last executing test programs: 5m8.607644217s ago: executing program 32 (id=346): socket(0x10, 0x3, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (fail_nth: 4) 4m59.630354053s ago: executing program 33 (id=472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0xfc, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 3m29.692797533s ago: executing program 34 (id=2298): socket(0x10, 0x803, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x7ff, 0x46) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000003bd11a5f0304db2e2976f0fb00000b000000000000"], 0x0, 0x32}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x6, 0x3ff}, 0x0, 0x8000000000000021, 0x43a1bd76, 0x7, 0x3, 0x81, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000", 0x17}], 0x1}, 0x0) 2m16.174559361s ago: executing program 3 (id=3587): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffe8, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 2m16.151396672s ago: executing program 3 (id=3588): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000000)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @b={0x5, 0x3, 0x0, 0x1, 0x7, 0x81, 0x2, {}, 0x0, 0x68, 0x2, 0x5, 0x52, "6b6bbba8c95deb2efa816a20486c50aef70236f4900b01eef2e7b7ad69bd6408320497e3e1ee8f7c6444ee677790b75f81e28b4fad82c0fd185097eeb03315476505a44ebcb297a9dba181aa9d8ca3839a55"}}, 0x62) 2m15.087131004s ago: executing program 3 (id=3594): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0xb8, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2da0ef4d4f08ef1678917de3de3d7b4cd008d35eb8557ec3ee777de774fc7987cca419"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2d5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x24df}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x41100, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffffff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc00000000000000000000000000000001000080080003000400000038000400200001000a004e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000800040001040000080003000900000008000200f6000000080001001c0000000800020001000000080001001a0000000800030009000000080001001700000054000280080001001c00000008"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r8 = eventfd2(0x0, 0x1) io_submit(r7, 0x2, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f00000001c0)="5f18ab32505b5506", 0x8}]) shutdown(0xffffffffffffffff, 0x0) 2m14.682610448s ago: executing program 3 (id=3599): socket$xdp(0x2c, 0x3, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1a25406, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x1) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) keyctl$read(0xb, r2, &(0x7f00000013c0)=""/4096, 0x1000) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r3, 0x0, 0x0, 0x1fffffffffffffd}]) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0f0029bd7000ffdbdf2510000000080001"], 0x24}}, 0x20040080) sendmsg$inet6(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x40c0) 2m14.433100653s ago: executing program 3 (id=3601): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x7, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000380)) setns(0xffffffffffffffff, 0x40000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m14.189237197s ago: executing program 3 (id=3602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x403, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x2a704}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 2m14.166646998s ago: executing program 35 (id=3602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x403, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x2a704}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 1m8.371431464s ago: executing program 8 (id=4402): flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0x4a}], 0x1}, 0x10012) 1m7.444235868s ago: executing program 8 (id=4414): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m7.40855704s ago: executing program 8 (id=4415): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f0000000000), 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r3, &(0x7f00000001c0), 0x10) dup3(r1, r2, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "088435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "430400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = memfd_secret(0x80000) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000040), 0x4) socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x10) 1m7.359235543s ago: executing program 8 (id=4417): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket$inet(0x2, 0x4, 0xff) socket(0x2, 0x80805, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x200, 0x76e6d370}) r1 = fsopen(&(0x7f0000000200)='securityfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x41, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x30d080, 0x10, 0x1}, 0x0, 0x18, 0x0, 0x12345}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000700)='sec\t\x0e7\v\x00\x00\x00k\xcf\xa8~\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000007780b750e2000000000000000000000000000000da064167b901a5008196701a265de19993dd993a735229cb"], 0x50) 1m7.171086184s ago: executing program 8 (id=4421): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x7, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000380)) getpid() setns(0xffffffffffffffff, 0x40000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca30000000000004005000100060000000500050002000000050004000000"], 0x58}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m7.07506416s ago: executing program 8 (id=4422): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x186f1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@user_xattr}, {@discard}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 1m6.866426242s ago: executing program 4 (id=4426): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xee00) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) fchdir(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x1ea9, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) io_submit(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, 0x0, 0x0, 0x1) write(0xffffffffffffffff, &(0x7f0000000200)="513015163c5e126e52af687b876038fe2e799cb5cbb4867c9a05cbe5ddcb8c2903b86add6add94b11d4a1ef55dcc3ce251ebfbbb69ba14fe8ef836a39971846e7f90b4587ab6268fb58614112329a4b58b43287ee94692777ed2fd82a93c1be0ccd9dd083f5fe938e2507d6551529bc9417bedad2f6228bc3b9063401c9c4c9d4e15d1448421856a65e23ee55ac8d6097daf19e247d7d6223508616a0ab6d48eec06b331b65170c88f9f02", 0xab) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02002dbd7000fcdbdf250b0000040700280008000900ffb50400000008c2dd5d6c000500080002000000040028040a000600ffffffffffff000004000b0005005df13946e11c0ef7d66800"/86], 0x5c}, 0x1, 0x0, 0x0, 0x5ff9bff40d6a3901}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x20000}, 0x10}, 0x94) 1m5.846612922s ago: executing program 4 (id=4428): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f0000000000), 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r3, &(0x7f00000001c0), 0x10) dup3(r1, r2, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "088435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "430400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = memfd_secret(0x80000) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000040), 0x4) socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x10) 1m5.837278172s ago: executing program 7 (id=4429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000300)="b44c8067", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000a00)={{0x7, 0x3}, 'port0\x00', 0xe, 0x1000, 0x9, 0x7, 0x2, 0xebf, 0x10001, 0x0, 0x2, 0x1c}) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040802) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="700200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000440203804002008008000340"], 0x270}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x13bb711e) write$sndseq(r4, &(0x7f0000000880)=[{0x8, 0x1, 0x0, 0x4, @tick=0x80000001, {0x3, 0x6}, {0x10, 0x6c}, @raw32={[0x4, 0xfffffa1f]}}, {0x3, 0x5d, 0x81, 0x7, @time={0x5, 0x10001}, {0x7, 0xf4}, {0x1, 0xfb}, @time=@time={0xfdec, 0x1}}], 0x38) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0007"], 0x44}}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1m5.432764446s ago: executing program 4 (id=4430): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000a020000000000000000000001053f0000000000040000000001000005000000000000000001"], 0x0, 0x4e, 0x0, 0x1}, 0x28) r0 = socket$xdp(0x2c, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x7, 0x8, 0x0, 0xfffffffd}]}) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x4) fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0xc0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00'], 0x20}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x4, 0x0, 0x38, r0}, 0x10) 1m5.007334471s ago: executing program 7 (id=4432): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x7, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000380)) getpid() setns(0xffffffffffffffff, 0x40000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca30000000000004005000100060000000500050002000000050004000000"], 0x58}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m4.955978074s ago: executing program 7 (id=4434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m4.483188832s ago: executing program 6 (id=4439): flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0x4a}], 0x1}, 0x10012) 1m3.549251666s ago: executing program 6 (id=4440): r0 = socket(0x10, 0x80002, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000001300)=""/4118, 0x1016, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffb, 0x2, 0xe31762b0, 0xa2, 0x101}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f0000000180)) 1m3.48081674s ago: executing program 6 (id=4441): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000080), 0x1000000) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002780)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000cc0)="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", 0x1a5}, {&(0x7f0000000700)="1e9bdb919930b63490b5092febd4ff5a7fdfebce145cf8edd142d88e92908746fe920060d936ca0b89f1a56fa4b26d0657c57a665369d2ce8909af5d00d8d7eb6407c762ebac337367d400cc47fd1d9a15533e4958ec0d45bd6ce376ace04c0b5cb07312b1cae72e32fdcaf7e6aa26737e748d2a83009703ef0a756140a832d841fdec50624cddcbe8a4a7baaf2a2b5a583115", 0x93}], 0x2}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000380)="3a826f0306bc598a25d9f98ce3df61857b8863db2274a7b8cc10389f81f4b7231caab54aaa15e736e16239cb3b05bb224865dadc4b1088ed0ce5c9ede116bbde6ce136dbc720c81f4ddefa4d131949410763c93a8329413526b61e320ead44c2256a14c3c29f6fea826ce6dfcdbd00000000000000", 0x75}, {&(0x7f0000001240)="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", 0x149}, {&(0x7f0000000600)="29f675ffa18cba1f080ba7cd8d254832b44b1ed22625d4802a6f30400852734d069e9048ce651a4d92c0abebcc5bd8923b07f246b696b4951f2e0fdb69b6d1785b29a4ace70600095974e3bc9f86e39b061d514f4f9e05729a89f4a7b13b1c254ffbb24eefc41900b92861d05c7e930f9657", 0x72}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)="6210497ecf38ab1295c82ae11bb5d4e878a5c991840827ca02ec6587fa60b9450433ff931f3c77609961fea486ac8c016b346865e77f453a7e530044f166706d878029a1e61397981895b91723516831c94a96ea73d7dc1a058f09d49ad04dc239d71747bd1cc3417d6f1a6d5fd60605522e7f82bf18ba3aca52b25d155b0bf0b2aeddd2a8c926aa2d688df0", 0x8c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="16067563fbf2f3094e11fe800dc2bf2e106966cf4e5a356ff4773d9630e3d6cd1c3b10ddfe9b8df9f62eb4087960ba02f0d500b75998e180d90d56d8f0af7bc9ebe94507e43721bcfc9ca60e61422799db619096fbc9b98c5988527d3602211e17542986520283a52b1f5bbf86d8a0f7c5f5f3177e360fa4a4b9029adc48a00e2267e35dec7d76bef0d2b7897122e853827b99cec9a7538b3a620f3da9e6642aaa7bb307931c75e76808714d0c5ebcdfdfe7c6bdaf4aec612aaae489d89878a457bed22f0b7d362225462eba2c65258482399447113e05b2d06d3ea8012188c87f64c8", 0xe3}, {&(0x7f0000000140)="6050c6b5b0972f8eebaf", 0xa}], 0x2}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001780)="b05a16ba30a49d206ef40e78819d09a49d35e1b0997f7b6fc1382babaa05c6de2967163596daa74f089f30a21d3084a00766324ed309bbf03532b3855e86216ad780b82d5ed043e39d8c3fe1d815e3eab24ee2d10c733a52626d7fe21d47e52d197f3adb1c478018c538efb14a7d55a8307d566cfeea57040181", 0x7a}], 0x1}}], 0x6, 0x2000c044) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) getrlimit(0x4, &(0x7f0000000240)) sendto$inet(r1, &(0x7f0000001740)="e83901d3ce", 0x5, 0x32000800, 0x0, 0x0) 1m2.548492205s ago: executing program 7 (id=4442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x60707}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) 1m1.043132623s ago: executing program 7 (id=4445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) ustat(0x8000000000000001, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0xb, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000595e94ac744da6020000f8ffcea54a2effffb703000008000000ac03000000000000850000003300000095b04369ab55bef60bc264ae52ffffffff5fcc68dff6fd71933d53147855621e39965ea0609ff3e2c29f35ad0fb893e6939fe58816e841b6f37a16ddf219dcbdd1881a0e4fd7ac0537497df344329eef513051e391ca2c2a82cb535b7937bd81df73957803a21879a3e8abccfb72e097d0833ab94249751226c56c971d75e54fe14b4847069156fa2d3c2f41dc00"/209], &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_setup(0x194e, &(0x7f0000000500)={0x0, 0xd3d1, 0x80, 0x0, 0x2b0}) mmap(&(0x7f000016a000/0x1000)=nil, 0x1000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x3000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580100001000010000000000fcdbdf00088000000000000000000000000000bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000600000000000000090000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000400000000000000000000000a000000ad0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170060"], 0x158}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0xf6, r7, 0x1, 0xbd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r7}, 0x14) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff}, 0xfe}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r10, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2f, &(0x7f0000000380)=ANY=[], 0x0) 1m1.028024364s ago: executing program 4 (id=4446): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="0100000000000000be00170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020009"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x16b4b223}]}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x30}, @NFTA_OSF_TTL={0x5, 0x2, 0x8e}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x84, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdfd}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd3}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c0}]}], {0x14}}, 0x1c4}}, 0x44820) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r4, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$sock(r4, &(0x7f0000000700)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x4, {0xa, 0x4e24, 0x51, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x1000}}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xe254}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x78}, 0x2c890) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14cdb32bbd7000fddbdf2508000100000000df070003"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdffffff0400d1000800000008000300", @ANYRES32=r9], 0x20}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x810) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfefffffe}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="00000000000100000000000085080000860000104a11ffff00000000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800002c0000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0xfffffdd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x1a) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x437, 0x40000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xcc06f}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000000)) 1m1.001146466s ago: executing program 6 (id=4447): close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x48044}, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x2a, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1m0.945961249s ago: executing program 6 (id=4448): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)}}], 0x2, 0x20002880) 1m0.834559135s ago: executing program 6 (id=4449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) ustat(0x8000000000000001, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0xb, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000595e94ac744da6020000f8ffcea54a2effffb703000008000000ac03000000000000850000003300000095b04369ab55bef60bc264ae52ffffffff5fcc68dff6fd71933d53147855621e39965ea0609ff3e2c29f35ad0fb893e6939fe58816e841b6f37a16ddf219dcbdd1881a0e4fd7ac0537497df344329eef513051e391ca2c2a82cb535b7937bd81df73957803a21879a3e8abccfb72e097d0833ab94249751226c56c971d75e54fe14b4847069156fa2d3c2f41dc00"/209], &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_setup(0x194e, &(0x7f0000000500)={0x0, 0xd3d1, 0x80, 0x0, 0x2b0}) mmap(&(0x7f000016a000/0x1000)=nil, 0x1000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x3000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580100001000010000000000fcdbdf00088000000000000000000000000000bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000600000000000000090000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000400000000000000000000000a000000ad0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170060"], 0x158}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0xf6, r7, 0x1, 0xbd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r7}, 0x14) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff}, 0xfe}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0), 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r10, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2f, &(0x7f0000000380)=ANY=[], 0x0) 1m0.006852154s ago: executing program 4 (id=4450): flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0x4a}], 0x1}, 0x10012) 59.074518238s ago: executing program 4 (id=4451): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0xb32, 0x8, 0x9, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "088435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "430400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = memfd_secret(0x80000) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000040), 0x4) socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x10) 58.960174135s ago: executing program 7 (id=4452): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5ce, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20002, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_checksum}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") setns(0xffffffffffffffff, 0x24020000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x2, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x8300, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x401, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) brk(0x200000000000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x0, 0x0, 0x0, 0x0, 0x9, 0x648b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x4, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x191003) 50.6822504s ago: executing program 36 (id=4422): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x186f1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@user_xattr}, {@discard}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 44.664350363s ago: executing program 37 (id=4449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) ustat(0x8000000000000001, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0xb, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000595e94ac744da6020000f8ffcea54a2effffb703000008000000ac03000000000000850000003300000095b04369ab55bef60bc264ae52ffffffff5fcc68dff6fd71933d53147855621e39965ea0609ff3e2c29f35ad0fb893e6939fe58816e841b6f37a16ddf219dcbdd1881a0e4fd7ac0537497df344329eef513051e391ca2c2a82cb535b7937bd81df73957803a21879a3e8abccfb72e097d0833ab94249751226c56c971d75e54fe14b4847069156fa2d3c2f41dc00"/209], &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_setup(0x194e, &(0x7f0000000500)={0x0, 0xd3d1, 0x80, 0x0, 0x2b0}) mmap(&(0x7f000016a000/0x1000)=nil, 0x1000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x3000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580100001000010000000000fcdbdf00088000000000000000000000000000bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000600000000000000090000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000400000000000000000000000a000000ad0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170060"], 0x158}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0xf6, r7, 0x1, 0xbd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r7}, 0x14) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff}, 0xfe}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0), 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r10, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2f, &(0x7f0000000380)=ANY=[], 0x0) 42.162368399s ago: executing program 38 (id=4452): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5ce, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20002, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_checksum}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") setns(0xffffffffffffffff, 0x24020000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x2, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x8300, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x401, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) brk(0x200000000000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x0, 0x0, 0x0, 0x0, 0x9, 0x648b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x4, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x191003) 42.132784951s ago: executing program 39 (id=4451): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0xb32, 0x8, 0x9, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "088435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "430400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = memfd_secret(0x80000) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000040), 0x4) socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x10) 7.050380147s ago: executing program 1 (id=4625): readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030600"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32], 0x40}, 0x1, 0xba01}, 0x0) connect$rds(r2, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, 0x8000, 0x0, 0x0, 0x300}}) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x9, 0x7}, 0x118a, 0x4, 0x8406, 0x6, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r4, 0xbdd94000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0xf0, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24014001}, 0x20040880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 5.778744001s ago: executing program 1 (id=4628): r0 = socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='.\x00') syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file1\x00', 0x1008002, &(0x7f0000000080)={[{@grpjquota}]}, 0x3, 0x5f7, &(0x7f00000003c0)="$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") syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random="0a36e67c6d74", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0xc, 0x0, @opaque="03000000"}}}}}}, 0x0) (async) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000260000000000000000060000000000003b17201716998b5fef00d39a759cfc1085", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000100626f6e64000000001400028005000e000200000008000f0000040000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c092}, 0x0) 4.708708014s ago: executing program 1 (id=4631): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") creat(&(0x7f00000001c0)='./file1\x00', 0x42) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x4, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xfff2}, {0x4, 0xfff1}}}, 0x24}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) pwritev2(r3, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000a80)="790a09002f0c204d2b220bdc86dd", 0x0, 0xf5b6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r4, &(0x7f0000000340)="4dbbfe960dc0f4ff", 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000006911da000000000007cd8bf4000000009500000c00000000bcf4e4a30e96c21600f4afb6d0954c68c0dec1952d9a030799aef4b1eafe1013bc52ccd2f43ec4e670e61e78bc8db65c0dc1492bcb"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19) r9 = epoll_create(0xea4d) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) close_range(r9, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000540)={0x8084000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)=0x0, {0xb}, &(0x7f0000000380)=""/144, 0x90, &(0x7f0000000440)=""/251, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x6, {r3}}, 0x58) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1, 0x0, r10}}, 0x40) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 4.346570855s ago: executing program 0 (id=4638): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4401e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a90000000060a010400000000000000000a0004050900010073797a310000000064000480600001800a000100696e6e65720000005000028008000440000000172c0005800c0001007261796c6f6164001c0002800800024000000004080004400000001c080001400000000f0800034000000002080002400000008408000140000000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getcwd(&(0x7f0000000140)=""/153, 0x99) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1380a000) 2.810242325s ago: executing program 2 (id=4640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x208000) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x100, 0x6}, {0x2, 0x800}, {0x200, 0x200}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) 2.807421935s ago: executing program 1 (id=4641): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x1, 0x8000000000000001, 0x6}) r4 = socket(0x1, 0x803, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x60, 0x1, [@m_bpf={0x5c, 0xc, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x1ff, 0x7, 0x9e0, 0x800}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 2.72696296s ago: executing program 0 (id=4642): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea", 0x40, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0x4a}], 0x1}, 0x10012) 2.620305667s ago: executing program 0 (id=4645): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x10, 0xb}, {0x7, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048064}, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64) listen(r4, 0x2) (async, rerun: 64) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0x40000) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f00000008c0)=""/239, 0x40000, 0x0, 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)="4baa9f6869f100") (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (rerun: 32) close(r3) 2.522484742s ago: executing program 9 (id=4647): socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e5ff0000000000000000faffba0f98ce4a37ffffffffffff0000003f393becbaa6bb88841567ff67c713cb2d229c0751735d2c67539755fa0359c505faf4c11215f842c45d5520febe1ef42ab014edfd20dcd41aff091fd1625b9bbb1eb9570b9aff8e42677b5df39b49efe2ddc1769490172a6f2468df5e4895"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r1, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffff27) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x40011) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x28028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100), 0x13f, 0x9}}, 0x20) 2.504110733s ago: executing program 0 (id=4648): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) 2.289987306s ago: executing program 5 (id=4649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x6, 0x0, 0x0, 0x0, 0x9, 0x4849b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x43a1fd76, 0x7, 0x3, 0x1, 0x4c, 0x0, 0xffffffff, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e1208000c0002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db79800951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920323f9a94100"/216, 0xd8}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') write$UHID_INPUT(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0xffffff7e, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x2, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x101, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000000380)={'\x00', @random="0000890dbca2"}) 1.676658142s ago: executing program 1 (id=4650): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r1, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 1.613488245s ago: executing program 9 (id=4651): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0xfc, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3, 0x2}}, {0x8, 0x2, [0x200, 0x6]}}, {{0x1c, 0x1, {0x8, 0x92, 0x5, 0xfffffff8, 0x2, 0x6, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0xfff, 0x2, 0x44, 0xe]}}, {{0x1c, 0x1, {0x8, 0x2, 0xee, 0x4, 0x2, 0x80, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xdb, 0x602, 0x7a, 0x1, 0xc84, 0x5, 0x2}}, {0x8, 0x2, [0xd, 0x5]}}, {{0x1c, 0x1, {0x7b, 0x8, 0x8000, 0xaf, 0x0, 0x85, 0x3, 0x7}}, {0x12, 0x2, [0x2, 0x5, 0x8001, 0x4, 0x6, 0x3, 0x5817]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 1.613309645s ago: executing program 2 (id=4652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15880400030000000800"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x60707}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) 1.612945935s ago: executing program 9 (id=4653): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004040) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6_sctp(0xa, 0x801, 0x84) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) getrlimit(0x9, 0x0) 1.446674675s ago: executing program 5 (id=4654): r0 = getpgid(0x0) syz_clone3(&(0x7f00000001c0)={0x100040000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x2000, 0x0, &(0x7f0000000180)=[r0], 0x1}, 0x58) 1.36655966s ago: executing program 5 (id=4655): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6", 0x42, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0x4a}], 0x1}, 0x10012) 1.20476871s ago: executing program 5 (id=4656): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb7, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r0, &(0x7f0000000e80)=ANY=[], 0x78) setuid(0xee01) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000003040)="e4", 0xfffffffffffffece, 0x404c001, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x8, &(0x7f00000000c0)={[{@discard}, {@errors_remount}, {@journal_ioprio}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@noinit_itable}, {@data_err_abort}, {@orlov}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0x1001}}]}, 0xfa, 0x490, &(0x7f00000013c0)="$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") r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000007c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180057aa7b01d49c6d3ffb71390000000e00000c0000000400"/49], 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="7b5ae3fefbffffff9b365271f3e4806db320c3de0704f780a6637b9d7c253b99302b81b691627e1378adad2d1c0cb3b2bd62e4d79710412da5cbc93391602176fa8e468b8efc0f"], 0x0, 0xfffffff5, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x54f42d0d}, 0x94) unshare(0x2a020400) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$addseals(r5, 0x409, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x21, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000027110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000746006000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000400000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x12, '\x00', r3, @fallback=0x13, r0, 0x8, &(0x7f0000000800)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0x3, 0x9, 0x6}, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)=[r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000080)='[', 0x1, 