bde8545136ce836fc0712e5e9b8f52ebfdc4359fc0196b", 0xf7}, {&(0x7f0000000200)="cc2205a87a6e03c5136ac080d1e9d2d1cfc5681a30f7c0101c713bdb65e10bf27cddbf44f2091b239e45b43dec427653ae1ac42fb88ca24bdd56fd1fa1195428d7b3561151cd1f357be15e1c4df3464b29565d9e2a170e0af64ed5d8362848928c97ac2b904b9aaa7cda1a12", 0x6c}], 0x4}}], 0x1, 0x40d1) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) close_range(r6, r1, 0x0) setpgid(r0, r0) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_getfd(r8, r2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r9, &(0x7f0000002440)=""/181, 0xb5) getdents64(r9, 0xffffffffffffffff, 0xa3a743e7de85212) setns(r8, 0x24020000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 272.083144ms ago: executing program 7 (id=1618): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000000)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nomblk_io_submit}, {@nomblk_io_submit}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nouid32}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) lseek(r2, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="2d030402deff0000000000000004000000000000", @ANYRESHEX=r0, @ANYBLOB="000702000000000000000800"/27], 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x9015) r4 = socket(0x29, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000001d000b63d25a80648c2594f90124fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x90000, 0x0) getdents64(r6, &(0x7f0000001400)=""/219, 0xdb) 225.365736ms ago: executing program 5 (id=1619): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cb9fc430dc"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x850}, 0x80) fcntl$getflags(r0, 0x401) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000000)) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pimreg1\x00'}) 185.178319ms ago: executing program 6 (id=1620): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) unshare(0x8040480) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x20) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000c40)={0x2000000b}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x1b, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x1, 0x5, 0x9, 0x0, 0x7}, @generic={0x0, 0x5, 0x4, 0x0, 0x5}, @alu={0x7, 0x1, 0xc, 0xa, 0x4, 0x20, 0xd729b12ce15f59d0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x2, 0x1000, &(0x7f00000022c0)=""/4096, 0x41000, 0x4, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xa, 0x7, 0x2}, 0x10, r6, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x40000) 104.054333ms ago: executing program 6 (id=1621): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2a, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000540)="a9e47d", 0x3}], 0x3) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'pimreg1\x00', {}, {0xff}, 0x58, 0x5, 0x2b}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d2, 0x4d2], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010100, 0xff0000ff, 0x0, 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x1, 0x5}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0xfff7, 0x9}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x6, 0x232dca81d5c5a277, 0x4, 0x2], 0x1, 0x3}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 95.000514ms ago: executing program 6 (id=1622): mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xda90) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="eebd73c460f8a4a8", 0x8}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x4800, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000050000000200000040000000980e0000", @ANYRES32=r1, @ANYBLOB="0900000000000000000000e5ffffffffffffff00", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500"/28], 0x50) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x6, 0x0) 77.494925ms ago: executing program 7 (id=1623): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f00000005c0)={0x9, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b073130090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07710936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x5}, 0x8) 0s ago: executing program 5 (id=1624): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000500)='./file1\x00', 0x64842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) kernel console output (not intermixed with test programs): allmulticast mode [ 65.930557][ T5904] EXT4-fs mount: 15 callbacks suppressed [ 65.930574][ T5904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.345510][ T5931] sg_write: data in/out 139228/57 bytes for SCSI command 0x0-- guessing data in; [ 66.345510][ T5931] program syz.0.675 not setting count and/or reply_len properly [ 66.512620][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.611924][ T5957] set_capacity_and_notify: 5 callbacks suppressed [ 66.611943][ T5957] loop0: detected capacity change from 0 to 4096 [ 66.631924][ T5957] EXT4-fs (loop0): unsupported descriptor size 255 [ 66.688700][ T5963] loop4: detected capacity change from 0 to 128 [ 66.729468][ T5963] FAT-fs (loop4): bogus number of FAT sectors [ 66.735591][ T5963] FAT-fs (loop4): Can't find a valid FAT filesystem [ 66.938741][ T5966] loop1: detected capacity change from 0 to 2048 [ 66.979988][ T5966] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.032576][ T5966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.710640][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.772050][ T6011] loop0: detected capacity change from 0 to 256 [ 67.856811][ T6026] loop5: detected capacity change from 0 to 512 [ 67.947604][ T6038] usb usb7: usbfs: process 6038 (syz.4.711) did not claim interface 0 before use [ 67.959895][ T6037] usb usb7: usbfs: process 6037 (syz.4.711) did not claim interface 0 before use [ 67.970528][ T6037] loop4: detected capacity change from 0 to 128 [ 67.981615][ T6037] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 68.016596][ T6037] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 68.025432][ T6037] FAT-fs (loop4): Filesystem has been set read-only [ 68.420803][ T6052] __nla_validate_parse: 11 callbacks suppressed [ 68.420826][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.6.715'. [ 68.448626][ T6052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6052 comm=syz.6.715 [ 68.589040][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.716'. [ 68.888933][ T6067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.721'. [ 68.995073][ T6079] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 69.011821][ T6082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 69.018337][ T6082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.026110][ T6082] vhci_hcd vhci_hcd.0: Device attached [ 69.041951][ T6083] vhci_hcd: connection closed [ 69.042147][ T2333] vhci_hcd vhci_hcd.1: stop threads [ 69.052229][ T2333] vhci_hcd vhci_hcd.1: release socket [ 69.052381][ T6086] loop5: detected capacity change from 0 to 2048 [ 69.057750][ T2333] vhci_hcd vhci_hcd.1: disconnect device [ 69.102727][ T6086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.180064][ T6086] sock: sock_set_timeout: `syz.5.728' (pid 6086) tries to set negative timeout [ 69.203634][ T3880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.268375][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.735'. [ 69.336372][ T6110] FAULT_INJECTION: forcing a failure. [ 69.336372][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 69.349139][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.6.737 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.349168][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.349192][ T6110] Call Trace: [ 69.349199][ T6110] [ 69.349207][ T6110] __dump_stack+0x1d/0x30 [ 69.349241][ T6110] dump_stack_lvl+0x95/0xd0 [ 69.349263][ T6110] dump_stack+0x15/0x1b [ 69.349341][ T6110] should_fail_ex+0x263/0x280 [ 69.349370][ T6110] should_failslab+0x8c/0xb0 [ 69.349392][ T6110] __kmalloc_noprof+0xb8/0x580 [ 69.349444][ T6110] ? iovec_from_user+0x84/0x200 [ 69.349537][ T6110] iovec_from_user+0x84/0x200 [ 69.349609][ T6110] __import_iovec+0xf3/0x530 [ 69.349628][ T6110] ? _parse_integer_limit+0x170/0x190 [ 69.349656][ T6110] import_iovec+0x60/0x80 [ 69.349755][ T6110] ___sys_sendmsg+0x160/0x1e0 [ 69.349785][ T6110] __x64_sys_sendmsg+0xd4/0x160 [ 69.349806][ T6110] x64_sys_call+0x17ba/0x3000 [ 69.349828][ T6110] do_syscall_64+0xc0/0x2a0 [ 69.349858][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.349911][ T6110] RIP: 0033:0x7f0ab520aeb9 [ 69.349937][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.349956][ T6110] RSP: 002b:00007f0ab3c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.349978][ T6110] RAX: ffffffffffffffda RBX: 00007f0ab5485fa0 RCX: 00007f0ab520aeb9 [ 69.349991][ T6110] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 69.350056][ T6110] RBP: 00007f0ab3c67090 R08: 0000000000000000 R09: 0000000000000000 [ 69.350069][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.350080][ T6110] R13: 00007f0ab5486038 R14: 00007f0ab5485fa0 R15: 00007ffe89f18028 [ 69.350100][ T6110] [ 69.356952][ T6109] loop0: detected capacity change from 0 to 512 [ 69.409061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.458173][ T6109] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 69.740617][ T6126] netlink: 'syz.0.738': attribute type 13 has an invalid length. [ 69.748379][ T6126] netlink: 'syz.0.738': attribute type 27 has an invalid length. [ 69.942550][ T6139] erspan1: entered allmulticast mode [ 69.948073][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.748'. [ 69.998915][ T29] kauditd_printk_skb: 3888 callbacks suppressed [ 69.998942][ T29] audit: type=1400 audit(1769538154.762:22008): avc: denied { setopt } for pid=6150 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.070494][ T6156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.752'. [ 70.079521][ T6156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.752'. [ 70.113562][ T29] audit: type=1400 audit(1769538154.882:22009): avc: denied { write } for pid=6159 comm="syz.5.753" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.217424][ T6168] loop1: detected capacity change from 0 to 2048 [ 70.234877][ T6168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.262010][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.755'. [ 70.262030][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.755'. [ 70.264504][ T29] audit: type=1400 audit(1769538155.032:22010): avc: denied { getopt } for pid=6165 comm="syz.5.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.289663][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 70.309613][ T6175] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=2048, device loop1 blocksize: 2048 [ 70.309645][ T6175] grow_buffers: requested out-of-range block 144115188075855872 for device loop1 [ 70.309663][ T6175] EXT4-fs warning (device loop1): ext4_resize_fs:2019: can't read last block, resize aborted [ 70.365911][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.416774][ T6180] loop1: detected capacity change from 0 to 256 [ 70.425360][ T6179] vlan3: entered promiscuous mode [ 70.430497][ T6179] bond0: entered promiscuous mode [ 70.435591][ T6179] bond_slave_0: entered promiscuous mode [ 70.441537][ T6179] bond_slave_1: entered promiscuous mode [ 70.540199][ T6184] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.547291][ T6184] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 70.557847][ T6184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 70.566348][ T6184] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.573281][ T6184] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.760: bg 0: block 361: padding at end of block bitmap is not set [ 70.589081][ T6184] EXT4-fs (loop1): Remounting filesystem read-only [ 70.595920][ T6184] EXT4-fs (loop1): 1 truncate cleaned up [ 70.602205][ T6184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 70.634050][ T6184] SELinux: ebitmap start bit (100663296) is beyond the end of the bitmap (320) [ 70.643072][ T6184] SELinux: failed to load policy [ 70.661760][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 70.700191][ T6188] syz.1.761: attempt to access beyond end of device [ 70.700191][ T6188] loop1: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 70.714869][ T6188] syz.1.761: attempt to access beyond end of device [ 70.714869][ T6188] loop1: rw=34817, sector=261, nr_sectors = 32 limit=256 [ 70.732827][ T3507] hid-generic 5D36:0004:0000.000A: unknown main item tag 0x0 [ 70.740285][ T3507] hid-generic 5D36:0004:0000.000A: unknown main item tag 0x0 [ 70.747657][ T3507] hid-generic 5D36:0004:0000.000A: unknown main item tag 0x0 [ 70.755098][ T3507] hid-generic 5D36:0004:0000.000A: unknown main item tag 0x0 [ 70.762510][ T3507] hid-generic 5D36:0004:0000.000A: unknown main item tag 0x0 [ 70.769937][ T3507] hid-generic 5D36:0004:0000.000A: unknown main item tag 0x0 [ 70.777304][ T3507] hid-generic 5D36:0004:0000.000A: unknown main item tag 0x0 [ 70.784693][ T3507] hid-generic 5D36:0004:0000.000A: unknown main item tag 0x0 [ 70.792102][ T3507] hid-generic 5D36:0004:0000.000A: unknown main item tag 0x0 [ 70.800028][ T3507] hid-generic 5D36:0004:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 70.829018][ T6192] fido_id[6192]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 70.844897][ T6194] bond0 (unregistering): Released all slaves [ 70.888756][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811b3cd000: rx timeout, send abort [ 70.897145][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811b3cd000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 70.952500][ T6201] SELinux: Context system_u:object_r:bin_t:s0 is not valid (left unmapped). [ 70.983719][ T6203] ext2: Unknown parameter 'obj_user' [ 71.045366][ T6209] EXT4-fs: inline encryption not supported [ 71.051912][ T6209] EXT4-fs: Ignoring removed oldalloc option [ 71.067274][ T29] audit: type=1326 audit(1769538155.832:22011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 71.088498][ T6209] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.090775][ T29] audit: type=1326 audit(1769538155.832:22012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 71.122660][ T29] audit: type=1326 audit(1769538155.892:22013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 71.146264][ T29] audit: type=1326 audit(1769538155.892:22014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 71.169667][ T29] audit: type=1326 audit(1769538155.892:22015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 71.193066][ T29] audit: type=1326 audit(1769538155.892:22016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 71.216422][ T29] audit: type=1326 audit(1769538155.892:22017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.6.