0x20000010, &(0x7f00000000c0)={0xa, 0x4e20, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) shutdown(r6, 0x1) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e04, 0x5, @empty, 0x8001}}, 0xfb70, 0x5}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r8, 0xed, 0x1, [0x87ac]}, 0xa) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="60010000210001000000000000000000fc02000000000001fe80000000000000000000000000012000000000000000000a0000a02e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000a8010000500011"], 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pwrite64(r2, &(0x7f0000000040)="aa09", 0x2, 0x4) 1.131845264s ago: executing program 2 (id=4657): syz_emit_ethernet(0xa4, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fd00", 0x6e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af"}, {0x0, 0x1, "0000000000f3ffffff000000"}]}}}}}}, 0x0) 1.102339605s ago: executing program 2 (id=4658): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x2a000, 0x1000, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x5000000, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) 998.252092ms ago: executing program 5 (id=4659): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0xfffffffc, @private1, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x5, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0xfffffffffffffd27) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local, 0x80000001, 0x2, 0xff, 0x5, 0xff3c, 0x5}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061116c000010000095000300470c0000"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140c, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040c5}, 0x20000000) linkat(r1, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x7c, 0x40}, {0x3, 0x0, 0x3}, {0x6, 0x4, 0xff, 0x3}]}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfe, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$unix(0x1, 0x5, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x88, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x93}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x88}}, 0x0) sendto$inet6(r4, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x4000c, @loopback, 0x1}, 0x1c) close(r4) unshare(0x20060400) syz_io_uring_setup(0x3863, &(0x7f0000000200)={0x0, 0x93e3, 0x2, 0x2, 0x3d3}, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 997.842202ms ago: executing program 2 (id=4660): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 987.108502ms ago: executing program 0 (id=4661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0003"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x60707}, [@IFLA_TXQLEN={0x8, 0xd, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) 880.104398ms ago: executing program 1 (id=4662): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x400003) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="c021", 0x2}], 0x1, 0x7, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000001e00)={0x9, 0xda, 0x0, 0xf, 0x21a56e65, 0x7}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") chown(&(0x7f0000000000)='./file1\x00', 0xee00, 0xffffffffffffffff) getdents(r1, &(0x7f0000000dc0)=""/4106, 0x100a) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="45010080", @ANYRES16=r4, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 704.735468ms ago: executing program 0 (id=4663): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x400003) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="c021", 0x2}], 0x1, 0x7, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000001e00)={0x9, 0xda, 0x0, 0xf, 0x21a56e65, 0x7}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") chown(&(0x7f0000000000)='./file1\x00', 0xee00, 0xffffffffffffffff) getdents(r1, &(0x7f0000000dc0)=""/4106, 0x100a) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="45010080", @ANYRES16=r4, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 650.456392ms ago: executing program 9 (id=4664): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4401e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf25000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf) write$tun(0xffffffffffffffff, &(0x7f00000064c0)=ANY=[@ANYBLOB="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"], 0xfca) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x4175, &(0x7f00000007c0)={0x0, 0x1bf58, 0xa744fa8df82f5b0e, 0x2, 0x84}, &(0x7f0000000100), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x20000000) syz_clone(0x12003080, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) 516.39338ms ago: executing program 2 (id=4665): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000300"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x4, 0x80000001, 0x81, 0x3, 0x9, 0xffffffffffffffff}) getdents64(r3, 0x0, 0x607a9e0a432a4785) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xf2eac2242cad99a5}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x234, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x0, 0xc, 0x0, 0x1, [{0x0, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x3f2}]}, {0x0, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x70e7457}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0xe3b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x7371}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x3cd476a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x26d2960d}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x31c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0xa180}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x743aa69f}]}, {0x0, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x49c89724}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x1511}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x418dcfa2}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x9291}]}, {0x0, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x70a97dc8}]}, {0x0, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x796fdc8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x6cc8ce06}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0xc53f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x46c6f37e}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x121c}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27da0c73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x22, 0x5, 0x199b0f77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1642d3cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf5c27ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27ba3507}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33a0d6cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e6aafba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ec2c552}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x790d0d2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50ef23bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa20}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67d7815a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e72d089}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cbf958a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6137}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d5a8c5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58a1c636}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ad7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27d4ab5e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50abf6b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e961da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f1c9d84}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23150415}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8add}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71b39073}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41a3e35c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b747946}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55d969f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97ba}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x234}}, 0x24040090) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000000)=0xf) 231.042916ms ago: executing program 9 (id=4666): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x49, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) r1 = dup(r0) r2 = dup3(r1, r0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x76b7, 0x6, '9P2000'}, 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 27.360018ms ago: executing program 5 (id=4667): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x400003) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="c021", 0x2}], 0x1, 0x7, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000001e00)={0x9, 0xda, 0x0, 0xf, 0x21a56e65, 0x7}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") chown(&(0x7f0000000000)='./file1\x00', 0xee00, 0xffffffffffffffff) getdents(r2, &(0x7f0000000dc0)=""/4106, 0x100a) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="45010080", @ANYRES16=r5, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000380)={0x13, 0x1000, &(0x7f0000000440)="4595a3d037b8ecc74822cbfde424b95c2b644df4ecfdbd8cd36cf6ce8470a44608c1c9c129a83a32116f66d81569b6c8bce08ec27e3a3ce76434c8504259401ed06bdb472c08617d5c6cfb2929a2a08788580b8a433a243a7dc329508b99ea0fd7d1e30720440ae923b8ac7429d41817f28d661d365acfb9995c50cf79c0b7a6c12c7ab155baa6ed1ebf63df8dac35937740eeb9ebdf5a5379101e9a6c7f69752b6b93a45faf8f2dc1db4e563c246112400e278e136b0113e88f6e98f00e4e8b203709d06f12dc6bbf14e00e08813f34b32518dfff7e58227bb9023e22b243df0dce641a2005d494f6e3b5eaf294e7af20ebdf6ebb693fad9dd6d2d46f99de2fd9a2d00744258e01482178d86a7504c8b539950a5b250a52962da15247a4a117c58daa774a0454f2d78383cc6db1d132711b4ed9e37e63e3b4326d8d3179497f9fe95487f0e3761eb7fc0e2428b4907f30f276674ae1c0b4710f48e0db2efa215c40541b29cce9ead96ee0eef92fda74efa282296f45f62b210bf7c3a3181e54cedd7c74c1717ef6dfc07c87562f8cb484209a18a773b6d9559a717c0cb0658be2045453598928abf9ca22724b0793087a3668824ca1198e9f801b11da04afc8eef7f2c8a6d3c58abda684c868bbb465e4e040776d130092911ddd63a16ebc9a60b7967c0d9a98de3dc997c6c58b5eed524011c7e0671247a1731184a3d9e4e8f16553c6d987dc29a9929fcd26fbe517fbfd78e393464b4d37213862e5846c7cc3469cde8ad76ce9b4a840685cd5b665e1f83f926dd834e82f43822de20ba7219aeb65b5a6d79e8a5293d8d6e2db827e29ce9bd02a82a582a4a647897a7c4bd514d3c2ad1f37a808d73d0d2c05948b2585aa354018e659bc57cf3d655e9e75e235b864abd1aa78089a87e30d2d59e1da355ca0faaffd58e32ba810bfe0974d5c1f5f67c62109f1134651c49b1ead38eee4ed8e988e7ec4a56e221aae0b35176ada5d3e89c7578a3c464cf544e5f21ba25554142822768c5fe60d76fd89206176925f91963214001f52f4fd6a0fd60133db4e71815b68ed12ef5b6304462e018958e6e570766f94d323efc94ea904ec24f719f36731da9ac5b8172b8fdc7486054f05cee7f670b10a62172f40e324b81fa1dc259c5de3f9e8a2b7e6631aa0b4c43346136098426c2bcce52d74c1cabbc80c795a211fe5843c602468476fc10b5c20f9d5e0f6b883eda31c7eb2ff7e45000fa9de1ed32a893e36789054d0a6ab51b330217f446dd83040da9baa1630d1e7fe84924829358e2c3b0815158777d880c38ae490dd251c10e03acc387371167e4f95c7b2a7e1bd63228e319fca18ce952e3809b76477699d144f1114dde5a9070d5c86aecfbe83ac473e0f995d0447ea80d1c8d599a16d6c206395cc2c16d4e5962c773909e9ee56b9c470091b7462e3382fa2ca0b8313e7dc12cdae0cd9377bc0c16832128ffe33543e01a45258ccda1be9e29a3af765586c3ce0944b90da6ae68f7d3bfbf60242283f7ad0af9fbf18d737583336f6c236b23a7dacee788d0704440df3c7aa890d9ede6ad14ea6b3ad2d5f4033a8fc0e2dcffff28e4355d8075a99dd69264106bb0edc7f64366cfb0846ab8868f640143ee776e0ed29860b8d49f2c38f5779550873c2077eb6be516bd26339391fc8bfe0c013def8f009f5014e5f5a0f1382a8c0b627c346b5be462b521243e7e950ea94a12fba3634553e543f6478219ebe33c06c51b46fb353c8dfbf7108585847c61d342b4c3cf33ede7d4720cc78d3f2849814302275647a73f345fef39842fafc34a77d5f8fb7536246d1c6c73048cf29820af7c0d8e4234411d9ff4a30899dcb44804983e7976efb222e30120410c7574c66e23a6ab4ad066dc97725b050fc15553725aa8aa7b0d39a6748b9b49c2408b192153ec3dbf001e6ede9b583625b7eacfd682c13d53acbaac621c7720e43c1c745fa8fcf03c95b270c2880d3d9d84c68d33d1d6288ee8c9ce56c47e64bf028b6f5ced9fb8dde4a3fd35c525bd1c4a422eea137c94872875de52d85591fa3052005285b4eb9fc6616fb243f51c897704cdd35d9c3c5fabe56d530301711738f210d31848adde0a6f18561e3bd8f76ee739a08fbcb9f843bc66352b9328ee77301264941d3b4ccbfa2072bb1aa9def0264d2e06995e67bf8c2890cb19b7aff5d1ec2d91d29a885e8917fda7e2ca7b16d3dd11b0c9ebe8d2a516e60ad1aee0c4913838fe3e0ebdf587bf4f706aca67d3477affbaf668088939d9941b12f993e52cf1aa72fc6fe09940bc90a13c538af0be5c35fc44a9d136bc2a7561cc713608fd2ebfe0c7e6ca214e793a8bb026a739b2d04258fdb5fde3441b78a647bcadc1b74a84d0ecc02470763d43da07edc0d27daf1737bc8731be64f84e04f1a055bd1430158728570fb1fb5bd26602d552ed1d41ff8b79ea39203c0afd98d6692cf527f285c990f2fc00305015e99275725b27697ee1fae11e96defe448f03b36e47f6236a286b289f0f00d2a9d8bd9fb4dc73315044232dda9cd0e02623bc52d46afb88c96271e542da74ad4cdf39bec6494ff4e7d0f517fe7da28f5f8fc1cebdb72da8f868ac0f1866deac276b90661b52a7d3fcfccd61fca5c9f9cc16fd99e2a1549a8d17013e1f37cd89c8dd9f3299672f94d7a37e619615066d2913a5c94613215dd8338a86ee12545c1f286a564dfa50f1c6ee6a4ed68c54217a6adcbcac2bf010f3e904388664bfeb9dd3bb577e032529a53d8b57dd6e16fac8ef23ca2e4beb9f0303756b87501d4393964b2758308cfab2d6c48bf3ba6e6d685996e7016f516cfafc7bb68feba10e92fac673edf3825bd46bf21febb5de8714944e41780dca84571e9ac8d5c29404c37a4c2ffdb076d046d6ccf24114ed63aaff6ab7d006ecd5c7052fc2e43bfc93242b3035c9e928dee6659ed1913837c7b05e5050e7b85a131d307ed3126d95f89d9b58b93da4f0ce28a512a442c4cd03d7ca847edd5b750c780a280a2de6d64cb4e6b0dc8a08fe82a1167578ed9b506e54d2853f387b435d26aa4df6c02f3d04151bee20e019f0330e921f636993393a56e0c75b2adf2289fff4ed18345e4b9391d525348fe3a6ffcbea510cc1b04e53f6a0cd5f3c9af4cfac919d6bf12e2ab79c0532aecadca8218b57bd56a2437a82a550177120456f3ceb8acd9ead422398f918703e20c44f93c5e8a27999d40729b4eab77435a54e073cb13c169051f322611c821f23e5acd1cc03a5cc873abad219b51a91dd11e08c677f2dcca43c60cfc9bdc4bd94ed58ec6140ef58f31036ea2c0a946d2af1dbbe9877689ae1c1885db142c3c2bc1f21d90508219d79f16bda87915ec70123d85af693ddb1a353a766ec955a395b509cc5409b27f2a70ec70c60613995378591b7e5130bc8435248ad4d8e814b8888603b2e2bb23c6462be9c83d6daabd80db2e89bba9137ca384f5095e746d2adc2a32f86bd66e9bdfe5807ba9f6f07e5e48e2416dd2860449f4a172195d366b66c3fdc631b033381078b43db31de88b1ec3a705505ee9b68f69f89bb1fb6556b8147261b45c9941b0163adf3c5d51c6a20e5438cca2138ee59bf94fd603235775acee334b8190984b75cbc0184d6a06b1f74bfe5317f3d1c948e5e7864dc72d25a1ca3632bfb21870299c91950a4d62ce65a53d8dcf76f44941ed9e4f27e8250ad5da01a8a974450b0489cf20f943bd0769378f79fd0f7500e062f54c3b15c7777f41f31c3861ec690b75266474d2a40382653ca706e1c3ea3a1fb27a0a6f37e5054782d83f49cf07b2a08fb9def7903e2ab7d6bad0ed499fa6b4c27ec901840c8dbeb9dbe5ee40c974c172b2a56242e12df1b29aec784c0944b1cee7b6bf910d4672f4a8c46160b94fd9ef9b6d51be209b95676b111c352be1ba06fc962be92a22f39027479483e9220f67a726ad1349e0b372b085e0df266950573290a65000110a13dddd6e2f93cadb635babf6ed07c2a7b84c2241a27af7ee8c13423a18d0331000792881170972723ae8fd60cb83186f83e20caa863aaab82e1899ed5aa7c8a204c8b5691334bbdc3b49c66a4279eb49a6146a137a643d2b9a9741ec8218d585f8c9d6c58321ad01fe47f659e7e68046b9e6f903a4b275081102b04d217a91497a4a9d9512c758dcdf5bc1dc1f54a1eecff862ed65e78c8eb4bbf609b8825bba0858d3a78c605d4f2ed86a3a13c2923d27f6b600247b40e28bc7553b174bae82fb651a17e939790bb8e2800938eb29c5c424644897854324b2d8b026d945234d78238ed7636014a9f773a753acc558acae3a3ac33807df2c6ddc15518a3e7bd81f481e21bfc5a6e5f94e220e0498e35278e563e2b723343df5c191175cb00489d8687f5b521b2f35a2a9fcce58dc7739605e63df1181010d24354e5418e0f67923e07c4e5a9d748af58b6a5f8f68fb006fa6dc434eaf2e0bb33e6d1ee0ef681e9528a5025eef30fe43e802479e7963d3d90fbca88ecb0695874b0e247e88b1b67879981174ce4e069e1c50131c861fcfd64ac192de54b4f72c0744e7e7f52fa297796ca7f86a705caeaeffb31122baeb33056849a76cc2539c69ed32b2930385596057a2692ff166470099fa3e9ab1ea290146de0123592c85c252b8ef3d33ab9e036e33504925d3de90cf416403fcfa084811d8770a15d727c1752b603a84118794297b8dadc951de133e5733b7302e730cc06b2a047675ccaf0eb41c4b0ad7fb3c46c49b07fc24d863124f37f8466bf4e985b58733d5353238d5e5f97bcf0861a8f3e6c9339069b44ae3629ef893682aa9c05c74c4eeccbc8531ba60a0730ede4d150bd7198b91665f355a25a296206bb869487d56debc1286221b17d289644d0191d4b1003e417e85acdaa897f7349985231f4c1e877d1f3709abbae42924978cb3d5c69a31f041f3728661d23ed6b7018ce60c36950bf3f09a81cbe6a7b2b409cbeb6b556ec09a93c3d41932dabd6b5263fc55df380269f74dba74cfe32b35c79659a55aff3888469f710d902c02a300f0d41addd8da8ed59988c4c0bd0553dbf09e38d55a43af92fb88edf277ab083e944df6cd8f5519344e56a3e1392b938e23a9a5a40f2e574cb9469f4511cefc5f84dd49df2caffc8989ec955b46be8f82c1e8169cdccda9d98c81ab51277e429c6b2beea960fe45c99c6da019d1b2b048ca80211ba9e81bdf93365244f3ebf4412fcd2f0c568153f876910a292c6e88eb13bc64ad8b81650e557bf78f0beac3b0e1a256b30d6277ccdac4ba9e111a1416d37ebdc1a97d0889979813b5e598cb73d00285f5a6e52eae115275c9f1d3fe5c04ebd63d35d9f3f63838fb2fba80c271b159b771eaf60ca8b7415ccae952360464d7cba4e5d61eb90a6a41949eba76f75975ae5a522c3fcc2d87663c32c37b10a8e93e8b3987888e88aaab7eabf10abc25970afb28f7ad9dc4ad1cf177d10b5fe1fd7de733d755b22f8cf155cc632dda6c25cdfed094f1a905a884d3f1afd26a93d5276eb30a3fcccaeeef91554e07a05b39f32b73048f1e05ecbb2f63af126b17f9d8b8fb3f118321d025d14844bf71b4f584989076982994af825d1bee273a06cbd52c302ee46648ad8a519520580da09aef39e2bdba3af44ef7c7976c92b697aad6e71cc2ad5a2f78bd4d063bc3d4724743ab8e66023a44f83986c4c3e5e07fa71b11870c44630836f50be95c8c67a48141b5f947601611500a859307825346635af5b2687cb8825fd854fe82d85923b0f6532105"}) 0s ago: executing program 9 (id=4668): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="bb32b7ffabb55f2ddc3d66310ede5550193468b82f132bb195e28d4a389eee437e2b59bbe4b1fd00a43f85063c9904de478d3045730073302994d93c274baf02ddc35e37d9aabdcee2d21eb687e1007541e34126ad20f5170036ac77e4f0da779c1926a998518644982ae77d4194faf0cd9c84394bd376ea48d7b7c5db019b1257d419b92de5653c51fdcea139a6c8b2332ead89f5bcff086e"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): 775 comm=syz.7.4373 [ 303.448764][T16783] loop8: detected capacity change from 0 to 512 [ 303.511922][T16777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=16777 comm=syz.7.4374 [ 303.560425][T16783] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 303.560764][T16785] SELinux: failed to load policy [ 303.591017][T16790] erspan0: entered promiscuous mode [ 303.597117][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4374'. [ 303.628862][T16783] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.4376'. [ 303.644010][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4376'. [ 303.832552][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4383'. [ 303.843449][T16801] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 303.858810][T16800] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 303.888691][T16801] EXT4-fs (loop8): 1 truncate cleaned up [ 303.919463][T16800] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4383: bg 0: block 255: padding at end of block bitmap is not set [ 303.969457][T16800] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 303.999242][T16816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=16816 comm=syz.8.4385 [ 304.012204][T16816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=16816 comm=syz.8.4385 [ 304.025781][T16800] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4383: invalid indirect mapped block 1 (level 1) [ 304.057255][T16800] EXT4-fs (loop5): 1 truncate cleaned up [ 304.206114][T16830] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4389'. [ 304.279269][T16835] FAULT_INJECTION: forcing a failure. [ 304.279269][T16835] name failslab, interval 1, probability 0, space 0, times 0 [ 304.292262][T16835] CPU: 1 UID: 0 PID: 16835 Comm: syz.7.4391 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.292340][T16835] Tainted: [W]=WARN [ 304.292347][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.292364][T16835] Call Trace: [ 304.292388][T16835] [ 304.292399][T16835] __dump_stack+0x1d/0x30 [ 304.292429][T16835] dump_stack_lvl+0x95/0xd0 [ 304.292459][T16835] dump_stack+0x15/0x1b [ 304.292540][T16835] should_fail_ex+0x263/0x280 [ 304.292580][T16835] should_failslab+0x8c/0xb0 [ 304.292665][T16835] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 304.292712][T16835] ? __d_alloc+0x37/0x340 [ 304.292742][T16835] __d_alloc+0x37/0x340 [ 304.292774][T16835] ? default_pointer+0xf2/0x5e0 [ 304.292877][T16835] d_alloc+0x2e/0x100 [ 304.292991][T16835] lookup_one_qstr_excl+0x99/0x250 [ 304.293123][T16835] start_dirop+0x3e/0x70 [ 304.293159][T16835] simple_start_creating+0xa2/0xd0 [ 304.293193][T16835] debugfs_start_creating+0xda/0x150 [ 304.293292][T16835] __debugfs_create_file+0x70/0x2b0 [ 304.293390][T16835] debugfs_create_file_full+0x3f/0x60 [ 304.293427][T16835] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 304.293460][T16835] ref_tracker_dir_debugfs+0x10e/0x220 [ 304.293565][T16835] alloc_netdev_mqs+0x1a7/0xa40 [ 304.293612][T16835] rtnl_create_link+0x239/0x720 [ 304.293648][T16835] rtnl_newlink_create+0x174/0x650 [ 304.293699][T16835] ? security_capable+0x7b/0x90 [ 304.293741][T16835] ? netlink_ns_capable+0x86/0xa0 [ 304.293782][T16835] rtnl_newlink+0xf5b/0x1370 [ 304.293833][T16835] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 304.293941][T16835] ? perf_trace_kmem_cache_free+0x128/0x160 [ 304.293972][T16835] ? __memcg_slab_free_hook+0x135/0x230 [ 304.294012][T16835] ? __rcu_read_unlock+0x4e/0x70 [ 304.294118][T16835] ? avc_has_perm_noaudit+0xab/0x130 [ 304.294161][T16835] ? cred_has_capability+0x224/0x290 [ 304.294200][T16835] ? selinux_capable+0x31/0x40 [ 304.294225][T16835] ? security_capable+0x7b/0x90 [ 304.294336][T16835] ? ns_capable+0x7c/0xb0 [ 304.294370][T16835] ? __pfx_rtnl_newlink+0x10/0x10 [ 304.294492][T16835] rtnetlink_rcv_msg+0x64b/0x720 [ 304.294519][T16835] netlink_rcv_skb+0x123/0x220 [ 304.294576][T16835] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.294695][T16835] rtnetlink_rcv+0x1c/0x30 [ 304.294724][T16835] netlink_unicast+0x5c0/0x690 [ 304.294809][T16835] netlink_sendmsg+0x5c8/0x6f0 [ 304.294836][T16835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.294862][T16835] ____sys_sendmsg+0x5af/0x600 [ 304.294893][T16835] ___sys_sendmsg+0x195/0x1e0 [ 304.294937][T16835] __x64_sys_sendmsg+0xd4/0x160 [ 304.295019][T16835] x64_sys_call+0x17ba/0x3000 [ 304.295084][T16835] do_syscall_64+0xc0/0x2a0 [ 304.295117][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.295143][T16835] RIP: 0033:0x7fc07e29aeb9 [ 304.295166][T16835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.295195][T16835] RSP: 002b:00007fc07ccf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.295250][T16835] RAX: ffffffffffffffda RBX: 00007fc07e515fa0 RCX: 00007fc07e29aeb9 [ 304.295265][T16835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 304.295278][T16835] RBP: 00007fc07ccf7090 R08: 0000000000000000 R09: 0000000000000000 [ 304.295291][T16835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.295304][T16835] R13: 00007fc07e516038 R14: 00007fc07e515fa0 R15: 00007ffef5c8d898 [ 304.295395][T16835] [ 304.709455][T16839] qrtr: Invalid version 255 [ 304.767433][T16846] netlink: 182 bytes leftover after parsing attributes in process `syz.7.4395'. [ 304.792562][T16844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.858216][T16848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.869859][T16848] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.882272][T16848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.980039][T16844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.055010][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4401'. [ 305.064065][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4401'. [ 305.135471][T16855] set_capacity_and_notify: 3 callbacks suppressed [ 305.135547][T16855] loop4: detected capacity change from 0 to 512 [ 305.179014][T16864] ip6gre1: entered allmulticast mode [ 305.195695][T16855] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 305.206517][T16855] EXT4-fs (loop4): orphan cleanup on readonly fs [ 305.233250][T16855] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 305.254532][T16855] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 305.273106][T16855] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4400: corrupted inode contents [ 305.321642][T16855] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.4400: mark_inode_dirty error [ 305.367188][T16855] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4400: corrupted inode contents [ 305.412054][T16855] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.4400: mark_inode_dirty error [ 305.425999][T16855] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4400: corrupted inode contents [ 305.442153][T16855] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 305.460183][T16855] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4400: corrupted inode contents [ 305.485421][T16874] netlink: 'syz.5.4407': attribute type 4 has an invalid length. [ 305.487460][T16874] netlink: 'syz.5.4407': attribute type 4 has an invalid length. [ 305.517411][T16855] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.4400: mark_inode_dirty error [ 305.537856][T16855] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 305.650409][T16879] netlink: 182 bytes leftover after parsing attributes in process `syz.6.4408'. [ 305.670155][T16855] EXT4-fs (loop4): 1 truncate cleaned up [ 305.676029][T16850] lo speed is unknown, defaulting to 1000 [ 305.688622][T16850] lo speed is unknown, defaulting to 1000 [ 305.701877][T16850] lo speed is unknown, defaulting to 1000 [ 305.745951][T16883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4409'. [ 305.771832][T16850] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 305.796207][T16850] lo speed is unknown, defaulting to 1000 [ 305.802417][T16850] lo speed is unknown, defaulting to 1000 [ 305.808633][T16850] lo speed is unknown, defaulting to 1000 [ 305.814841][T16850] lo speed is unknown, defaulting to 1000 [ 305.825670][T16850] lo speed is unknown, defaulting to 1000 [ 305.847925][T16850] lo speed is unknown, defaulting to 1000 [ 305.863053][T16850] lo speed is unknown, defaulting to 1000 [ 305.871362][T16850] lo speed is unknown, defaulting to 1000 [ 305.877617][T16850] lo speed is unknown, defaulting to 1000 [ 305.884485][T16850] lo speed is unknown, defaulting to 1000 [ 305.919016][T16895] loop4: detected capacity change from 0 to 1024 [ 305.944157][T16895] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.4413: inode #4194560: comm syz.4.4413: iget: illegal inode # [ 305.960506][T16895] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4413: error while reading EA inode 4194560 err=-117 [ 305.973498][T16898] loop5: detected capacity change from 0 to 2048 [ 306.086115][T16907] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4416'. [ 306.162588][T16916] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 306.315027][T16922] lo speed is unknown, defaulting to 1000 [ 306.324851][T16922] lo speed is unknown, defaulting to 1000 [ 306.338214][T16925] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4421'. [ 307.645081][T16949] program syz.7.4429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.671514][T16949] loop7: detected capacity change from 0 to 1024 [ 307.734925][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 307.735008][ T29] audit: type=1326 audit(2000000068.798:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.4.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 307.783581][ T29] audit: type=1326 audit(2000000068.826:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.4.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 307.807229][ T29] audit: type=1326 audit(2000000068.826:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.4.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 307.830760][ T29] audit: type=1326 audit(2000000068.826:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.4.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cabc3b78e code=0x7ffc0000 [ 307.854310][ T29] audit: type=1326 audit(2000000068.826:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.4.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 307.877868][ T29] audit: type=1326 audit(2000000068.826:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.4.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 307.901397][ T29] audit: type=1326 audit(2000000068.826:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.4.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 307.925013][ T29] audit: type=1326 audit(2000000068.836:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.4.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 307.948487][ T29] audit: type=1326 audit(2000000068.836:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.4.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 307.972106][ T29] audit: type=1326 audit(2000000068.836:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16947 comm="syz.4.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 308.037185][T16949] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.051168][T16949] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4429: bg 0: block 112: padding at end of block bitmap is not set [ 308.067321][T16949] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 308.079825][T16949] EXT4-fs (loop7): This should not happen!! Data will be lost [ 308.079825][T16949] [ 308.090699][T16948] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 1: comm syz.7.4429: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.105282][T16948] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 1: comm syz.7.4429: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.119955][T16948] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 1: comm syz.7.4429: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.136082][T16948] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 1: comm syz.7.4429: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.150663][T16948] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 1: comm syz.7.4429: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.165049][T16948] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 1: comm syz.7.4429: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.179733][T16948] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 1: comm syz.7.4429: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.194178][T16948] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 1: comm syz.7.4429: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.208637][T16948] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 1: comm syz.7.4429: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.287340][T16949] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 308.299808][T16949] EXT4-fs (loop7): This should not happen!! Data will be lost [ 308.299808][T16949] [ 308.474213][T16969] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4432'. [ 308.533172][T16929] loop8: detected capacity change from 0 to 512 [ 308.632954][T16929] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 308.648423][T16929] EXT4-fs (loop8): orphan cleanup on readonly fs [ 308.961478][T16929] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 310.868950][T16929] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 312.048401][T16999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4444'. [ 312.378183][T16994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.393949][ T6876] lo speed is unknown, defaulting to 1000 [ 312.491433][T17003] netlink: 182 bytes leftover after parsing attributes in process `syz.6.4447'. [ 312.535556][T17005] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4446'. [ 312.625910][T17011] netlink: 'syz.4.4446': attribute type 3 has an invalid length. [ 312.659369][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4446'. [ 313.426211][T16929] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.4422: corrupted inode contents [ 313.426274][T17011] ip6erspan0: entered promiscuous mode [ 313.448498][T16929] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #16: comm syz.8.4422: mark_inode_dirty error [ 314.430653][T16929] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.4422: corrupted inode contents [ 314.465122][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 