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 71.261111][ T6209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.312049][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.365545][ T6239] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.397735][ T6239] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.456364][ T6252] netlink: 'syz.0.779': attribute type 3 has an invalid length. [ 71.465148][ T6252] netlink: 'syz.0.779': attribute type 3 has an invalid length. [ 71.482189][ T6245] : renamed from veth0_to_bond (while UP) [ 71.500482][ T6252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.531532][ T4654] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.558092][ T6265] EXT4-fs: dax option not supported [ 71.598264][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.636625][ T6272] set_capacity_and_notify: 8 callbacks suppressed [ 71.636643][ T6272] loop0: detected capacity change from 0 to 164 [ 71.652102][ T6272] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.747553][ T6280] 9p: Bad value for 'rfdno' [ 72.644256][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811b12dc00: rx timeout, send abort [ 72.653354][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811b12dc00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 72.702949][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.712621][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.845908][ T6471] loop1: detected capacity change from 0 to 512 [ 72.901065][ T6471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.915919][ T6471] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.184537][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.233389][ T6487] raw_sendmsg: syz.6.812 forgot to set AF_INET. Fix it! [ 73.321606][ T6503] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.362673][ T6503] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.422518][ T6503] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.457695][ T6520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.495957][ T6503] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.506759][ T6525] __nla_validate_parse: 14 callbacks suppressed [ 73.506776][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.823'. [ 73.521860][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.823'. [ 73.554919][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.564539][ T6525] bond1: (slave bond0): making interface the new active one [ 73.573948][ T6525] bond1: (slave bond0): Enslaving as an active interface with an up link [ 73.594340][ T6520] bond1: (slave bond0): Releasing active interface [ 73.606044][ T6520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.630232][ T6529] loop1: detected capacity change from 0 to 128 [ 73.636648][ T58] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.663958][ T58] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.683822][ T58] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.696692][ T58] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.833936][ T6545] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2324 sclass=netlink_xfrm_socket pid=6545 comm=syz.6.834 [ 73.960886][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.836'. [ 74.259789][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'. [ 74.270081][ T6578] loop0: detected capacity change from 0 to 128 [ 74.442653][ T6587] loop6: detected capacity change from 0 to 256 [ 74.475338][ T6587] vfat: Unknown parameter '01777777777777777777777' [ 74.493767][ T6592] netlink: 32 bytes leftover after parsing attributes in process `syz.1.846'. [ 74.506343][ T6592] loop1: detected capacity change from 0 to 512 [ 74.533140][ T6592] EXT4-fs: inline encryption not supported [ 74.539136][ T6592] EXT4-fs: inline encryption not supported [ 74.583626][ T6592] EXT4-fs: Ignoring removed oldalloc option [ 74.604977][ T6592] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 74.625386][ T6592] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.846: invalid indirect mapped block 2683928664 (level 1) [ 74.640885][ T6602] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 74.667748][ T6592] EXT4-fs (loop1): 1 truncate cleaned up [ 74.691497][ T6592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.779429][ T6609] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 74.852311][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 74.861340][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 74.889593][ T6617] FAULT_INJECTION: forcing a failure. [ 74.889593][ T6617] name failslab, interval 1, probability 0, space 0, times 0 [ 74.902264][ T6617] CPU: 0 UID: 0 PID: 6617 Comm: syz.6.862 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.902291][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.902351][ T6617] Call Trace: [ 74.902358][ T6617] [ 74.902366][ T6617] __dump_stack+0x1d/0x30 [ 74.902394][ T6617] dump_stack_lvl+0x95/0xd0 [ 74.902418][ T6617] dump_stack+0x15/0x1b [ 74.902445][ T6617] should_fail_ex+0x263/0x280 [ 74.902477][ T6617] should_failslab+0x8c/0xb0 [ 74.902503][ T6617] __kmalloc_cache_noprof+0x64/0x4a0 [ 74.902574][ T6617] ? nfnetlink_rcv+0xa66/0x1720 [ 74.902604][ T6617] nfnetlink_rcv+0xa66/0x1720 [ 74.902653][ T6617] netlink_unicast+0x5c0/0x690 [ 74.902721][ T6617] netlink_sendmsg+0x5c8/0x6f0 [ 74.902744][ T6617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.902766][ T6617] ____sys_sendmsg+0x5af/0x600 [ 74.902786][ T6617] ___sys_sendmsg+0x195/0x1e0 [ 74.902869][ T6617] __x64_sys_sendmsg+0xd4/0x160 [ 74.902954][ T6617] x64_sys_call+0x17ba/0x3000 [ 74.902982][ T6617] do_syscall_64+0xc0/0x2a0 [ 74.903107][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.903148][ T6617] RIP: 0033:0x7f0ab520aeb9 [ 74.903170][ T6617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.903224][ T6617] RSP: 002b:00007f0ab3c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.903247][ T6617] RAX: ffffffffffffffda RBX: 00007f0ab5485fa0 RCX: 00007f0ab520aeb9 [ 74.903323][ T6617] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 74.903338][ T6617] RBP: 00007f0ab3c67090 R08: 0000000000000000 R09: 0000000000000000 [ 74.903354][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.903368][ T6617] R13: 00007f0ab5486038 R14: 00007f0ab5485fa0 R15: 00007ffe89f18028 [ 74.903460][ T6617] [ 74.903567][ T6579] wireguard0: entered promiscuous mode [ 75.097951][ T6579] wireguard0: entered allmulticast mode [ 75.186958][ T6623] loop6: detected capacity change from 0 to 2048 [ 75.226557][ T6623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.258762][ T6626] xt_CT: No such helper "pptp" [ 75.502975][ T6639] loop5: detected capacity change from 0 to 1024 [ 75.530605][ T6639] EXT4-fs: Ignoring removed orlov option [ 75.540041][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.601910][ T6639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.616643][ T6648] loop1: detected capacity change from 0 to 136 [ 75.693839][ T6648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.870'. [ 75.704148][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.870'. [ 75.713287][ T6648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.870'. [ 75.727587][ T6651] loop0: detected capacity change from 0 to 128 [ 75.748099][ T10] IPVS: starting estimator thread 0... [ 75.756268][ T29] kauditd_printk_skb: 778 callbacks suppressed [ 75.756283][ T29] audit: type=1400 audit(1769538160.522:22796): avc: denied { cpu } for pid=6652 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 75.761198][ T6654] netlink: 'syz.4.874': attribute type 4 has an invalid length. [ 75.799002][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.813960][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.858839][ T3880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.867957][ T6653] IPVS: using max 2352 ests per chain, 117600 per kthread [ 75.892117][ T29] audit: type=1400 audit(1769538160.662:22797): avc: denied { lock } for pid=6658 comm="syz.5.875" path="socket:[16442]" dev="sockfs" ino=16442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.916139][ T29] audit: type=1400 audit(1769538160.662:22798): avc: granted { setsecparam } for pid=6658 comm="syz.5.875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 75.953875][ T4654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.024443][ T6669] xt_CT: No such helper "pptp" [ 76.080757][ T6680] EXT4-fs: Ignoring removed nobh option [ 76.088396][ T29] audit: type=1326 audit(1769538160.852:22799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 76.112921][ T29] audit: type=1326 audit(1769538160.852:22800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ab51cb78e code=0x7ffc0000 [ 76.114468][ T6680] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.882: corrupted inode contents [ 76.138238][ T29] audit: type=1326 audit(1769538160.912:22801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 76.171581][ T29] audit: type=1326 audit(1769538160.912:22802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 76.194993][ T29] audit: type=1326 audit(1769538160.912:22803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 76.195630][ T6680] EXT4-fs (loop5): Remounting filesystem read-only [ 76.218430][ T29] audit: type=1326 audit(1769538160.912:22804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 76.218605][ T29] audit: type=1326 audit(1769538160.922:22805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 76.273337][ T6680] EXT4-fs (loop5): 1 truncate cleaned up [ 76.280413][ T6680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.293060][ T64] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.293091][ T6680] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.303668][ T64] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.325059][ T64] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 76.335665][ T3880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.506924][ T6701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.534155][ T6704] xt_CT: No such helper "pptp" [ 76.550931][ T3880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.702009][ T6720] FAULT_INJECTION: forcing a failure. [ 76.702009][ T6720] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.715154][ T6720] CPU: 1 UID: 0 PID: 6720 Comm: syz.0.893 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.715244][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.715258][ T6720] Call Trace: [ 76.715265][ T6720] [ 76.715323][ T6720] __dump_stack+0x1d/0x30 [ 76.715349][ T6720] dump_stack_lvl+0x95/0xd0 [ 76.715394][ T6720] dump_stack+0x15/0x1b [ 76.715416][ T6720] should_fail_ex+0x263/0x280 [ 76.715477][ T6720] should_fail+0xb/0x20 [ 76.715505][ T6720] should_fail_usercopy+0x1a/0x20 [ 76.715607][ T6720] _copy_to_user+0x20/0xa0 [ 76.715629][ T6720] simple_read_from_buffer+0xb5/0x130 [ 76.715721][ T6720] proc_fail_nth_read+0x10e/0x150 [ 76.715815][ T6720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.715863][ T6720] vfs_read+0x1ab/0x7f0 [ 76.715882][ T6720] ? ____fput+0x1c/0x30 [ 76.715907][ T6720] ? task_work_run+0x169/0x1a0 [ 76.715982][ T6720] ksys_read+0xdc/0x1a0 [ 76.716000][ T6720] __x64_sys_read+0x40/0x50 [ 76.716018][ T6720] x64_sys_call+0x2889/0x3000 [ 76.716043][ T6720] do_syscall_64+0xc0/0x2a0 [ 76.716077][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.716134][ T6720] RIP: 0033:0x7f748f73b78e [ 76.716157][ T6720] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.716173][ T6720] RSP: 002b:00007f748e1d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.716325][ T6720] RAX: ffffffffffffffda RBX: 00007f748e1d76c0 RCX: 00007f748f73b78e [ 76.716339][ T6720] RDX: 000000000000000f RSI: 00007f748e1d70a0 RDI: 0000000000000004 [ 76.716352][ T6720] RBP: 00007f748e1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.716367][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.716381][ T6720] R13: 00007f748f9f6038 R14: 00007f748f9f5fa0 R15: 00007ffce2640398 [ 76.716443][ T6720] [ 77.060519][ T6734] netlink: zone id is out of range [ 77.065737][ T6734] netlink: zone id is out of range [ 77.080461][ T6734] netlink: zone id is out of range [ 77.178120][ T6732] netlink: 'syz.6.899': attribute type 2 has an invalid length. [ 77.203619][ T6734] netlink: set zone limit has 8 unknown bytes [ 77.389728][ T6747] set_capacity_and_notify: 2 callbacks suppressed [ 77.389744][ T6747] loop0: detected capacity change from 0 to 512 [ 77.422241][ T6724] loop5: detected