314.465163][ T29] audit: type=1326 audit(2000000075.093:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 314.475087][T16929] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.4422: mark_inode_dirty error [ 314.494929][ T29] audit: type=1326 audit(2000000075.093:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 314.494972][ T29] audit: type=1326 audit(2000000075.093:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 314.495019][ T29] audit: type=1326 audit(2000000075.093:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cabc3b78e code=0x7ffc0000 [ 314.495098][ T29] audit: type=1326 audit(2000000075.093:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 314.495133][ T29] audit: type=1326 audit(2000000075.093:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 314.495248][ T29] audit: type=1326 audit(2000000075.093:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 314.495290][ T29] audit: type=1326 audit(2000000075.093:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 314.495348][ T29] audit: type=1326 audit(2000000075.093:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 314.495494][ T29] audit: type=1326 audit(2000000075.093:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1cabc7aeb9 code=0x7ffc0000 [ 314.573541][T17029] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4453'. [ 314.631076][T17030] loop7: detected capacity change from 0 to 164 [ 321.119682][T16929] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.4422: corrupted inode contents [ 321.138363][T16929] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 321.149349][T16929] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.4422: corrupted inode contents [ 321.334688][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 321.334782][ T29] audit: type=1326 audit(2000000081.520:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 321.334821][ T29] audit: type=1326 audit(2000000081.520:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 321.335038][ T29] audit: type=1326 audit(2000000081.520:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 321.335251][ T29] audit: type=1326 audit(2000000081.520:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 321.335427][ T29] audit: type=1326 audit(2000000081.520:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 322.923209][T17038] lo speed is unknown, defaulting to 1000 [ 322.923614][T17038] lo speed is unknown, defaulting to 1000 [ 323.029803][T17038] chnl_net:caif_netlink_parms(): no params data found [ 323.072577][T17038] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.072677][T17038] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.072786][T17038] bridge_slave_0: entered allmulticast mode [ 323.073488][T17038] bridge_slave_0: entered promiscuous mode [ 323.074543][T17038] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.074621][T17038] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.074714][T17038] bridge_slave_1: entered allmulticast mode [ 323.075522][T17038] bridge_slave_1: entered promiscuous mode [ 323.090263][T17038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.091951][T17038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.104340][T17038] team0: Port device team_slave_0 added [ 323.105688][T17038] team0: Port device team_slave_1 added [ 323.117957][T17038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.117974][T17038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.118055][T17038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.118811][T17038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.118827][T17038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.118865][T17038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.140115][T17038] hsr_slave_0: entered promiscuous mode [ 323.140764][T17038] hsr_slave_1: entered promiscuous mode [ 323.141435][T17038] debugfs: 'hsr0' already exists in 'hsr' [ 323.141453][T17038] Cannot create hsr debugfs directory [ 323.238363][T17038] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 335.238311][T16929] EXT4-fs error (device loop8): ext4_truncate:4635: inode #16: comm syz.8.4422: mark_inode_dirty error [ 335.250865][T17038] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 335.280450][T17038] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 335.296502][T16929] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 335.326185][T16929] EXT4-fs (loop8): 1 truncate cleaned up [ 335.359243][T16929] EXT4-fs mount: 18 callbacks suppressed [ 335.359377][T16929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.863512][T17038] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 335.881632][T16929] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.019776][T17061] lo speed is unknown, defaulting to 1000 [ 336.040340][T17059] lo speed is unknown, defaulting to 1000 [ 336.043151][T17061] lo speed is unknown, defaulting to 1000 [ 336.056210][T17059] lo speed is unknown, defaulting to 1000 [ 336.072303][ T29] audit: type=1326 audit(2000000095.307:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 336.095898][ T29] audit: type=1326 audit(2000000095.307:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 336.119988][ T29] audit: type=1326 audit(2000000095.307:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 336.145401][ T29] audit: type=1326 audit(2000000095.373:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 336.169091][ T29] audit: type=1326 audit(2000000095.373:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 336.198717][ T29] audit: type=1326 audit(2000000095.382:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 336.224576][ T29] audit: type=1326 audit(2000000095.382:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 336.248134][ T29] audit: type=1326 audit(2000000095.392:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 336.273938][ T29] audit: type=1326 audit(2000000095.420:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 336.301635][ T29] audit: type=1326 audit(2000000095.420:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.5.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 336.326297][T17038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.341032][T17054] lo speed is unknown, defaulting to 1000 [ 336.347048][T17054] lo speed is unknown, defaulting to 1000 [ 336.429043][T17038] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.479457][T11337] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.486645][T11337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.497509][T17061] chnl_net:caif_netlink_parms(): no params data found [ 336.539599][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.546850][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.615998][T17061] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.624997][T17061] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.634907][T17061] bridge_slave_0: entered allmulticast mode [ 336.643650][T17061] bridge_slave_0: entered promiscuous mode [ 336.671784][T17061] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.678883][T17061] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.689124][T17061] bridge_slave_1: entered allmulticast mode [ 336.697495][T17061] bridge_slave_1: entered promiscuous mode [ 336.711541][T17054] chnl_net:caif_netlink_parms(): no params data found [ 336.754232][T17059] chnl_net:caif_netlink_parms(): no params data found [ 336.772275][T17061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.784426][T17061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.853454][T17061] team0: Port device team_slave_0 added [ 336.859405][T17054] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.867608][T17054] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.875970][T17054] bridge_slave_0: entered allmulticast mode [ 336.882619][T17054] bridge_slave_0: entered promiscuous mode [ 336.890884][T17054] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.900118][T17054] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.909469][T17054] bridge_slave_1: entered allmulticast mode [ 336.917349][T17054] bridge_slave_1: entered promiscuous mode [ 336.939147][T17061] team0: Port device team_slave_1 added [ 336.961526][T17061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.968539][T17061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.996895][T17061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.026001][T17054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.039013][T17054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.050695][T11340] bridge_slave_1: left allmulticast mode [ 337.058285][T11340] bridge_slave_1: left promiscuous mode [ 337.063962][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.073907][T11340] bridge_slave_0: left allmulticast mode [ 337.081546][T11340] bridge_slave_0: left promiscuous mode [ 337.089187][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.132255][ T10] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 337.143585][T11340] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 337.250697][T11340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.262217][T11340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.272646][T11340] bond0 (unregistering): Released all slaves [ 337.280340][T11340] bond1 (unregistering): Released all slaves [ 337.289119][T11340] bond2 (unregistering): Released all slaves [ 337.299640][T17061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.308998][T17061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.337608][T17061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.373639][T17054] team0: Port device team_slave_0 added [ 337.387366][T17059] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.394588][T17059] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.403889][T17059] bridge_slave_0: entered allmulticast mode [ 337.411244][T17059] bridge_slave_0: entered promiscuous mode [ 337.419193][T17059] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.426386][T17059] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.440152][T17059] bridge_slave_1: entered allmulticast mode [ 337.446936][T17059] bridge_slave_1: entered promiscuous mode [ 337.453716][T11340] tipc: Disabling bearer [ 337.458967][T11340] tipc: Disabling bearer [ 337.464239][T11340] tipc: Left network mode [ 337.477406][T17054] team0: Port device team_slave_1 added [ 337.508395][T17059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.521848][T17119] macvtap1: entered promiscuous mode [ 337.527312][T17119] macvtap1: entered allmulticast mode [ 337.532993][T17119] bridge0: entered allmulticast mode [ 337.538368][T17119] bridge0: entered promiscuous mode [ 337.544214][T17119] team0: Device macvtap1 failed to register rx_handler [ 337.551453][T17119] bridge0: left allmulticast mode [ 337.556508][T17119] bridge0: left promiscuous mode [ 337.572829][T17061] hsr_slave_0: entered promiscuous mode [ 337.580992][T17061] hsr_slave_1: entered promiscuous mode [ 337.586923][T17061] debugfs: 'hsr0' already exists in 'hsr' [ 337.594596][T17061] Cannot create hsr debugfs directory [ 337.608765][T17059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.631573][T11340] hsr_slave_0: left promiscuous mode [ 337.637404][T11340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.648065][T11340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.694375][T11340] team0 (unregistering): Port device team_slave_1 removed [ 337.705863][T11340] team0 (unregistering): Port device team_slave_0 removed [ 337.757732][T17054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.766832][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.792899][T17054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.807079][T17054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.816161][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.844195][T17054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.864169][T17059] team0: Port device team_slave_0 added [ 337.871784][T17038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.901238][T17059] team0: Port device team_slave_1 added [ 337.938795][T17128] loop5: detected capacity change from 0 to 512 [ 338.002986][T17054] hsr_slave_0: entered promiscuous mode [ 338.025075][T17054] hsr_slave_1: entered promiscuous mode [ 338.031573][T17054] debugfs: 'hsr0' already exists in 'hsr' [ 338.037330][T17054] Cannot create hsr debugfs directory [ 338.044206][T17059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.051255][T17059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.077858][T17059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.109169][T17059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.116205][T17059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.142259][T17059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.291612][T17155] loop5: detected capacity change from 0 to 512 [ 338.310435][T17059] hsr_slave_0: entered promiscuous mode [ 338.317663][T17059] hsr_slave_1: entered promiscuous mode [ 338.325934][T17155] EXT4-fs: Ignoring removed bh option [ 338.333598][T17155] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.340918][T17059] debugfs: 'hsr0' already exists in 'hsr' [ 338.346758][T17059] Cannot create hsr debugfs directory [ 338.369766][T17155] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 338.382697][T17038] veth0_vlan: entered promiscuous mode [ 338.395749][T17155] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 338.404949][T17155] EXT4-fs (loop5): orphan cleanup on readonly fs [ 338.411880][T17155] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4467: Failed to acquire dquot type 1 [ 338.424299][T17155] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4467: Invalid block bitmap block 0 in block_group 0 [ 338.456394][T17038] veth1_vlan: entered promiscuous mode [ 338.475046][T17038] veth0_macvtap: entered promiscuous mode [ 338.481454][T17155] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4467: Invalid block bitmap block 0 in block_group 0 [ 338.490749][T17038] veth1_macvtap: entered promiscuous mode [ 338.503071][T17155] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4467: Invalid block bitmap block 0 in block_group 0 [ 338.518437][T17155] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4467: Failed to acquire dquot type 1 [ 338.536555][T17155] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4467: Failed to acquire dquot type 1 [ 338.553806][T17155] EXT4-fs (loop5): 1 orphan inode deleted [ 338.560383][T17155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.588118][T11340] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.609525][T17038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.623841][T17038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.653343][T17054] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.692991][T13461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.727654][T11340] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.743306][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.771563][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.781113][T17172] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4468'. [ 338.793590][T17172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.803562][T17054] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.833511][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.849387][T11340] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.891133][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.918549][T17054] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.974187][T11340] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.414754][T17054] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.821960][T17054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.836318][T17054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.836684][T17219] sock: sock_timestamping_bind_phc: sock not bind to device [ 339.870466][T17054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.881622][T17054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.949891][T17061] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 339.967289][T17061] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 340.122549][T17061] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 340.157726][T17061] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 340.412553][T11340] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.439111][T17223] loop9: detected capacity change from 0 to 512 [ 340.441227][T17054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.506310][T11340] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.538735][T17054] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.569635][T11339] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.576822][T11339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.750022][T17285] loop5: detected capacity change from 0 to 128 [ 340.768513][T17285] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.780954][T17285] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.820371][T17285] EXT4-fs (loop5): shut down requested (0) [ 340.858292][T17223] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.873493][T17223] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.887306][T11340] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.911179][T13461] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.927255][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.934420][T11339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.972298][T17054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.982720][T17054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.021910][T17061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.055573][T17061] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.072430][T17291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.108283][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.115554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.125252][T17291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.134514][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.141697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.160976][T17061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.171429][T17061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.569914][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 341.569930][ T29] audit: type=1400 audit(2000000100.452:5442): avc: denied { create } for pid=17328 comm="syz.5.4474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 341.611861][T11340] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.627919][ T29] audit: type=1400 audit(2000000100.490:5443): avc: denied { write } for pid=17328 comm="syz.5.4474" path="socket:[62616]" dev="sockfs" ino=62616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 341.671751][T17054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.725653][T17059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.745184][ T29] audit: type=1400 audit(2000000100.611:5444): avc: denied { connect } for pid=17340 comm="syz.5.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 341.775918][T17059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.786872][T17059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.826717][T17059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.850621][T17344] batadv_slave_0: entered promiscuous mode [ 341.867927][T17061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.895762][T11340] bridge_slave_1: left allmulticast mode [ 341.903486][T11340] bridge_slave_1: left promiscuous mode [ 341.911029][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.922235][T11340] bridge_slave_0: left allmulticast mode [ 341.927926][T11340] bridge_slave_0: left promiscuous mode [ 341.936356][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.950505][T11340] bridge_slave_1: left allmulticast mode [ 341.958313][T11340] bridge_slave_1: left promiscuous mode [ 341.965933][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.975508][T11340] bridge_slave_0: left allmulticast mode [ 341.981165][T11340] bridge_slave_0: left promiscuous mode [ 341.988776][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.999385][T11340] bridge_slave_1: left allmulticast mode [ 342.006825][T11340] bridge_slave_1: left promiscuous mode [ 342.012556][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.022865][T11340] bridge_slave_0: left allmulticast mode [ 342.030652][T11340] bridge_slave_0: left promiscuous mode [ 342.038547][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.277140][T11340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.288282][T11340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.298595][T11340] bond0 (unregistering): Released all slaves [ 342.307271][T11340] bond1 (unregistering): (slave macvlan1): Releasing active interface [ 342.318219][T11340] veth1_vlan: left promiscuous mode [ 342.324721][T11340] bond1 (unregistering): Released all slaves [ 342.335298][T17038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.344290][T11340] bond2 (unregistering): Released all slaves [ 342.353576][T11340] bond3 (unregistering): Released all slaves [ 342.404559][T17360] hub 8-0:1.0: USB hub found [ 342.409266][T17360] hub 8-0:1.0: 8 ports detected [ 342.439890][ T29] audit: type=1400 audit(2000000101.257:5445): avc: denied { mount } for pid=17361 comm="syz.9.4477" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 342.447250][T17362] tracefs: Bad value for 'mode' [ 342.467635][ T29] audit: type=1400 audit(2000000101.257:5446): avc: denied { remount } for pid=17361 comm="syz.9.4477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 342.497470][ T29] audit: type=1400 audit(2000000101.322:5447): avc: denied { unmount } for pid=17038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 342.532323][T11340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.544275][T11340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.556578][T11340] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 342.567911][T11340] bond0 (unregistering): Released all slaves [ 342.577952][T11340] bond1 (unregistering): Released all slaves [ 342.661774][T11340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.674288][T11340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.686934][T11340] bond0 (unregistering): Released all slaves [ 342.702935][T17341] batadv_slave_0: left promiscuous mode [ 342.783536][T11340] tipc: Left network mode [ 342.805411][T17054] veth0_vlan: entered promiscuous mode [ 342.826557][T11340] tipc: Disabling bearer [ 342.831895][T11340] tipc: Disabling bearer [ 342.837179][T11340] tipc: Left network mode [ 342.854266][T17054] veth1_vlan: entered promiscuous mode [ 342.864885][T11340] tipc: Left network mode [ 342.886781][T11340] hsr_slave_0: left promiscuous mode [ 342.897377][T11340] hsr_slave_1: left promiscuous mode [ 342.909553][T11340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.917031][T11340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.927390][T11340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.937049][T11340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.949906][T11340] hsr_slave_0: left promiscuous mode [ 342.961064][T11340] hsr_slave_1: left promiscuous mode [ 342.966809][T11340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.976981][T11340] hsr_slave_0: left promiscuous mode [ 342.985506][T11340] hsr_slave_1: left promiscuous mode [ 342.993680][T11340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.003448][T11340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.013804][T11340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.023469][T11340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.046807][T11340] veth1_macvtap: left promiscuous mode [ 343.054723][T11340] veth0_macvtap: left promiscuous mode [ 343.060401][T11340] veth0_vlan: left promiscuous mode [ 343.068174][T11340] veth1_macvtap: left promiscuous mode [ 343.075296][T11340] veth0_macvtap: left promiscuous mode [ 343.081060][T11340] veth1_vlan: left promiscuous mode [ 343.087488][T11340] veth0_vlan: left promiscuous mode [ 343.208944][T11340] team0 (unregistering): Port device team_slave_1 removed [ 343.219621][T11340] team0 (unregistering): Port device team_slave_0 removed [ 343.292620][T11340] team0 (unregistering): Port device team_slave_1 removed [ 343.303965][T11340] team0 (unregistering): Port device team_slave_0 removed [ 343.378814][T11340] team0 (unregistering): Port device team_slave_1 removed [ 343.389288][T11340] team0 (unregistering): Port device team_slave_0 removed [ 343.429529][ T6882] lo speed is unknown, defaulting to 1000 [ 343.435351][ T6882] infiniband syz: ib_query_port failed (-19) [ 343.442219][T17059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.483582][T17061] veth0_vlan: entered promiscuous mode [ 343.490910][T17054] veth0_macvtap: entered promiscuous mode [ 343.498614][T17059] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.516424][T17054] veth1_macvtap: entered promiscuous mode [ 343.528405][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.535607][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.556172][T17061] veth1_vlan: entered promiscuous mode [ 343.595927][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.603060][T11339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.616327][T17054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.627716][T17061] veth0_macvtap: entered promiscuous mode [ 343.653534][T17054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.671531][T17061] veth1_macvtap: entered promiscuous mode [ 343.703696][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.760568][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.775026][T17061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.808865][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4481'. [ 343.841593][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.856571][T17061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.921708][T11337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.973629][T11337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.013808][T17059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.052230][T11337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.062634][ T29] audit: type=1326 audit(2000000102.781:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.2.4482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa051c5aeb9 code=0x0 [ 344.093596][ T3437] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.241550][ T3437] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.311101][T17438] loop1: detected capacity change from 0 to 128 [ 344.323393][T17441] erspan0: left promiscuous mode [ 344.386989][T17438] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.510017][T17438] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 344.526252][T17441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.554212][T17441] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.568020][T17441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.595510][T17459] EXT4-fs (loop1): shut down requested (0) [ 344.647637][T17061] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.722682][T17457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.746347][T17401] syz.9.4480 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 344.757647][T17401] CPU: 1 UID: 0 PID: 17401 Comm: syz.9.4480 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 344.757712][T17401] Tainted: [W]=WARN [ 344.757721][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.757734][T17401] Call Trace: [ 344.757741][T17401] [ 344.757749][T17401] __dump_stack+0x1d/0x30 [ 344.757777][T17401] dump_stack_lvl+0x95/0xd0 [ 344.757857][T17401] dump_stack+0x15/0x1b [ 344.757885][T17401] dump_header+0x80/0x240 [ 344.757914][T17401] oom_kill_process+0x295/0x350 [ 344.757940][T17401] out_of_memory+0x97d/0xb80 [ 344.757975][T17401] try_charge_memcg+0x62e/0xa10 [ 344.758013][T17401] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 344.758106][T17401] __read_swap_cache_async+0x17b/0x2d0 [ 344.758154][T17401] swap_cluster_readahead+0x262/0x3c0 [ 344.758207][T17401] swapin_readahead+0xde/0x840 [ 344.758298][T17401] ? is_bpf_text_address+0x141/0x160 [ 344.758338][T17401] ? kernel_text_address+0x94/0xb0 [ 344.758382][T17401] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 344.758462][T17401] ? __rcu_read_unlock+0x4e/0x70 [ 344.758504][T17401] ? swap_cache_get_folio+0x26f/0x280 [ 344.758631][T17401] do_swap_page+0x59b/0x2a50 [ 344.758717][T17401] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 344.758798][T17401] ? __slab_free+0x104/0x290 [ 344.758842][T17401] ? __rcu_read_lock+0x36/0x50 [ 344.758959][T17401] ? __pfx_default_wake_function+0x10/0x10 [ 344.759001][T17401] handle_mm_fault+0xb40/0x3030 [ 344.759094][T17401] ? vma_start_read+0x1c7/0x2c0 [ 344.759138][T17401] do_user_addr_fault+0x62f/0x1050 [ 344.759240][T17401] ? arch_exit_work+0x30/0x40 [ 344.759281][T17401] ? irqentry_exit+0x3c/0x510 [ 344.759373][T17401] exc_page_fault+0x62/0xa0 [ 344.759397][T17401] asm_exc_page_fault+0x26/0x30 [ 344.759420][T17401] RIP: 0033:0x7f928e39b4b9 [ 344.759443][T17401] Code: f0 0f 83 c0 00 00 00 48 89 75 00 49 89 4c 24 f8 48 8b 4d 08 48 8b 55 00 eb 91 0f 1f 80 00 00 00 00 4c 89 ea 4c 89 e6 48 89 df 02 ff ff ff 48 89 d8 48 29 e8 48 3d 80 00 00 00 0f 8e 7d 00 00 [ 344.759506][T17401] RSP: 002b:00007ffc91343220 EFLAGS: 00010202 [ 344.759530][T17401] RAX: 00007f928e050840 RBX: 00007f928e050848 RCX: ffffffff8183e797 [ 344.759625][T17401] RDX: 000000000000001f RSI: 00007f928e0daf38 RDI: 00007f928e050848 [ 344.759644][T17401] RBP: 00007f928dfb8600 R08: 00007f928e730000 R09: 00007f928e746038 [ 344.759664][T17401] R10: 0000000000000001 R11: 000000000000000c R12: 00007f928e0daf38 [ 344.759682][T17401] R13: 000000000000001f R14: 0000000000024527 R15: 0000000000000001 [ 344.759705][T17401] ? list_lru_count_one+0x17/0x100 [ 344.759796][T17401] [ 344.759807][T17401] memory: usage 307200kB, limit 307200kB, failcnt 185 [ 345.018299][T17401] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 345.026429][T17401] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 345.033801][T17401] Memory cgroup stats for /syz9: [ 345.043670][T17462] tmpfs: Bad value for 'size' [ 345.066165][T17462] loop1: detected capacity change from 0 to 512 [ 345.075056][T17462] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 345.087767][T17059] veth0_vlan: entered promiscuous mode [ 345.105241][T17059] veth1_vlan: entered promiscuous mode [ 345.117668][T17401] cache 0 [ 345.120691][T17401] rss 0 [ 345.123475][T17401] shmem 0 [ 345.126672][T17401] mapped_file 0 [ 345.130159][T17401] dirty 0 [ 345.133168][T17401] writeback 0 [ 345.138825][T17401] workingset_refault_anon 58 [ 345.143457][T17401] workingset_refault_file 0 [ 345.150386][T17401] swap 200704 [ 345.153713][T17401] swapcached 0 [ 345.157113][T17401] pgpgin 3500 [ 345.162508][T17401] pgpgout 3500 [ 345.165992][T17401] pgfault 4028 [ 345.171595][T17401] pgmajfault 23 [ 345.175119][T17401] inactive_anon 0 [ 345.178787][T17401] active_anon 0 [ 345.184526][T17401] inactive_file 0 [ 345.188170][T17401] active_file 0 [ 345.193897][T17401] unevictable 0 [ 345.197457][T17401] hierarchical_memory_limit 314572800 [ 345.205046][T17401] hierarchical_memsw_limit 9223372036854771712 [ 345.211255][T17401] total_cache 0 [ 345.217008][T17401] total_rss 0 [ 345.220388][T17401] total_shmem 0 [ 345.226026][T17401] total_mapped_file 0 [ 345.230067][T17401] total_dirty 0 [ 345.235728][T17401] total_writeback 0 [ 345.239571][T17401] total_workingset_refault_anon 58 [ 345.240652][T17059] veth0_macvtap: entered promiscuous mode [ 345.250061][T17401] total_workingset_refault_file 0 [ 345.257840][T17401] total_swap 200704 [ 345.261706][T17401] total_swapcached 0 [ 345.267582][T17059] veth1_macvtap: entered promiscuous mode [ 345.274007][T17401] total_pgpgin 3500 [ 345.279862][T17401] total_pgpgout 3500 [ 345.283813][T17401] total_pgfault 4028 [ 345.289072][T17401] total_pgmajfault 23 [ 