capacity change from 0 to 1024 [ 77.432221][ T6724] EXT4-fs: Ignoring removed bh option [ 77.505291][ T6724] EXT4-fs: Mount option(s) incompatible with ext2 [ 77.538260][ T6747] journal_path: Non-blockdev passed as './file0' [ 77.544728][ T6747] EXT4-fs: error: could not find journal device path [ 77.593766][ T6749] xt_CT: No such helper "pptp" [ 77.881266][ T6756] netlink: 'syz.5.906': attribute type 1 has an invalid length. [ 77.923246][ T6756] loop5: detected capacity change from 0 to 512 [ 77.945269][ T6762] FAT-fs (loop5): error, clusters badly computed (1 != 0) [ 77.985919][ T6732] loop6: detected capacity change from 0 to 8192 [ 78.340187][ T6806] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 78.350391][ T6805] loop0: detected capacity change from 0 to 512 [ 78.398329][ T6788] loop6: detected capacity change from 0 to 512 [ 78.453548][ T6788] EXT4-fs (loop6): orphan cleanup on readonly fs [ 78.466757][ T6788] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 78.480580][ T6788] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 78.499709][ T6788] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.915: attempt to clear invalid blocks 2 len 1 [ 78.513696][ T6788] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.915: invalid indirect mapped block 1819239214 (level 0) [ 78.529717][ T6788] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.915: invalid indirect mapped block 1819239214 (level 1) [ 78.546223][ T6788] EXT4-fs (loop6): 1 truncate cleaned up [ 78.551544][ T6788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.569666][ T6788] EXT4-fs error (device loop6): ext4_lookup:1782: inode #2: comm syz.6.915: 'file1' linked to parent dir [ 78.616728][ T6788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.707245][ T6819] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 78.749708][ T6823] infiniband !yz!: set active [ 78.754414][ T6823] infiniband !yz!: added team_slave_0 [ 78.766640][ T6828] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.776991][ T6828] vhci_hcd vhci_hcd.2: invalid port number 96 [ 78.783131][ T6828] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 78.802723][ T6827] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 78.827732][ T6827] SELinux: failed to load policy [ 78.835713][ T6823] RDS/IB: !yz!: added [ 78.850855][ T6823] smc: adding ib device !yz! with port count 1 [ 78.872612][ T6823] smc: ib device !yz! port 1 has no pnetid [ 79.246605][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.255296][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.627679][ T6858] xt_CT: No such helper "pptp" [ 79.665974][ T6861] syzkaller0: entered promiscuous mode [ 79.671598][ T6861] syzkaller0: entered allmulticast mode [ 79.832094][ T6864] loop1: detected capacity change from 0 to 512 [ 79.866138][ T6864] ext2: Unknown parameter '"' [ 79.945055][ T6874] 9p: Bad value for 'wfdno' [ 80.056982][ T6884] __nla_validate_parse: 7 callbacks suppressed [ 80.057000][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'. [ 80.074299][ T6884] loop1: detected capacity change from 0 to 128 [ 80.168072][ T6897] IPv6: sit1: Disabled Multicast RS [ 80.250163][ T6904] vlan4: entered promiscuous mode [ 80.255294][ T6904] geneve1: entered promiscuous mode [ 80.260559][ T6904] vlan4: entered allmulticast mode [ 80.265695][ T6904] geneve1: entered allmulticast mode [ 80.621047][ T6907] loop0: detected capacity change from 0 to 8192 [ 80.699186][ T3303] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 80.704509][ T3303] loop0: partition table partially beyond EOD, truncated [ 80.716516][ T3303] loop0: p1 start 100663296 is beyond EOD, truncated [ 80.723319][ T3303] loop0: p2 size 134217732 extends beyond EOD, truncated [ 80.731945][ T3303] loop0: p4 size 14876672 extends beyond EOD, truncated [ 80.739563][ T3303] loop0: p5 size 134217732 extends beyond EOD, truncated [ 80.743585][ T36] IPVS: starting estimator thread 0... [ 80.747390][ T3303] loop0: p6 size 14876672 extends beyond EOD, truncated [ 80.770238][ T6907] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 80.775543][ T6907] loop0: partition table partially beyond EOD, truncated [ 80.775608][ T6918] netlink: 1096 bytes leftover after parsing attributes in process `syz.6.962'. [ 80.792040][ T6907] loop0: p1 start 100663296 is beyond EOD, truncated [ 80.798805][ T6907] loop0: p2 size 134217732 extends beyond EOD, truncated [ 80.807203][ T6907] loop0: p4 size 14876672 extends beyond EOD, truncated [ 80.814898][ T6907] loop0: p5 size 134217732 extends beyond EOD, truncated [ 80.822841][ T6907] loop0: p6 size 14876672 extends beyond EOD, truncated [ 80.849115][ T6916] IPVS: using max 2352 ests per chain, 117600 per kthread [ 80.867475][ T6924] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 80.879671][ T6923] loop1: detected capacity change from 0 to 512 [ 80.888001][ T6921] IPVS: set_ctl: invalid protocol: 11608 255.255.255.255:20001 [ 80.909844][ T6923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.926296][ T6923] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.942215][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.967'. [ 80.951200][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.967'. [ 80.953233][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 80.981934][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.964'. [ 81.019598][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.967'. [ 81.023647][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 81.028637][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.967'. [ 81.041291][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 81.050496][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 81.061506][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 81.068371][ T3907] udevd[3907]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 81.099109][ T6449] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.126402][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.126630][ T6449] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.149375][ T6944] sd 0:0:1:0: device reset [ 81.158817][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 81.159661][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 81.179335][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 81.191181][ T3907] udevd[3907]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 81.208698][ T3904] udevd[3904]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 81.232568][ T6449] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.250860][ T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.264106][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.5.971'. [ 81.275751][ T6946] netlink: 'syz.5.971': attribute type 1 has an invalid length. [ 81.321691][ T6948] EXT4-fs: Ignoring removed bh option [ 81.327135][ T6948] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.389275][ T6948] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 81.402396][ T6948] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 81.410488][ T6948] EXT4-fs (loop6): orphan cleanup on readonly fs [ 81.417219][ T6948] __quota_error: 286 callbacks suppressed [ 81.417234][ T6948] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 81.432713][ T6948] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 81.442532][ T6948] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.972: Failed to acquire dquot type 1 [ 81.451094][ T6959] syzkaller1: entered promiscuous mode [ 81.454232][ T6948] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.972: Invalid block bitmap block 0 in block_group 0 [ 81.466985][ T6959] syzkaller1: entered allmulticast mode [ 81.493148][ T6948] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.972: Invalid block bitmap block 0 in block_group 0 [ 81.518125][ T6959] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 81.584728][ T6948] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.972: Invalid block bitmap block 0 in block_group 0 [ 81.674957][ T6975] xt_CT: No such helper "pptp" [ 81.697026][ T6948] Quota error (device loop6): write_blk: dquota write failed [ 81.704516][ T6948] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 81.714416][ T6948] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.972: Failed to acquire dquot type 1 [ 81.731743][ T6948] Quota error (device loop6): write_blk: dquota write failed [ 81.739226][ T6948] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 81.749161][ T6948] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.972: Failed to acquire dquot type 1 [ 81.763156][ T6952] netlink: 'syz.5.973': attribute type 2 has an invalid length. [ 81.772705][ T6948] EXT4-fs (loop6): 1 orphan inode deleted [ 81.778699][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 81.809214][ T6948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.845609][ T6948] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 81.864828][ T4654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.897446][ T29] audit: type=1400 audit(1769538166.662:23086): avc: denied { lock } for pid=6987 comm="syz.0.984" path="socket:[17632]" dev="sockfs" ino=17632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.925494][ T6993] bond1: (slave bond_slave_1): Device is not our slave [ 81.932435][ T6993] bond1: option active_slave: invalid value (bond_slave_1) [ 81.943435][ T6993] bond1 (unregistering): Released all slaves [ 82.015380][ T7002] EXT4-fs: Ignoring removed bh option [ 82.120669][ T7008] xt_CT: No such helper "pptp" [ 82.131723][ T7002] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002] [ 82.147751][ T7002] System zones: 0-2, 18-18, 34-35 [ 82.158423][ T7002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.180060][ T7002] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.212004][ T29] audit: type=1400 audit(1769538166.972:23087): avc: denied { getopt } for pid=7003 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.234347][ T7002] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.989: iget: bad i_size value: 2533274857506816 [ 82.304828][ T29] audit: type=1400 audit(1769538167.072:23088): avc: denied { rmdir } for pid=7001 comm="syz.6.989" name="control" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.375117][ T4654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.385216][ T7027] xt_hashlimit: size too large, truncated to 1048576 [ 82.473727][ T7034] netlink: 'syz.1.1000': attribute type 58 has an invalid length. [ 82.509663][ T7033] netlink: 'syz.1.1000': attribute type 58 has an invalid length. [ 82.518263][ T7037] veth1_to_bond: Caught tx_queue_len zero misconfig [ 82.656057][ T7051] netlink: 'syz.5.1001': attribute type 5 has an invalid length. [ 82.683445][ T7050] sctp: [Deprecated]: syz.0.1005 (pid 7050) Use of int in max_burst socket option. [ 82.683445][ T7050] Use struct sctp_assoc_value instead [ 82.717067][ T7054] set_capacity_and_notify: 3 callbacks suppressed [ 82.717086][ T7054] loop1: detected capacity change from 0 to 2048 [ 82.821217][ T7063] loop0: detected capacity change from 0 to 164 [ 82.835984][ T7054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.846403][ T7047] xt_CT: No such helper "pptp" [ 82.877717][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.973769][ T7074] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 82.979448][ T29] audit: type=1326 audit(1769538167.742:23089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750b8aaeb9 code=0x7ffc0000 [ 82.983212][ T7072] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 83.117119][ T7080] loop6: detected capacity change from 0 to 128 [ 83.672034][ T7101] loop0: detected capacity change from 0 to 512 [ 83.681889][ T7101] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 3: comm syz.0.1019: lblock 0 mapped to illegal pblock 3 (length 1) [ 83.696313][ T7101] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.1019: error -117 reading directory block [ 83.723417][ T7101] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 83.732236][ T7101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.749963][ T7101] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #2: comm syz.0.1019: corrupted xattr block 255: invalid header [ 83.763870][ T7101] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 83.791237][ T7101] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.862375][ T7125] loop0: detected capacity change from 0 to 1024 [ 83.888331][ T7125] EXT4-fs: Ignoring removed oldalloc option [ 83.905418][ T7125] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 83.952754][ T7125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.033534][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.253015][ T7176] loop5: detected capacity change from 0 to 512 [ 84.263446][ T7176] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 84.286818][ T7181] 9pnet_fd: Insufficient options for proto=fd [ 84.327436][ T7191] loop6: detected capacity change from 0 to 164 [ 84.353536][ T7196] loop0: detected capacity change from 0 to 512 [ 84.410602][ T7196] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 84.424696][ T7206] x_tables: duplicate underflow at hook 3 [ 84.432237][ T7196] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1046: invalid indirect mapped block 2683928664 (level 1) [ 84.435672][ T7206] dummy0: entered promiscuous mode [ 84.457937][ T7196] EXT4-fs (loop0): Remounting filesystem read-only [ 84.483841][ T7196] EXT4-fs (loop0): 1 truncate cleaned up [ 84.487381][ T7206] dummy0: left promiscuous mode [ 84.502105][ T7196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.504142][ T7217] netlink: 'syz.1.1053': attribute type 33 has an invalid length. [ 84.565297][ T7225] loop6: detected capacity change from 0 to 128 [ 84.572575][ T7225] FAT-fs (loop6): bogus number of reserved sectors [ 84.579155][ T7225] FAT-fs (loop6): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 84.590789][ T7225] FAT-fs (loop6): Can't find a valid FAT filesystem [ 85.183378][ T7263] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 85.627788][ T7290] pim6reg: entered allmulticast mode [ 85.642656][ T2135] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.651115][ T2135] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.659564][ T7293] pim6reg: left allmulticast mode [ 85.668629][ T7295] __nla_validate_parse: 15 callbacks suppressed [ 85.668647][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1070'. [ 85.698487][ T2135] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.707722][ T2135] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.722075][ T2135] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.731362][ T2135] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.740226][ T2135] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.748697][ T2135] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.805253][ T7304] loop5: detected capacity change from 0 to 1024 [ 85.811962][ T7304] EXT4-fs: Ignoring removed orlov option [ 85.826733][ T7304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.841307][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.851476][ T3305] loop6: p1 p2 p4 [ 85.875986][ T3305] loop6: p4 size 262912 extends beyond EOD, truncated [ 85.902533][ T7300] loop6: p1 p2 p4 [ 85.907631][ T7300] loop6: p4 size 262912 extends beyond EOD, truncated [ 85.950560][ T7307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.965802][ T7307] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.978721][ T7307] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1073: bg 0: block 112: padding at end of block bitmap is not set [ 85.994170][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1072'. [ 86.043244][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 86.118534][ T3880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.437300][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 86.437317][ T29] audit: type=1326 audit(1769538171.202:23336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750b8aaeb9 code=0x7ffc0000 [ 86.443425][ T2135] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.443635][ T29] audit: type=1326 audit(1769538171.202:23337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750b8aaeb9 code=0x7ffc0000 [ 86.468234][ T2135] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.524893][ T2135] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.534281][ T6449] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.546074][ T7327] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 86.555365][ T7327] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 86.565201][ T7327] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1078: bad orphan inode 4 [ 86.579195][ T7327] EXT4-fs (loop1): 1 orphan inode deleted [ 86.586574][ T7327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.618367][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.673608][ T7342] batadv1: entered promiscuous mode [ 86.682275][ T29] audit: type=1400 audit(1769538171.452:23338): avc: denied { create } for pid=7339 comm="syz.6.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 86.737044][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1084'. [ 86.778476][ T7345] team0 (unregistering): Port device team_slave_0 removed [ 86.797654][ T7345] team0 (unregistering): Port device team_slave_1 removed [ 86.954090][ T7360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.972022][ T7354] GPT:first_usable_lbas don't match. [ 86.977409][ T7354] GPT:34 != 290 [ 86.980925][ T7354] GPT: Use GNU Parted to correct GPT errors. [ 86.986980][ T7354] loop6: p1 p2 p3 [ 87.003538][ T3002] GPT:first_usable_lbas don't match. [ 87.008985][ T3002] GPT:34 != 290 [ 87.012439][ T3002] GPT: Use GNU Parted to correct GPT errors. [ 87.018483][ T3002] loop6: p1 p2 p3 [ 87.056964][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 87.071964][ T29] audit: type=1400 audit(1769538171.842:23339): avc: denied { create } for pid=7376 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.111688][ T3907] udevd[3907]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 87.117374][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 87.132605][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 87.195346][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'. [ 87.271709][ T29] audit: type=1400 audit(1769538171.872:23340): avc: denied { ioctl } for pid=7380 comm="syz.6.1090" path="socket:[18515]" dev="sockfs" ino=18515 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.356334][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 87.368404][ T3907] udevd[3907]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 87.390888][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 87.454744][ T7395] xt_CT: No such helper "pptp" [ 87.594406][ T29] audit: type=1326 audit(1769538172.362:23341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750b8aaeb9 code=0x7ffc0000 [ 87.627661][ T29] audit: type=1326 audit(1769538172.362:23342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750b8aaeb9 code=0x7ffc0000 [ 87.651360][ T29] audit: type=1326 audit(1769538172.372:23343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f750b8aaeb9 code=0x7ffc0000 [ 87.675960][ T29] audit: type=1326 audit(1769538172.442:23344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750b8aaeb9 code=0x7ffc0000 [ 87.699511][ T29] audit: type=1326 audit(1769538172.442:23345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750b8aaeb9 code=0x7ffc0000 [ 87.774379][ T7422] netlink: 'syz.5.1102': attribute type 1 has an invalid length. [ 87.782251][ T7422] netlink: 'syz.5.1102': attribute type 2 has an invalid length. [ 87.796667][ T7422] bond2 (unregistering): Released all slaves [ 87.846960][ T7427] set_capacity_and_notify: 5 callbacks suppressed [ 87.847055][ T7427] loop5: detected capacity change from 0 to 1024 [ 87.860949][ T7427] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.871918][ T7427] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.904641][ T7427] JBD2: no valid journal superblock found [ 87.910435][ T7427] EXT4-fs (loop5): Could not load journal inode [ 88.062588][ T7447] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1109'. [ 88.071832][ T7447] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1109'. [ 88.197301][ T7459] xt_CT: No such helper "pptp" [ 88.301876][ T7465] loop1: detected capacity change from 0 to 512 [ 88.344779][ T7465] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1113: corrupted inode contents [ 88.376143][ T7465] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 88.392076][ T7465] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1113: corrupted inode contents [ 88.460851][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 88.472721][ T7496] loop0: detected capacity change from 0 to 128 [ 88.580022][ T7501] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4 sclass=netlink_xfrm_socket pid=7501 comm=syz.6.1120 [ 88.622629][ T7465] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm syz.1.1113: mark_inode_dirty error [ 88.698200][ T7465] EXT4-fs (loop1): 1 orphan inode deleted [ 88.889990][ T7465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.023674][ T7526] xt_CT: No such helper "pptp" [ 89.108145][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.162524][ T7540] syzkaller1: entered promiscuous mode [ 89.168029][ T7540] syzkaller1: entered allmulticast mode [ 89.198554][ T7542] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1131'. [ 89.239770][ T7547] syzkaller1: left promiscuous mode [ 89.245014][ T7547] syzkaller1: left allmulticast mode [ 89.314104][ T7564] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 89.318210][ T7559] loop1: detected capacity change from 0 to 512 [ 89.335481][ T7564] bond1 (unregistering): Released all slaves [ 89.352808][ T7559] EXT4-fs: Ignoring removed nobh option [ 89.379262][ T7559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.396790][ T7559] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.419816][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 89.467863][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.473177][ T7567] loop5: detected capacity change from 0 to 512 [ 89.479653][ T7571] vlan2: entered allmulticast mode [ 89.488237][ T7571] bridge_slave_0: entered allmulticast mode [ 89.625707][ T7587] loop0: detected capacity change from 0 to 512 [ 89.649535][ T7587] EXT4-fs: Ignoring removed i_version option [ 89.655571][ T7587] EXT4-fs: Ignoring removed bh option [ 89.726881][ T7594] loop1: detected capacity change from 0 to 128 [ 89.848063][ T7562] xt_CT: No such helper "pptp" [ 89.858079][ T7587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.921885][ T7587] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.006999][ T7602] loop6: detected capacity change from 0 to 512 [ 90.026319][ T7587] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 90.067090][ T7605] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 90.083983][ T7602] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 90.116667][ T7587] bond0: entered promiscuous mode [ 90.122307][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.131720][ T7602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 90.139760][ T7602] System zones: 1-12 [ 90.149411][ T7602] EXT4-fs (loop6): 1 truncate cleaned up [ 90.153432][ T7609] bond0: (slave bridge1): making interface the new active one [ 90.162594][ T7609] bridge1: entered promiscuous mode [ 90.169335][ T7609] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 90.179214][ T7602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.209114][ T7616] netlink: 'syz.4.1151': attribute type 4 has an invalid length. [ 90.225254][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.460380][ T7643] xt_CT: No such helper "pptp" [ 90.479132][ T7646] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 90.486466][ T7646] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 90.511334][ T7646] loop1: detected capacity change from 0 to 1024 [ 90.518796][ T7646] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 90.530605][ T7646] JBD2: no valid journal superblock found [ 90.536342][ T7646] EXT4-fs (loop1): Could not load journal inode [ 90.581337][ T7650] loop1: detected capacity change from 0 to 8192 [ 90.629119][ T7650] netlink: 'syz.1.1161': attribute type 27 has an invalid length. [ 90.668065][ T7654] netlink: 'syz.1.1162': attribute type 32 has an invalid length. [ 90.676019][ T7654] __nla_validate_parse: 8 callbacks suppressed [ 90.676033][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 90.696123][ T7654] bond1: option coupled_control: invalid value (103) [ 90.703699][ T7654] bond1 (unregistering): Released all slaves [ 90.842781][ T4654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.904755][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1166'. [ 90.914242][ T7692] EXT4-fs: Ignoring removed bh option [ 90.920424][ T7692] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.927365][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1166'. [ 90.941989][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1166'. [ 90.951984][ T7692] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 90.979644][ T7692] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 90.990660][ T7692] EXT4-fs (loop6): orphan cleanup on readonly fs [ 90.998365][ T7692] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1163: Failed to acquire dquot type 1 [ 91.010393][ T7692] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1163: Invalid block bitmap block 0 in block_group 0 [ 91.024411][ T7692] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1163: Invalid block bitmap block 0 in block_group 0 [ 91.038242][ T7692] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1163: Invalid block bitmap block 0 in block_group 0 [ 91.058588][ T7692] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1163: Failed to acquire dquot type 1 [ 91.070479][ T7692] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1163: Failed to acquire dquot type 1 [ 91.082056][ T7692] EXT4-fs (loop6): 1 orphan inode deleted [ 91.088462][ T7692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.126737][ T7692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.202271][ T7715] xt_CT: No such helper "pptp" [ 91.258013][ T7728] bridge_slave_0: left promiscuous mode [ 91.264454][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.275174][ T7728] bridge_slave_1: left allmulticast mode [ 91.281062][ T7728] bridge_slave_1: left promiscuous mode [ 91.286835][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.296112][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1169'. [ 91.311080][ T7728] bond0: (slave bond_slave_0): Releasing backup interface [ 91.327285][ T7728] bond0: (slave bond_slave_1): Releasing backup interface [ 91.341451][ T7728] team0: Port device team_slave_0 removed [ 91.359189][ T7728] team0: Port device team_slave_1 removed [ 91.370833][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.378420][ T7728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.390296][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.397719][ T7728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.408346][ T7728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 91.670537][ T7751] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.1175: corrupted in-inode xattr: e_value size too large [ 91.685031][ T7751] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1175: couldn't read orphan inode 15 (err -117) [ 91.698013][ T7751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.728642][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.733026][ T7758] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 91.748363][ T7758] bond2 (unregistering): Released all slaves [ 91.804493][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1179'. [ 91.829326][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 91.935237][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1179'. [ 92.044821][ T7777] xt_CT: No such helper "pptp" [ 92.086907][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 92.086924][ T29] audit: type=1400 audit(1769538176.852:23405): avc: denied { setattr } for pid=7786 comm="syz.1.1186" name="NETLINK" dev="sockfs" ino=18941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.178343][ T7801] sock: sock_timestamping_bind_phc: sock not bind to device [ 92.193517][ T7796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.261212][ T7811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=7811 comm=syz.4.1196 [ 92.278340][ T7796] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.291510][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1195'. [ 92.339910][ T7817] syz.1.1197: attempt to access beyond end of device [ 92.339910][ T7817] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 92.372927][ T7815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7815 comm=syz.6.1195 [ 92.388147][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1195'. [ 92.389656][ T29] audit: type=1400 audit(1769538177.152:23406): avc: denied { read write } for pid=7814 comm="syz.6.1195" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.422653][ T29] audit: type=1400 audit(1769538177.152:23407): avc: denied { open } for pid=7814 comm="syz.6.1195" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.447930][ T29] audit: type=1400 audit(1769538177.152:23408): avc: denied { ioctl } for pid=7814 comm="syz.6.1195" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.484497][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.634796][ T7852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.674075][ T7852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.683854][ T29] audit: type=1400 audit(1769538177.272:23409): avc: denied { read write } for pid=7822 comm="syz.4.1199" name="file1" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.706897][ T29] audit: type=1400 audit(1769538177.272:23410): avc: denied { open } for pid=7822 comm="syz.4.1199" path="/230/file1" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.730933][ T29] audit: type=1400 audit(1769538177.302:23411): avc: denied { rename } for pid=7822 comm="syz.4.1199" name="file1" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.753662][ T29] audit: type=1400 audit(1769538177.322:23412): avc: denied { setattr } for pid=7822 comm="syz.4.1199" name="file7" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.777397][ T29] audit: type=1326 audit(1769538177.372:23413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effaf9eaeb9 code=0x7ffc0000 [ 92.801725][ T29] audit: type=1326 audit(1769538177.372:23414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effaf9eaeb9 code=0x7ffc0000 [ 92.834137][ T7852] bond0 (unregistering): Released all slaves [ 92.865406][ T7861] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1205: invalid indirect mapped block 256 (level 2) [ 92.883705][ T7872] set_capacity_and_notify: 8 callbacks suppressed [ 92.883721][ T7872] loop0: detected capacity change from 0 to 512 [ 92.897332][ T7861] EXT4-fs (loop6): 2 truncates cleaned up [ 92.926695][ T7872] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1213: casefold flag without casefold feature [ 92.940979][ T7872] EXT4-fs (loop0): Remounting filesystem read-only [ 92.986017][ T7879] netlink: 'syz.5.1214': attribute type 3 has an invalid length. [ 93.064273][ T2135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.112660][ T2135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.165081][ T2135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.223069][ T2135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.306827][ T2135] bridge_slave_1: left allmulticast mode [ 93.313275][ T2135] bridge_slave_1: left promiscuous mode [ 93.318956][ T2135] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.342815][ T2135] bridge_slave_0: left allmulticast mode [ 93.348519][ T2135] bridge_slave_0: left promiscuous mode [ 93.354277][ T2135] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.485563][ T7911] loop6: detected capacity change from 0 to 1024 [ 93.492621][ T7911] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.503552][ T7911] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 93.514004][ T7911] JBD2: no valid journal superblock found [ 93.519756][ T7911] EXT4-fs (loop6): Could not load journal inode [ 93.558107][ T2135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.574469][ T2135] bond_slave_0: left promiscuous mode [ 93.589190][ T2135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.589940][ T7915] netlink: 'syz.5.1220': attribute type 3 has an invalid length. [ 93.605791][ T2135] bond_slave_1: left promiscuous mode [ 93.612041][ T2135] bond0 (unregistering): Released all slaves [ 93.750158][ T2135] hsr_slave_0: left promiscuous mode [ 93.755889][ T2135] hsr_slave_1: left promiscuous mode [ 93.763054][ T2135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.770868][ T2135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.788551][ T2135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.796616][ T2135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.810636][ T7943] loop0: detected capacity change from 0 to 256 [ 93.825447][ T2135] veth1_macvtap: left promiscuous mode [ 93.834129][ T2135] veth0_macvtap: left promiscuous mode [ 93.844468][ T2135] veth1_vlan: left promiscuous mode [ 93.854405][ T2135] veth0_vlan: left promiscuous mode [ 93.902909][ T7956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7956 comm=syz.0.1228 [ 94.027548][ T2135] team0 (unregistering): Port device team_slave_1 removed [ 94.037822][ T2135] team0 (unregistering): Port device team_slave_0 removed [ 94.045600][ T12] smc: removing ib device !yz! [ 94.097604][ T7887] chnl_net:caif_netlink_parms(): no params data found [ 94.130148][ T7972] new mount options do not match the existing superblock, will be ignored [ 94.197760][ T7979] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 94.275530][ T7981] netlink: 'syz.6.1233': attribute type 3 has an invalid length. [ 94.286891][ T7981] netlink: 'syz.6.1233': attribute type 3 has an invalid length. [ 94.320070][ T7981] loop6: detected capacity change from 0 to 512 [ 94.355302][ T7981] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 94.380277][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.387377][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.412580][ T7887] bridge_slave_0: entered allmulticast mode [ 94.420519][ T7887] bridge_slave_0: entered promiscuous mode [ 94.427310][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.434445][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.443546][ T7887] bridge_slave_1: entered allmulticast mode [ 94.450039][ T7887] bridge_slave_1: entered promiscuous mode [ 94.459818][ T7981] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1233: invalid indirect mapped block 4294967295 (level 0) [ 94.483793][ T7981] EXT4-fs (loop6): Remounting filesystem read-only [ 94.522516][ T7981] EXT4-fs (loop6): 1 orphan inode deleted [ 94.528269][ T7981] EXT4-fs (loop6): 1 truncate cleaned up [ 94.554792][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.586093][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.616946][ T7887] team0: Port device team_slave_0 added [ 94.627558][ T7887] team0: Port device team_slave_1 added [ 94.648638][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.655762][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.681935][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.720210][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.727166][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.753873][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.783667][ T8013] loop0: detected capacity change from 0 to 8192 [ 94.792532][ T8020] loop6: detected capacity change from 0 to 512 [ 94.809873][ T8020] EXT4-fs (loop6): failed to initialize system zone (-117) [ 94.819020][ T8020] EXT4-fs (loop6): mount failed [ 94.822276][ T2135] IPVS: stop unused estimator thread 0... [ 94.840266][ T3303] loop0: p1 p2 p4 [ 94.867968][ T7887] hsr_slave_0: entered promiscuous mode [ 94.877650][ T3303] loop0: p4 size 262912 extends beyond EOD, truncated [ 94.880941][ T7887] hsr_slave_1: entered promiscuous mode [ 94.901519][ T8013] loop0: p1 p2 p4 [ 94.921673][ T8013] loop0: p4 size 262912 extends beyond EOD, truncated [ 95.124193][ T7887] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 95.155949][ T7887] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 95.174899][ T7887] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 95.196949][ T7887] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 95.259265][ T8046] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 95.287711][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.350905][ T7887] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.380684][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.387750][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.534530][ T2135] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.541621][ T2135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.613086][ T8065] loop0: detected capacity change from 0 to 512 [ 95.620194][ T8065] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.629350][ T8065] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 95.729770][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.991285][ T7887] veth0_vlan: entered promiscuous mode [ 96.011395][ T8083] netlink: 'syz.4.1248': attribute type 4 has an invalid length. [ 96.022317][ T7887] veth1_vlan: entered promiscuous mode [ 96.040598][ T7887] veth0_macvtap: entered promiscuous mode [ 96.047992][ T7887] veth1_macvtap: entered promiscuous mode [ 96.059423][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.071304][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.086770][ T8100] veth0: entered allmulticast mode [ 96.100596][ T8100] __nla_validate_parse: 12 callbacks suppressed [ 96.100612][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 96.134262][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.163998][ T31] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.180261][ T8102] dvmrp1: entered allmulticast mode [ 96.189292][ T31] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.208361][ T31] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.217447][ T8083] dvmrp1: left allmulticast mode [ 96.241129][ T8109] team_slave_0: entered promiscuous mode [ 96.246817][ T8109] team_slave_1: entered promiscuous mode [ 96.259355][ T8109] macvtap1: entered allmulticast mode [ 96.264763][ T8109] team0: entered allmulticast mode [ 96.270014][ T8109] team_slave_0: entered allmulticast mode [ 96.275771][ T8109] team_slave_1: entered allmulticast mode [ 96.304434][ T8109] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 96.331595][ T8109] team0: left allmulticast mode [ 96.336889][ T8109] team_slave_0: left allmulticast mode [ 96.343093][ T8109] team_slave_1: left allmulticast mode [ 96.348675][ T8109] team_slave_0: left promiscuous mode [ 96.354067][ T8109] team_slave_1: left promiscuous mode [ 96.445710][ T8120] loop7: detected capacity change from 0 to 512 [ 96.463665][ T8120] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.498619][ T8120] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 96.520546][ T8123] loop5: detected capacity change from 0 to 512 [ 96.528803][ T8120] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1256: bg 0: block 248: padding at end of block bitmap is not set [ 96.544631][ T8123] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 96.555642][ T8123] EXT4-fs (loop5): orphan cleanup on readonly fs [ 96.562429][ T8123] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 96.575511][ T8120] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1256: Failed to acquire dquot type 1 [ 96.588565][ T8123] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 96.589484][ T8120] EXT4-fs (loop7): 1 truncate cleaned up [ 96.601465][ T8120] EXT4-fs mount: 6 callbacks suppressed [ 96.601480][ T8120] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 96.602491][ T8123] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.1253: invalid fast symlink length 9000 [ 96.632850][ T8123] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1253: couldn't read orphan inode 16 (err -117) [ 96.637108][ T8120] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.1256: deleted inode referenced: 12 [ 96.656843][ T8123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.674682][ T8115] netlink: 'syz.4.1255': attribute type 2 has an invalid length. [ 96.685494][ T3880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.704681][ T7887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 96.900174][ T8155] netlink: 'syz.7.1268': attribute type 1 has an invalid length. [ 96.911535][ T8142] netlink: 536 bytes leftover after parsing attributes in process `syz.6.1264'. [ 96.923673][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8149 comm=syz.5.1263 [ 97.116411][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 97.116426][ T29] audit: type=1326 audit(1769538181.882:23526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 97.146293][ T29] audit: type=1326 audit(1769538181.882:23527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 97.172670][ T8177] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 97.235373][ T29] audit: type=1326 audit(1769538181.962:23528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 97.258945][ T29] audit: type=1326 audit(1769538181.962:23529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 97.282440][ T29] audit: type=1326 audit(1769538181.962:23530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 97.305939][ T29] audit: type=1326 audit(1769538181.962:23531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f748f73b78e code=0x7ffc0000 [ 97.329567][ T29] audit: type=1326 audit(1769538181.962:23532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f748f73b78e code=0x7ffc0000 [ 97.353039][ T29] audit: type=1326 audit(1769538181.962:23533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 97.376542][ T29] audit: type=1326 audit(1769538181.962:23534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 97.387562][ T8187] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1275'. [ 97.400073][ T29] audit: type=1326 audit(1769538181.962:23535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 97.453209][ T8189] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1275'. [ 97.462245][ T8189] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1275'. [ 97.510064][ T8187] bond0 (unregistering): Released all slaves [ 97.570219][ T8189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65528 sclass=netlink_route_socket pid=8189 comm=syz.5.1275 [ 97.585301][ T8201] IPv6: addrconf: prefix option has invalid lifetime [ 97.592101][ T8201] IPv6: addrconf: prefix option has invalid lifetime [ 97.692567][ T8206] loop0: detected capacity change from 0 to 256 [ 97.775333][ T8211] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 97.786245][ T8211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.796516][ T8211] block device autoloading is deprecated and will be removed. [ 97.804115][ T8211] EXT4-fs (loop6): couldn't read superblock of external journal [ 97.815002][ T8211] ALSA: seq fatal error: cannot create timer (-22) [ 98.022354][ T8230] set_capacity_and_notify: 1 callbacks suppressed [ 98.022369][ T8230] loop0: detected capacity change from 0 to 512 [ 98.043035][ T8230] EXT4-fs: inline encryption not supported [ 98.059103][ T8233] netlink: 'syz.7.1292': attribute type 4 has an invalid length. [ 98.078168][ T8230] EXT4-fs (loop0): 1 orphan inode deleted [ 98.091375][ T8234] tipc: Started in network mode [ 98.096295][ T8234] tipc: Node identity 7f000001, cluster identity 4711 [ 98.108048][ T2135] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 98.122177][ T8230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.145859][ T8234] tipc: Enabled bearer , priority 10 [ 98.166974][ T8230] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.235580][ T8230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.248203][ T8252] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1298'. [ 98.273076][ T8252] loop7: detected capacity change from 0 to 512 [ 98.289709][ T8252] EXT4-fs: Ignoring removed nobh option [ 98.369813][ T8252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.411459][ T8252] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.425097][ T8260] netlink: 'syz.0.1302': attribute type 13 has an invalid length. [ 98.592010][ T7887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.910811][ T41] bond1: (slave ip6gretap1): link status up again after 0 ms [ 98.929286][ T2135] bond1: (slave ip6gretap1): link status up again after 0 ms [ 98.936705][ T2135] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 98.950309][ T8277] syzkaller0: entered promiscuous mode [ 98.955895][ T8277] syzkaller0: entered allmulticast mode [ 98.983596][ T8278] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1303'. [ 99.049222][ T41] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 99.160795][ T64] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 99.210206][ T8289] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1308'. [ 99.259726][ T3402] tipc: Node number set to 2130706433 [ 99.269314][ T64] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 99.678089][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1317'. [ 99.874040][ T8303] Set syz1 is full, maxelem 65536 reached [ 100.054749][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 100.097610][ T8343] netlink: 'syz.7.1325': attribute type 2 has an invalid length. [ 100.107380][ T8336] 9p: Bad value for 'rfdno' [ 100.173563][ T8349] team_slave_0: entered promiscuous mode [ 100.179346][ T8349] team_slave_1: entered promiscuous mode [ 100.185735][ T8349] macvtap1: entered allmulticast mode [ 100.191177][ T8349] team0: entered allmulticast mode [ 100.196333][ T8349] team_slave_0: entered allmulticast mode [ 100.202081][ T8349] team_slave_1: entered allmulticast mode [ 100.208970][ T8349] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 100.219825][ T8349] team0: left allmulticast mode [ 100.224745][ T8349] team_slave_0: left allmulticast mode [ 100.230302][ T8349] team_slave_1: left allmulticast mode [ 100.235778][ T8349] team_slave_0: left promiscuous mode [ 100.241160][ T8349] team_slave_1: left promiscuous mode [ 100.254837][ T8347] ip6tnl0: Caught tx_queue_len zero misconfig [ 100.281627][ T8347] loop0: detected capacity change from 0 to 512 [ 100.288482][ T8347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.303794][ T8347] EXT4-fs (loop0): 1 orphan inode deleted [ 100.309615][ T8347] EXT4-fs (loop0): 1 truncate cleaned up [ 100.330422][ T8347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.461143][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.871638][ T8404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.885512][ T8404] vlan5: entered allmulticast mode [ 100.890724][ T8404] bond1: entered allmulticast mode [ 100.956168][ T8410] loop5: detected capacity change from 0 to 2048 [ 101.033209][ T8415] loop5: detected capacity change from 0 to 128 [ 101.092568][ T8415] syz.5.1350: attempt to access beyond end of device [ 101.092568][ T8415] loop5: rw=2049, sector=153, nr_sectors = 16 limit=128 [ 101.103116][ T8418] netlink: 'syz.5.1350': attribute type 3 has an invalid length. [ 101.109872][ T8415] syz.5.1350: attempt to access beyond end of device [ 101.109872][ T8415] loop5: rw=2049, sector=177, nr_sectors = 16 limit=128 [ 101.130326][ T8415] syz.5.1350: attempt to access beyond end of device [ 101.130326][ T8415] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 101.153549][ T8415] syz.5.1350: attempt to access beyond end of device [ 101.153549][ T8415] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 101.167570][ T8415] syz.5.1350: attempt to access beyond end of device [ 101.167570][ T8415] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 101.193633][ T8415] syz.5.1350: attempt to access beyond end of device [ 101.193633][ T8415] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 101.229701][ T8415] syz.5.1350: attempt to access beyond end of device [ 101.229701][ T8415] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 101.244323][ T8415] syz.5.1350: attempt to access beyond end of device [ 101.244323][ T8415] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 101.258183][ T8415] syz.5.1350: attempt to access beyond end of device [ 101.258183][ T8415] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 101.283220][ T8428] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 101.308611][ T8425] veth0_to_team: Caught tx_queue_len zero misconfig [ 101.308963][ T8415] syz.5.1350: attempt to access beyond end of device [ 101.308963][ T8415] loop5: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 101.371735][ T8441] __nla_validate_parse: 2 callbacks suppressed [ 101.371749][ T8441] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1357'. [ 101.495601][ T8442] 9pnet_fd: p9_fd_create_unix (8442): problem connecting socket: ./file1: -1 [ 101.532959][ T8460] loop0: detected capacity change from 0 to 512 [ 101.554507][ T8460] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.593271][ T8460] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.600206][ T8470] netlink: 'syz.7.1363': attribute type 32 has an invalid length. [ 101.608014][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1363'. [ 101.635082][ T8470] bond1: option coupled_control: invalid value (128) [ 101.660037][ T8470] bond1 (unregistering): Released all slaves [ 101.672852][ T8460] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1356: Allocating blocks 41-42 which overlap fs metadata [ 101.691053][ T8460] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1356: Allocating blocks 41-42 which overlap fs metadata [ 101.716363][ T8460] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1356: Failed to acquire dquot type 1 [ 101.733190][ T8460] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 101.748546][ T8491] tipc: Enabled bearer , priority 0 [ 101.756375][ T8491] syzkaller0: entered promiscuous mode [ 101.762707][ T8491] syzkaller0: entered allmulticast mode [ 101.778755][ T8460] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1356: corrupted inode contents [ 101.825121][ T8460] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.1356: mark_inode_dirty error [ 101.837809][ T8510] tipc: Resetting bearer [ 101.859049][ T8460] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1356: corrupted inode contents [ 101.928895][ T8460] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.1356: mark_inode_dirty error [ 101.956393][ T8460] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1356: corrupted inode contents [ 101.997767][ T8460] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 102.010133][ T8460] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1356: corrupted inode contents [ 102.023442][ T8460] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.1356: mark_inode_dirty error [ 102.048112][ T8460] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 102.057280][ T8460] EXT4-fs (loop0): 1 truncate cleaned up [ 102.063655][ T8460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.076717][ T8460] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.222395][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 102.222412][ T29] audit: type=1400 audit(1769538186.992:23684): avc: denied { mount } for pid=8537 comm="syz.7.1381" name="/" dev="autofs" ino=22796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 102.305378][ T7250] IPVS: starting estimator thread 0... [ 102.312154][ T8539] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 102.398954][ T8541] IPVS: using max 2352 ests per chain, 117600 per kthread [ 102.432395][ T8442] loop0: detected capacity change from 0 to 512 [ 102.522588][ T8479] tipc: Resetting bearer [ 102.534442][ T8479] tipc: Disabling bearer [ 102.626655][ T8560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1388'. [ 102.677027][ T8563] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1389'. [ 102.686088][ T8563] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1389'. [ 102.696097][ T8560] sctp: [Deprecated]: syz.0.1388 (pid 8560) Use of int in maxseg socket option. [ 102.696097][ T8560] Use struct sctp_assoc_value instead [ 102.770788][ T29] audit: type=1400 audit(1769538187.542:23685): avc: denied { map } for pid=8558 comm="syz.0.1388" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.795051][ T29] audit: type=1400 audit(1769538187.542:23686): avc: denied { execute } for pid=8558 comm="syz.0.1388" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.824775][ T8570] loop6: detected capacity change from 0 to 1024 [ 102.839567][ T8570] EXT4-fs: Ignoring removed bh option [ 102.845101][ T8570] EXT4-fs: inline encryption not supported [ 102.861486][ T8570] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.893603][ T8570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 102.917330][ T8570] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.1391: lblock 2 mapped to illegal pblock 2 (length 1) [ 102.936713][ T8570] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 102.944889][ T8570] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.1391: lblock 0 mapped to illegal pblock 48 (length 1) [ 102.959539][ T8570] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 102.968320][ T8570] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1391: Failed to acquire dquot type 0 [ 102.981081][ T8570] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 102.999254][ T8570] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.1391: mark_inode_dirty error [ 103.014048][ T8583] xt_CT: No such helper "pptp" [ 103.042340][ T8570] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 103.080946][ T8570] EXT4-fs (loop6): 1 orphan inode deleted [ 103.086976][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1396'. [ 103.087131][ T8570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.121449][ T64] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.147531][ T64] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 103.156103][ T64] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 103.207408][ T8570] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 103.222531][ T29] audit: type=1400 audit(1769538187.992:23687): avc: denied { append } for pid=8606 comm="syz.0.1403" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.245669][ T8570] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 103.259840][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1405'. [ 103.265195][ T8570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 103.276904][ T8570] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.1391: lblock 0 mapped to illegal pblock 48 (length 1) [ 103.293001][ T8570] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=-117 [ 103.302947][ T8570] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 103.326618][ T8611] loop0: detected capacity change from 0 to 512 [ 103.344280][ T8611] EXT4-fs (loop0): 1 truncate cleaned up [ 103.350956][ T8611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.404506][ T29] audit: type=1400 audit(1769538188.172:23688): avc: denied { setopt } for pid=8621 comm="syz.4.