345.293077][T17401] total_inactive_anon 0 [ 345.298291][T17401] total_active_anon 0 [ 345.302333][T17401] total_inactive_file 0 [ 345.306508][T17401] total_active_file 0 [ 345.311554][T17059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.320095][T17401] total_unevictable 0 [ 345.324124][T17401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4480,pid=17401,uid=0 [ 345.338016][T17059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.341653][T17401] Memory cgroup out of memory: Killed process 17401 (syz.9.4480) total-vm:96180kB, anon-rss:1204kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 345.389278][ T3437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.439159][ T3437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.506415][T17471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.506713][T17462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4485'. [ 345.540288][ T3437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.572306][ T3437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.653929][T17489] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26900 sclass=netlink_xfrm_socket pid=17489 comm=wÞ£ÿ [ 345.680906][T17476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.787833][T17495] loop2: detected capacity change from 0 to 512 [ 345.825548][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4490'. [ 345.832971][T17495] EXT4-fs: Ignoring removed bh option [ 345.839953][T17495] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.894548][T17495] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 345.917952][T17503] xt_TPROXY: Can be used only with -p tcp or -p udp [ 345.937867][T17495] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 345.961960][T17495] EXT4-fs (loop2): orphan cleanup on readonly fs [ 345.979896][T17495] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 345.989750][T17495] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 346.000097][T17495] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4491: Failed to acquire dquot type 1 [ 346.015687][T17495] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4491: Invalid block bitmap block 0 in block_group 0 [ 346.043242][T17495] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4491: Invalid block bitmap block 0 in block_group 0 [ 346.059869][T17501] bridge0: entered promiscuous mode [ 346.082790][T17516] loop1: detected capacity change from 0 to 512 [ 346.094134][T17495] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4491: Invalid block bitmap block 0 in block_group 0 [ 346.104252][T17501] bridge0: port 3(macsec1) entered blocking state [ 346.116240][T17501] bridge0: port 3(macsec1) entered disabled state [ 346.133526][T17495] Quota error (device loop2): write_blk: dquota write failed [ 346.140978][T17495] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4491: Failed to acquire dquot type 1 [ 346.149677][T17501] macsec1: entered allmulticast mode [ 346.160020][T17501] bridge0: entered allmulticast mode [ 346.189146][T17495] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4491: Failed to acquire dquot type 1 [ 346.208925][T17495] EXT4-fs (loop2): 1 orphan inode deleted [ 346.209313][T17516] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4496: inode has both inline data and extents flags [ 346.235775][T17495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.278477][T17501] macsec1: left allmulticast mode [ 346.285791][T17501] bridge0: left allmulticast mode [ 346.314683][T17516] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4496: couldn't read orphan inode 15 (err -117) [ 346.330945][T17054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.342713][T17501] bridge0: left promiscuous mode [ 346.384751][T17516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.518376][T17534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.527934][T17534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.561223][T17061] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.697715][T17539] netlink: 'syz.2.4497': attribute type 4 has an invalid length. [ 346.761638][T17541] netlink: 'syz.2.4497': attribute type 4 has an invalid length. [ 347.062144][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.241449][T17556] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26900 sclass=netlink_xfrm_socket pid=17556 comm=wÞ£ÿ [ 350.345902][T17542] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.353212][T17542] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.401737][T17542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.413268][T17542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.461002][T17534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.500610][ T3447] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.534011][ T3447] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.546181][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 350.546198][ T29] audit: type=1400 audit(2000000108.843:5449): avc: denied { create } for pid=17569 comm="syz.5.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 350.575255][T17570] delete_channel: no stack [ 350.591216][T11340] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.609441][ T29] audit: type=1400 audit(2000000108.899:5450): avc: denied { setopt } for pid=17569 comm="syz.5.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 350.629665][T11339] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.676412][T17580] loop9: detected capacity change from 0 to 128 [ 350.855167][T17599] loop9: detected capacity change from 0 to 512 [ 350.881841][T17599] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.909008][T17599] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.923362][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4510'. [ 350.937999][T17534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.966771][T17038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.012163][ T29] audit: type=1400 audit(2000000109.282:5451): avc: denied { read } for pid=17609 comm="syz.9.4512" dev="sockfs" ino=64232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 351.034762][T17534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.073398][ T29] audit: type=1400 audit(2000000109.338:5452): avc: denied { audit_read } for pid=17611 comm="syz.1.4513" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.105532][T17615] FAULT_INJECTION: forcing a failure. [ 351.105532][T17615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.118791][T17615] CPU: 1 UID: 0 PID: 17615 Comm: syz.9.4514 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 351.118832][T17615] Tainted: [W]=WARN [ 351.118842][T17615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.118907][T17615] Call Trace: [ 351.118915][T17615] [ 351.118925][T17615] __dump_stack+0x1d/0x30 [ 351.118958][T17615] dump_stack_lvl+0x95/0xd0 [ 351.118987][T17615] dump_stack+0x15/0x1b [ 351.119014][T17615] should_fail_ex+0x263/0x280 [ 351.119134][T17615] should_fail+0xb/0x20 [ 351.119171][T17615] should_fail_usercopy+0x1a/0x20 [ 351.119224][T17615] _copy_from_iter+0xcf/0xea0 [ 351.119260][T17615] ? __alloc_skb+0x397/0x4b0 [ 351.119339][T17615] ? __alloc_skb+0x219/0x4b0 [ 351.119373][T17615] netlink_sendmsg+0x4ae/0x6f0 [ 351.119399][T17615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.119425][T17615] ____sys_sendmsg+0x5af/0x600 [ 351.119456][T17615] ___sys_sendmsg+0x195/0x1e0 [ 351.119572][T17615] __x64_sys_sendmsg+0xd4/0x160 [ 351.119604][T17615] x64_sys_call+0x17ba/0x3000 [ 351.119637][T17615] do_syscall_64+0xc0/0x2a0 [ 351.119770][T17615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.119793][T17615] RIP: 0033:0x7f928e4caeb9 [ 351.119812][T17615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.119870][T17615] RSP: 002b:00007f928cf27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.119897][T17615] RAX: ffffffffffffffda RBX: 00007f928e745fa0 RCX: 00007f928e4caeb9 [ 351.119917][T17615] RDX: 0000000000008000 RSI: 0000200000003f40 RDI: 0000000000000003 [ 351.119934][T17615] RBP: 00007f928cf27090 R08: 0000000000000000 R09: 0000000000000000 [ 351.120030][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.120047][T17615] R13: 00007f928e746038 R14: 00007f928e745fa0 R15: 00007ffc913431d8 [ 351.120151][T17615] [ 351.130167][T17534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.408080][T11339] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.438495][T11339] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.463633][T11339] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.472886][T11339] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.566548][T17637] netlink: 'syz.0.4520': attribute type 1 has an invalid length. [ 351.627449][T17640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.838945][T17655] ALSA: seq fatal error: cannot create timer (-22) [ 352.334983][T17663] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.403699][T17663] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.474152][T17663] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.557322][T17675] netlink: 'syz.2.4529': attribute type 1 has an invalid length. [ 352.580850][T17663] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.808609][T17684] loop1: detected capacity change from 0 to 512 [ 353.069958][T17684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.101950][T17684] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.155321][T17676] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 353.250623][T17695] netlink: 'syz.0.4531': attribute type 4 has an invalid length. [ 353.267036][T11340] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.290017][T11340] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.315040][T17699] netlink: 'syz.0.4531': attribute type 4 has an invalid length. [ 353.323136][T11340] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.345491][T11340] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.369211][T17682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.391010][T17682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.838246][T17715] loop2: detected capacity change from 0 to 512 [ 353.850541][T17695] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.855169][T17715] EXT4-fs: Ignoring removed bh option [ 353.858005][T17695] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.868334][T17715] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.948504][T17715] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 353.963822][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.976133][T17715] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 353.996133][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.997489][T17715] EXT4-fs (loop2): orphan cleanup on readonly fs [ 354.021287][T17715] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 354.030998][T17715] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 354.052314][T17715] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4534: Failed to acquire dquot type 1 [ 354.066162][T17715] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4534: Invalid block bitmap block 0 in block_group 0 [ 354.082117][T17715] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4534: Invalid block bitmap block 0 in block_group 0 [ 354.098740][T17715] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4534: Invalid block bitmap block 0 in block_group 0 [ 354.115823][T17715] Quota error (device loop2): write_blk: dquota write failed [ 354.124384][T17715] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 354.135736][T17715] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4534: Failed to acquire dquot type 1 [ 354.150192][T17715] Quota error (device loop2): write_blk: dquota write failed [ 354.157731][T17715] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 354.170054][T17715] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4534: Failed to acquire dquot type 1 [ 354.187211][T17715] EXT4-fs (loop2): 1 orphan inode deleted [ 354.196504][T17682] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.208854][T17715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.224111][T17711] syzkaller0: entered promiscuous mode [ 354.229711][T17711] syzkaller0: entered allmulticast mode [ 354.249943][T11339] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.263696][T11339] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.276548][T11339] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.297927][T17682] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.314220][T17054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.351475][T11339] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.398246][T17682] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.431561][T17747] loop2: detected capacity change from 0 to 512 [ 354.438548][T17747] EXT4-fs: Ignoring removed bh option [ 354.444047][T17747] EXT4-fs: Ignoring removed mblk_io_submit option [ 354.453459][T17747] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 354.466919][T17747] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 354.476722][T17747] EXT4-fs (loop2): orphan cleanup on readonly fs [ 354.487990][T17747] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4541: Failed to acquire dquot type 1 [ 354.492863][T17751] loop9: detected capacity change from 0 to 128 [ 354.507950][T17747] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4541: Invalid block bitmap block 0 in block_group 0 [ 354.525350][T17747] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4541: Invalid block bitmap block 0 in block_group 0 [ 354.542058][T17747] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4541: Invalid block bitmap block 0 in block_group 0 [ 354.543302][T17682] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.561658][T17751] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.579594][T17747] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4541: Failed to acquire dquot type 1 [ 354.586333][T17751] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.593199][T17747] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4541: Failed to acquire dquot type 1 [ 354.593340][T17747] EXT4-fs (loop2): 1 orphan inode deleted [ 354.627282][T17747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.653627][T11339] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.668528][T11337] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.685763][T11337] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.700371][T17751] EXT4-fs (loop9): shut down requested (0) [ 354.709123][ T3437] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.729008][T17054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.755939][T17038] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.884911][T17765] loop2: detected capacity change from 0 to 512 [ 354.908250][T17763] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4545'. [ 354.919680][T17765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.925855][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4545'. [ 354.932713][T17765] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.934094][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 354.969747][T17054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.994203][T17769] netlink: 'syz.2.4547': attribute type 1 has an invalid length. [ 355.052855][T17775] loop9: detected capacity change from 0 to 1024 [ 355.061596][T17775] ext4: Unknown parameter 'obj_type' [ 355.125854][T17780] netlink: 580 bytes leftover after parsing attributes in process `syz.2.4552'. [ 355.217515][T17784] loop9: detected capacity change from 0 to 512 [ 355.224945][T17784] EXT4-fs: Ignoring removed bh option [ 355.232660][T17784] EXT4-fs: Ignoring removed mblk_io_submit option [ 355.243244][T17784] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 355.258120][T17784] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 355.268304][T17784] EXT4-fs (loop9): orphan cleanup on readonly fs [ 355.278567][T17784] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4554: Failed to acquire dquot type 1 [ 