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.476140][ T8611] macvtap1: entered promiscuous mode [ 103.496431][ T8611] bridge0: entered promiscuous mode [ 103.503820][ T8611] macvtap1: entered allmulticast mode [ 103.510941][ T8611] bridge0: entered allmulticast mode [ 103.520157][ T4654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.544509][ T8611] bridge0: port 1(macvtap1) entered blocking state [ 103.552278][ T8611] bridge0: port 1(macvtap1) entered disabled state [ 103.565229][ T8611] bridge0: left allmulticast mode [ 103.571447][ T8611] bridge0: left promiscuous mode [ 103.623732][ T8629] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1410'. [ 103.633184][ T8629] ..0ªî{X¹¦: renamed from gretap0 [ 103.641189][ T8629] ..0ªî{X¹¦: entered allmulticast mode [ 103.646844][ T8629] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 103.664151][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.697199][ T8637] FAULT_INJECTION: forcing a failure. [ 103.697199][ T8637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.710451][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.6.1413 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.710477][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.710540][ T8637] Call Trace: [ 103.710548][ T8637] [ 103.710556][ T8637] __dump_stack+0x1d/0x30 [ 103.710638][ T8637] dump_stack_lvl+0x95/0xd0 [ 103.710663][ T8637] dump_stack+0x15/0x1b [ 103.710744][ T8637] should_fail_ex+0x263/0x280 [ 103.710772][ T8637] should_fail+0xb/0x20 [ 103.710797][ T8637] should_fail_usercopy+0x1a/0x20 [ 103.710867][ T8637] copy_fpstate_to_sigframe+0x636/0x7d0 [ 103.710891][ T8637] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 103.710918][ T8637] ? x86_task_fpu+0x36/0x60 [ 103.711009][ T8637] get_sigframe+0x34c/0x470 [ 103.711035][ T8637] ? get_signal+0xdbe/0xf60 [ 103.711064][ T8637] x64_setup_rt_frame+0xa7/0x4e0 [ 103.711093][ T8637] arch_do_signal_or_restart+0x24b/0x450 [ 103.711203][ T8637] exit_to_user_mode_loop+0x6a/0x6f0 [ 103.711332][ T8637] do_syscall_64+0x1d3/0x2a0 [ 103.711367][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.711387][ T8637] RIP: 0033:0x7f0ab51cb78e [ 103.711404][ T8637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.711474][ T8637] RSP: 002b:00007f0ab3c66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.711495][ T8637] RAX: 0000000000000001 RBX: 00007f0ab3c676c0 RCX: 00007f0ab51cb78e [ 103.711563][ T8637] RDX: 0000000000000001 RSI: 00007f0ab3c67090 RDI: 0000000000000003 [ 103.711578][ T8637] RBP: 00007f0ab3c67090 R08: 0000000000000000 R09: 0000000000000000 [ 103.711592][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.711606][ T8637] R13: 00007f0ab5486038 R14: 00007f0ab5485fa0 R15: 00007ffe89f18028 [ 103.711627][ T8637] [ 103.952854][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 103.965436][ T3402] kernel read not supported for file /vcs (pid: 3402 comm: kworker/1:4) [ 104.005003][ T29] audit: type=1400 audit(1769538188.772:23689): avc: denied { write } for pid=8652 comm="syz.6.1417" path="socket:[23675]" dev="sockfs" ino=23675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.097245][ T8668] loop6: detected capacity change from 0 to 128 [ 104.109273][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8673 comm=syz.4.1427 [ 104.122427][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8673 comm=syz.4.1427 [ 104.135267][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8673 comm=syz.4.1427 [ 104.149170][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8673 comm=syz.4.1427 [ 104.161761][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8673 comm=syz.4.1427 [ 104.202095][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8673 comm=syz.4.1427 [ 104.286755][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8673 comm=syz.4.1427 [ 104.310035][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1429'. [ 104.323079][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8673 comm=syz.4.1427 [ 104.341070][ T8691] loop6: detected capacity change from 0 to 1024 [ 104.373475][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8673 comm=syz.4.1427 [ 104.388671][ T8691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.401534][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8673 comm=syz.4.1427 [ 104.495563][ T8695] netlink: 'syz.7.1435': attribute type 1 has an invalid length. [ 104.509618][ T8695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.606437][ T4654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.652753][ T8695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.664878][ T8705] loop6: detected capacity change from 0 to 128 [ 104.669551][ T8695] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.710392][ T8695] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 104.739199][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.751053][ T8709] bpf: Bad value for 'gid' [ 104.783965][ T8707] bond0: option resend_igmp: invalid value (1024) [ 104.790537][ T8707] bond0: option resend_igmp: allowed values 0 - 255 [ 104.848250][ T8707] bond0 (unregistering): Released all slaves [ 105.060503][ T8731] loop6: detected capacity change from 0 to 2048 [ 105.128988][ T8735] IPv6: addrconf: prefix option has invalid lifetime [ 105.151652][ T8737] netlink: 'syz.5.1451': attribute type 3 has an invalid length. [ 105.169162][ T8737] netlink: 'syz.5.1451': attribute type 3 has an invalid length. [ 105.181661][ T8731] loop6: unable to read partition table [ 105.187326][ T8731] loop6: partition table beyond EOD, truncated [ 105.193555][ T8731] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 105.276353][ T3002] loop6: unable to read partition table [ 105.282277][ T3002] loop6: partition table beyond EOD, truncated [ 105.303320][ T8731] vlan0: entered allmulticast mode [ 105.308464][ T8731] vlan1: entered allmulticast mode [ 105.313727][ T8731] veth0_vlan: entered allmulticast mode [ 105.601195][ T8762] netlink: 'syz.7.1458': attribute type 2 has an invalid length. [ 106.295378][ T8813] loop6: detected capacity change from 0 to 1024 [ 106.353960][ T8813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.433752][ T8827] __nla_validate_parse: 9 callbacks suppressed [ 106.433770][ T8827] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1472'. [ 106.449000][ T8827] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1472'. [ 106.523457][ T4654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.653231][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1475'. [ 106.665456][ T8845] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 106.846106][ T8834] chnl_net:caif_netlink_parms(): no params data found [ 106.915258][ T8871] loop7: detected capacity change from 0 to 512 [ 106.945457][ T8871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.017910][ T8834] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.025276][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.053000][ T7887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.099757][ T8834] bridge_slave_0: entered allmulticast mode [ 107.120021][ T8834] bridge_slave_0: entered promiscuous mode [ 107.154453][ T8834] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.162431][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.211282][ T8834] bridge_slave_1: entered allmulticast mode [ 107.228418][ T8834] bridge_slave_1: entered promiscuous mode [ 107.277307][ T8834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.295233][ T8834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.309501][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 107.309538][ T29] audit: type=1326 audit(1769538192.082:23876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.6.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 107.339973][ T29] audit: type=1326 audit(1769538192.082:23877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.6.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 107.363622][ T29] audit: type=1326 audit(1769538192.082:23878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.6.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 107.387737][ T29] audit: type=1326 audit(1769538192.082:23879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.6.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 107.403916][ T8834] team0: Port device team_slave_0 added [ 107.412099][ T29] audit: type=1326 audit(1769538192.082:23880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.6.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 107.440387][ T29] audit: type=1326 audit(1769538192.082:23881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.6.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 107.450162][ T8834] team0: Port device team_slave_1 added [ 107.464604][ T29] audit: type=1326 audit(1769538192.082:23882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.6.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 107.493964][ T29] audit: type=1326 audit(1769538192.082:23883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.6.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 107.517553][ T29] audit: type=1326 audit(1769538192.082:23884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.6.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 107.531280][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.541853][ T29] audit: type=1326 audit(1769538192.082:23885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.6.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0ab520aeb9 code=0x7ffc0000 [ 107.548026][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.548101][ T8834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.569204][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.615035][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.640963][ T8834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.807998][ T8834] hsr_slave_0: entered promiscuous mode [ 107.826738][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1495'. [ 107.847860][ T8834] hsr_slave_1: entered promiscuous mode [ 107.869131][ T8834] debugfs: 'hsr0' already exists in 'hsr' [ 107.874884][ T8834] Cannot create hsr debugfs directory [ 107.956160][ T8953] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 107.972586][ T8953] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 107.988498][ T8953] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 108.007400][ T8953] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 108.020954][ T8953] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 108.033918][ T8834] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.055877][ T8953] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 108.070333][ T8953] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 108.108804][ T8953] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 108.143007][ T8834] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.181729][ T8971] loop0: detected capacity change from 0 to 1024 [ 108.188404][ T8971] EXT4-fs: Ignoring removed oldalloc option [ 108.194460][ T8971] EXT4-fs: inline encryption not supported [ 108.216829][ T8834] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.257485][ T8971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.277554][ T8977] loop6: detected capacity change from 0 to 256 [ 108.311587][ T8834] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.420297][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.441295][ T8834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.457477][ T8979] loop6: detected capacity change from 0 to 8192 [ 108.469202][ T8834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.470298][ T8985] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1508'. [ 108.490308][ T8834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.540345][ T8985] tipc: Resetting bearer [ 108.560122][ T8993] IPVS: set_ctl: invalid protocol: 136 172.30.1.1:20003 [ 108.580655][ T8834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.651726][ T8834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.678281][ T8834] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.684276][ T9007] sctp: [Deprecated]: syz.4.1513 (pid 9007) Use of int in max_burst socket option. [ 108.684276][ T9007] Use struct sctp_assoc_value instead [ 108.699437][ T8834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.699460][ T8834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.732538][ T6449] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.739676][ T6449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.748656][ T6449] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.755727][ T6449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.828057][ T8834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.992879][ T8834] veth0_vlan: entered promiscuous mode [ 109.005187][ T8834] veth1_vlan: entered promiscuous mode [ 109.029057][ T8834] veth0_macvtap: entered promiscuous mode [ 109.040191][ T8834] veth1_macvtap: entered promiscuous mode [ 109.058162][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.074850][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.088247][ T6449] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.107158][ T6449] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.120021][ T6449] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.134593][ T64] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.222538][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1518'. [ 109.260148][ T9038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.278574][ T9038] debugfs: Bad value for 'uid' [ 109.283634][ T9038] debugfs: Bad value for 'uid' [ 109.543833][ T9064] loop5: detected capacity change from 0 to 512 [ 109.598700][ T9063] loop0: detected capacity change from 0 to 8192 [ 109.613814][ T9038] loop7: detected capacity change from 0 to 512 [ 109.626736][ T9063] vfat: Unknown parameter '0xffffffffffffffff' [ 109.757456][ T9066] SELinux: Context system_u:object_r:devlog_t:s0 is not valid (left unmapped). [ 110.053632][ T9081] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 110.183783][ T9088] Cannot find del_set index 1 as target [ 110.558661][ T9114] loop5: detected capacity change from 0 to 256 [ 110.683033][ T9121] loop5: detected capacity change from 0 to 512 [ 110.699573][ T9123] bridge0: port 1(gretap0) entered blocking state [ 110.706063][ T9123] bridge0: port 1(gretap0) entered disabled state [ 110.722958][ T9123] gretap0: entered allmulticast mode [ 110.731224][ T9121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.733404][ T9123] gretap0: entered promiscuous mode [ 110.780957][ T9121] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.813885][ T9128] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1552'. [ 110.823690][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1552'. [ 110.832784][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1552'. [ 110.841802][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1552'. [ 110.893628][ T9128] loop0: detected capacity change from 0 to 1024 [ 110.900656][ T9121] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.1550: corrupted xattr block 6: invalid header [ 110.929057][ T9121] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 110.945327][ T9128] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 110.956267][ T9128] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 110.986432][ T9121] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.1550: corrupted xattr block 6: invalid header [ 111.002962][ T9112] lo: Caught tx_queue_len zero misconfig [ 111.020232][ T9128] JBD2: no valid journal superblock found [ 111.025984][ T9128] EXT4-fs (loop0): Could not load journal inode [ 111.277742][ T9146] netlink: 'syz.7.1559': attribute type 1 has an invalid length. [ 111.308546][ T9146] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.355899][ T9146] bond3: (slave veth3): Enslaving as an active interface with a down link [ 111.444468][ T9146] bond3 (unregistering): (slave veth3): Releasing active interface [ 111.468781][ T8834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.500844][ T9146] bond3 (unregistering): Released all slaves [ 111.770012][ T9199] loop6: detected capacity change from 0 to 256 [ 111.850697][ T9209] loop6: detected capacity change from 0 to 512 [ 111.864696][ T9212] __nla_validate_parse: 4 callbacks suppressed [ 111.864710][ T9212] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1578'. [ 111.886295][ T9209] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 111.899761][ T9209] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 111.914967][ T3303] udevd[3303]: incorrect jbd checksum on /dev/loop6 [ 111.944871][ T3303] udevd[3303]: incorrect jbd checksum on /dev/loop6 [ 112.063353][ T9235] loop6: detected capacity change from 0 to 2048 [ 112.114515][ T9235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.168755][ T9234] EXT4-fs error (device loop6): ext4_find_extent:903: inode #2: comm syz.6.1586: inode has invalid extent depth: 9 [ 112.170013][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 112.185019][ T9234] EXT4-fs (loop6): Remounting filesystem read-only [ 112.196238][ T9245] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 112.210458][ T4654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.221097][ T9245] net_ratelimit: 46 callbacks suppressed [ 112.221127][ T9245] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.342021][ T9259] netlink: 'syz.5.1595': attribute type 29 has an invalid length. [ 112.356531][ T9259] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1595'. [ 112.366345][ T29] kauditd_printk_skb: 624 callbacks suppressed [ 112.366357][ T29] audit: type=1400 audit(1769538197.122:24510): avc: denied { connect } for pid=9261 comm="syz.6.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.414475][ T9271] tc_dump_action: action bad kind [ 112.499813][ T9283] selinux_netlink_send: 56 callbacks suppressed [ 112.499831][ T9283] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=4372 sclass=netlink_tcpdiag_socket pid=9283 comm=syz.6.1602 [ 112.573524][ T29] audit: type=1326 audit(1769538197.342:24511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.0.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 112.647039][ T9291] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 112.655880][ T9279] IPVS: You probably need to specify IP address on multicast interface. [ 112.666172][ T9279] IPVS: Error connecting to the multicast addr [ 112.679962][ T29] audit: type=1326 audit(1769538197.382:24512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.0.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 112.703550][ T29] audit: type=1326 audit(1769538197.382:24513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.0.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 112.727890][ T29] audit: type=1326 audit(1769538197.382:24514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.0.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 112.752206][ T29] audit: type=1326 audit(1769538197.382:24515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.0.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 112.776117][ T29] audit: type=1326 audit(1769538197.382:24516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.0.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 112.780333][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1601'. [ 112.800337][ T29] audit: type=1326 audit(1769538197.382:24517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.0.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 112.833230][ T29] audit: type=1326 audit(1769538197.382:24518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.0.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 112.856724][ T29] audit: type=1326 audit(1769538197.382:24519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.0.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f748f77aeb9 code=0x7ffc0000 [ 112.880581][ T9291] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.880790][ T9291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.880873][ T9291] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.881710][ T9291] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.1604: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 112.992421][ T9291] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1604: couldn't read orphan inode 11 (err -117) [ 113.069913][ T9291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.164191][ T9291] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1604: Invalid block bitmap block 0 in block_group 0 [ 113.178129][ T9291] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1604: Failed to acquire dquot type 0 [ 113.178210][ T9306] EXT4-fs: Ignoring removed nobh option [ 113.220842][ T9310] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 113.237585][ T9306] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 113.250178][ T9310] EXT4-fs (loop0): orphan cleanup on readonly fs [ 113.260518][ T9291] netlink: 'syz.6.1604': attribute type 3 has an invalid length. [ 113.275464][ T9308] Attempt to read inode for relocated directory [ 113.284773][ T9310] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1610: Failed to acquire dquot type 1 [ 113.297330][ T9306] EXT4-fs (loop7): 1 truncate cleaned up [ 113.304059][ T9306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.304823][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1605'. [ 113.328960][ T9310] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1610: bg 0: block 40: padding at end of block bitmap is not set [ 113.355406][ T9310] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 113.355529][ T4654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.373265][ T9310] EXT4-fs (loop0): 1 truncate cleaned up [ 113.379521][ T9310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.380083][ T9306] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 113.412849][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1605'. [ 113.423112][ T9310] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 113.425385][ T9308] vlan2: entered promiscuous mode [ 113.436904][ T9308] veth0_virt_wifi: entered promiscuous mode [ 113.442933][ T9308] vlan2: entered allmulticast mode [ 113.448092][ T9308] veth0_virt_wifi: entered allmulticast mode [ 113.453237][ T9306] EXT4-fs (loop7): Remounting filesystem read-only [ 113.479643][ T9320] set_capacity_and_notify: 4 callbacks suppressed [ 113.479736][ T9320] loop6: detected capacity change from 0 to 1024 [ 113.499341][ T9320] EXT4-fs: Ignoring removed nobh option [ 113.504962][ T9320] ext2: Unknown parameter 'nouser_xattr' [ 113.511091][ T7887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.553864][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.565071][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1615'. [ 113.609914][ T9338] loop7: detected capacity change from 0 to 128 [ 113.619070][ T9338] EXT4-fs: Ignoring removed orlov option [ 113.625173][ T9338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.631932][ T9338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.643378][ T9338] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.647435][ T9334] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 113.704583][ T9338] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.751715][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1619'. [ 113.837235][ T7887] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.891279][ T9360] loop5: detected capacity change from 0 to 1024 [ 113.903559][ T58] ================================================================== [ 113.903596][ T58] BUG: KCSAN: data-race in n_tty_receive_buf_common / n_tty_write [ 113.919427][ T58] [ 113.919435][ T58] write to 0xffffc90006153020 of 8 bytes by task 9362 on cpu 1: [ 113.919451][ T58] n_tty_write+0x1d2/0xc20 [ 113.919481][ T58] file_tty_write+0x378/0x690 [ 113.919505][ T58] tty_write+0x25/0x30 [ 113.919528][ T58] vfs_write+0x5a6/0x9f0 [ 113.919547][ T58] ksys_write+0xdc/0x1a0 [ 113.919563][ T58] __x64_sys_write+0x40/0x50 [ 113.919583][ T58] x64_sys_call+0x2847/0x3000 [ 113.919608][ T58] do_syscall_64+0xc0/0x2a0 [ 113.919634][ T58] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.919663][ T58] [ 113.919670][ T58] read to 0xffffc90006153020 of 8 bytes by task 58 on cpu 0: [ 113.919688][ T58] n_tty_receive_buf_common+0x85e/0xc10 [ 113.919710][ T58] n_tty_receive_buf2+0x33/0x40 [ 113.919742][ T58] tty_ldisc_receive_buf+0x66/0xf0 [ 113.919765][ T58] tty_port_default_receive_buf+0x59/0x90 [ 113.919791][ T58] flush_to_ldisc+0x148/0x340 [ 113.919816][ T58] process_scheduled_works+0x4cd/0x9d0 [ 113.919836][ T58] worker_thread+0x6bc/0x8b0 [ 113.919855][ T58] kthread+0x488/0x510 [ 113.919882][ T58] ret_from_fork+0x148/0x280 [ 113.919909][ T58] ret_from_fork_asm+0x1a/0x30 [ 113.919936][ T58] [ 113.919940][ T58] value changed: 0x0000000000000000 -> 0x000000000000000e [ 113.919953][ T58] [ 113.919957][ T58] Reported by Kernel Concurrency Sanitizer on: [ 113.919967][ T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.919994][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.920009][ T58] Workqueue: events_unbound flush_to_ldisc [ 113.920039][ T58] ================================================================== [ 113.939654][ T9360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.113526][ T9360] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1624: Allocating blocks 481-513 which overlap fs metadata [ 114.148746][ T9360] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1624: Allocating blocks 497-513 which overlap fs metadata [ 114.163828][ T9360] EXT4-fs (loop5): pa ffff888107df4850: logic 0, phys. 465, len 3 [ 114.171759][ T9360] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 114.194531][ T8834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.