355.292124][T17784] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4554: Invalid block bitmap block 0 in block_group 0 [ 355.310546][T17784] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4554: Invalid block bitmap block 0 in block_group 0 [ 355.327774][T17784] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4554: Invalid block bitmap block 0 in block_group 0 [ 355.330122][T17061] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.349819][T17784] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4554: Failed to acquire dquot type 1 [ 355.371256][T17784] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4554: Failed to acquire dquot type 1 [ 355.404538][T17784] EXT4-fs (loop9): 1 orphan inode deleted [ 355.445123][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4557'. [ 355.477220][T17784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.606926][T17038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.806768][T17830] loop9: detected capacity change from 0 to 128 [ 355.895462][T17810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.906883][T17810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.941825][T17837] FAULT_INJECTION: forcing a failure. [ 355.941825][T17837] name failslab, interval 1, probability 0, space 0, times 0 [ 355.957047][T17837] CPU: 0 UID: 0 PID: 17837 Comm: syz.1.4564 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 355.957106][T17837] Tainted: [W]=WARN [ 355.957114][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.957126][T17837] Call Trace: [ 355.957133][T17837] [ 355.957143][T17837] __dump_stack+0x1d/0x30 [ 355.957173][T17837] dump_stack_lvl+0x95/0xd0 [ 355.957196][T17837] dump_stack+0x15/0x1b [ 355.957293][T17837] should_fail_ex+0x263/0x280 [ 355.957384][T17837] should_failslab+0x8c/0xb0 [ 355.957415][T17837] kmem_cache_alloc_noprof+0x68/0x490 [ 355.957448][T17837] ? dup_fd+0x3a/0x510 [ 355.957475][T17837] dup_fd+0x3a/0x510 [ 355.957651][T17837] copy_files+0x97/0xe0 [ 355.957694][T17837] copy_process+0xc18/0x1f10 [ 355.957785][T17837] kernel_clone+0x16b/0x5b0 [ 355.957811][T17837] __se_sys_clone3+0x1f5/0x230 [ 355.957853][T17837] __x64_sys_clone3+0x31/0x40 [ 355.957880][T17837] x64_sys_call+0x2c0f/0x3000 [ 355.957986][T17837] do_syscall_64+0xc0/0x2a0 [ 355.958039][T17837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.958088][T17837] RIP: 0033:0x7fb91ce9aeb9 [ 355.958106][T17837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.958154][T17837] RSP: 002b:00007fb91b8f6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 355.958180][T17837] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb91ce9aeb9 [ 355.958194][T17837] RDX: 00007fb91b8f6f10 RSI: 0000000000000058 RDI: 00007fb91b8f6f10 [ 355.958208][T17837] RBP: 00007fb91b8f7090 R08: 0000000000000000 R09: 0000000000000058 [ 355.958222][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.958235][T17837] R13: 00007fb91d116038 R14: 00007fb91d115fa0 R15: 00007ffd61d41528 [ 355.958260][T17837] [ 356.358794][T17854] loop1: detected capacity change from 0 to 512 [ 356.389523][T17854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.465949][T17854] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.550448][T17861] loop2: detected capacity change from 0 to 2048 [ 356.601815][T17854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.612695][T17854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.627159][T17861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.656705][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4568'. [ 356.962031][T17871] loop5: detected capacity change from 0 to 512 [ 357.060560][T17871] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4570: invalid indirect mapped block 4294967295 (level 1) [ 357.078323][T17871] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4570: invalid indirect mapped block 4294967295 (level 1) [ 357.121147][T17871] EXT4-fs (loop5): 2 truncates cleaned up [ 357.139212][T17871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.160818][T17871] EXT4-fs (loop5): shut down requested (0) [ 357.171186][T11339] Bluetooth: hci0: Frame reassembly failed (-84) [ 357.208653][T17054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.213452][T17848] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.239377][T17881] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4570'. [ 357.319764][T13461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.400514][T17848] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.462761][T17894] loop5: detected capacity change from 0 to 512 [ 357.513809][T17894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.527916][T17894] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.813875][T17903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.824831][T17903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.825224][T17891] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4575'. [ 357.901375][T17911] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4579'. [ 357.920158][T17848] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.949178][T17913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4580'. [ 358.403859][T17914] batadv_slave_0: entered promiscuous mode [ 358.418172][T17908] batadv_slave_0: left promiscuous mode [ 358.455673][T17929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=17929 comm=syz.2.4583 [ 358.468537][T17929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=17929 comm=syz.2.4583 [ 358.510400][T17848] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.968098][T13461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.037615][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 359.037630][ T29] audit: type=1326 audit(2000000116.794:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17943 comm="syz.5.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 359.067831][ T29] audit: type=1326 audit(2000000116.803:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17943 comm="syz.5.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 359.091606][ T29] audit: type=1326 audit(2000000116.803:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17943 comm="syz.5.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 359.115189][ T29] audit: type=1326 audit(2000000116.803:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17943 comm="syz.5.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 359.138824][ T29] audit: type=1326 audit(2000000116.803:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17943 comm="syz.5.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 359.162592][ T29] audit: type=1326 audit(2000000116.803:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17943 comm="syz.5.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 359.186165][ T29] audit: type=1326 audit(2000000116.803:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17943 comm="syz.5.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 359.209803][ T29] audit: type=1326 audit(2000000116.812:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17943 comm="syz.5.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 359.233391][ T29] audit: type=1326 audit(2000000116.812:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17943 comm="syz.5.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 359.376853][ T3707] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 359.422569][T17953] FAULT_INJECTION: forcing a failure. [ 359.422569][T17953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 359.435900][T17953] CPU: 1 UID: 0 PID: 17953 Comm: syz.9.4588 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.435943][T17953] Tainted: [W]=WARN [ 359.435955][T17953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.435971][T17953] Call Trace: [ 359.435979][T17953] [ 359.435990][T17953] __dump_stack+0x1d/0x30 [ 359.436024][T17953] dump_stack_lvl+0x95/0xd0 [ 359.436079][T17953] dump_stack+0x15/0x1b [ 359.436107][T17953] should_fail_ex+0x263/0x280 [ 359.436187][T17953] should_fail_alloc_page+0xf2/0x100 [ 359.436227][T17953] __alloc_frozen_pages_noprof+0x108/0x350 [ 359.436274][T17953] alloc_pages_mpol+0xb3/0x260 [ 359.436337][T17953] alloc_pages_noprof+0x8f/0x130 [ 359.436381][T17953] pte_alloc_one+0x1e/0xd0 [ 359.436422][T17953] __do_fault+0x7b/0x200 [ 359.436451][T17953] handle_mm_fault+0x11d7/0x3030 [ 359.436536][T17953] do_user_addr_fault+0x3fd/0x1050 [ 359.436578][T17953] exc_page_fault+0x62/0xa0 [ 359.436612][T17953] asm_exc_page_fault+0x26/0x30 [ 359.436639][T17953] RIP: 0010:__get_user_4+0x14/0x20 [ 359.436732][T17953] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 d0 08 02 00 90 90 90 90 90 90 90 90 90 90 [ 359.436796][T17953] RSP: 0018:ffffc90001cffd90 EFLAGS: 00050287 [ 359.436819][T17953] RAX: 0000200000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 359.436835][T17953] RDX: 00007ffffffff000 RSI: 0000000000000001 RDI: 0000000000000000 [ 359.436912][T17953] RBP: 0000000000004bfb R08: ffff88810a482100 R09: 0000000000000004 [ 359.436932][T17953] R10: 0000000000004bfb R11: 0000000000000000 R12: 0000000000004bfb [ 359.436950][T17953] R13: ffff8881396aac00 R14: ffff888100069000 R15: 0000200000000000 [ 359.436979][T17953] vt_do_diacrit+0xbb/0x810 [ 359.437038][T17953] vt_ioctl+0xe2a/0x18d0 [ 359.437071][T17953] ? tty_jobctrl_ioctl+0x29c/0x810 [ 359.437109][T17953] tty_ioctl+0x7d7/0xb80 [ 359.437144][T17953] ? __pfx_tty_ioctl+0x10/0x10 [ 359.437182][T17953] __se_sys_ioctl+0xce/0x140 [ 359.437223][T17953] __x64_sys_ioctl+0x43/0x50 [ 359.437297][T17953] x64_sys_call+0x14b0/0x3000 [ 359.437332][T17953] do_syscall_64+0xc0/0x2a0 [ 359.437410][T17953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.437441][T17953] RIP: 0033:0x7f928e4caeb9 [ 359.437462][T17953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.437486][T17953] RSP: 002b:00007f928cf27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.437538][T17953] RAX: ffffffffffffffda RBX: 00007f928e745fa0 RCX: 00007f928e4caeb9 [ 359.437558][T17953] RDX: 0000200000000000 RSI: 0000000000004bfb RDI: 0000000000000004 [ 359.437577][T17953] RBP: 00007f928cf27090 R08: 0000000000000000 R09: 0000000000000000 [ 359.437595][T17953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.437612][T17953] R13: 00007f928e746038 R14: 00007f928e745fa0 R15: 00007ffc913431d8 [ 359.437640][T17953] [ 359.782863][T17955] netlink: 'syz.9.4589': attribute type 11 has an invalid length. [ 359.790861][T17955] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4589'. [ 359.846010][ T29] audit: type=1326 audit(2000000117.542:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17943 comm="syz.5.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x7ffc0000 [ 359.872700][T17956] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4589'. [ 359.885157][T17956] loop9: detected capacity change from 0 to 512 [ 359.923050][T17956] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 359.931153][T17956] EXT4-fs (loop9): orphan cleanup on readonly fs [ 359.940830][T17956] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 359.968803][T17956] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 359.987793][T17956] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #13: comm syz.9.4589: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 360.043245][T17961] netlink: 'syz.2.4591': attribute type 1 has an invalid length. [ 360.057369][T17956] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4589: couldn't read orphan inode 13 (err -117) [ 360.076770][T17956] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.092031][T17955] EXT4-fs error (device loop9): ext4_lookup:1785: comm syz.9.4589: inode #15: comm syz.9.4589: iget: illegal inode # [ 360.107009][T17955] EXT4-fs error (device loop9): ext4_lookup:1785: comm syz.9.4589: inode #15: comm syz.9.4589: iget: illegal inode # [ 360.155560][T17038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.171098][T17961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.182292][T17964] bond1: (slave dummy0): making interface the new active one [ 360.191300][T17964] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 360.212913][T17966] bond1: entered promiscuous mode [ 360.218001][T17966] dummy0: entered promiscuous mode [ 360.223954][T17967] batadv_slave_0: entered promiscuous mode [ 360.257256][T17961] bond1: left promiscuous mode [ 360.262239][T17961] dummy0: left promiscuous mode [ 360.309523][T17962] batadv_slave_0: left promiscuous mode [ 360.394935][T17973] netlink: 'syz.2.4594': attribute type 1 has an invalid length. [ 360.542594][T17973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.561586][ T3447] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.570811][T17976] -1: renamed from syzkaller0 [ 360.673707][T17988] 9p: Could not find request transport: f<­“‚À L6ÞÑd [ 360.750803][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4598'. [ 360.819394][T17991] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17991 comm=syz.2.4598 [ 361.064284][T11337] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.090621][T17994] batadv_slave_0: entered promiscuous mode [ 361.101964][T17996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.119341][T17992] batadv_slave_0: left promiscuous mode [ 361.837649][T17038] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 361.848761][T17038] CPU: 1 UID: 0 PID: 17038 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.848801][T17038] Tainted: [W]=WARN [ 361.848885][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.848904][T17038] Call Trace: [ 361.848913][T17038] [ 361.848923][T17038] __dump_stack+0x1d/0x30 [ 361.848956][T17038] dump_stack_lvl+0x95/0xd0 [ 361.849044][T17038] dump_stack+0x15/0x1b [ 361.849072][T17038] dump_header+0x80/0x240 [ 361.849101][T17038] oom_kill_process+0x295/0x350 [ 361.849135][T17038] out_of_memory+0x97d/0xb80 [ 361.849171][T17038] try_charge_memcg+0x62e/0xa10 [ 361.849216][T17038] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 361.849264][T17038] __read_swap_cache_async+0x17b/0x2d0 [ 361.849313][T17038] swap_cluster_readahead+0x262/0x3c0 [ 361.849391][T17038] swapin_readahead+0xde/0x840 [ 361.849469][T17038] ? __perf_event_task_sched_in+0xa65/0xad0 [ 361.849503][T17038] ? __rcu_read_unlock+0x4e/0x70 [ 361.849545][T17038] ? swap_cache_get_folio+0x26f/0x280 [ 361.849630][T17038] do_swap_page+0x59b/0x2a50 [ 361.849667][T17038] ? finish_task_switch+0x79/0x280 [ 361.849706][T17038] ? __schedule+0x82d/0xc90 [ 361.849782][T17038] ? __rcu_read_lock+0x36/0x50 [ 361.849821][T17038] ? __pfx_default_wake_function+0x10/0x10 [ 361.849865][T17038] handle_mm_fault+0xb40/0x3030 [ 361.849912][T17038] ? vma_start_read+0x1c7/0x2c0 [ 361.849957][T17038] do_user_addr_fault+0x62f/0x1050 [ 361.850003][T17038] exc_page_fault+0x62/0xa0 [ 361.850036][T17038] asm_exc_page_fault+0x26/0x30 [ 361.850064][T17038] RIP: 0033:0x7f928e4860d7 [ 361.850130][T17038] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 361.850155][T17038] RSP: 002b:00007ffc913434d0 EFLAGS: 00010202 [ 361.850176][T17038] RAX: 0000000000000000 RBX: 0000555574fc0500 RCX: 00007f928e4860d7 [ 361.850193][T17038] RDX: 00007ffc91343510 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.850212][T17038] RBP: 00007ffc9134357c R08: 0000000000000000 R09: 0000000000000000 [ 361.850230][T17038] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 361.850248][T17038] R13: 00000000000927c0 R14: 00000000000556fa R15: 00007ffc913435d0 [ 361.850275][T17038] [ 361.850285][T17038] memory: usage 307200kB, limit 307200kB, failcnt 458 [ 362.081977][T17038] memory+swap: usage 307524kB, limit 9007199254740988kB, failcnt 0 [ 362.089902][T17038] kmem: usage 306940kB, limit 9007199254740988kB, failcnt 0 [ 362.097274][T17038] Memory cgroup stats for /syz9: [ 362.191491][T17038] cache 0 [ 362.199553][T17038] rss 24576 [ 362.202724][T17038] shmem 0 [ 362.205683][T17038] mapped_file 0 [ 362.209238][T17038] dirty 0 [ 362.212262][T17038] writeback 8192 [ 362.215835][T17038] workingset_refault_anon 79 [ 362.220529][T17038] workingset_refault_file 0 [ 362.225150][T17038] swap 356352 [ 362.228463][T17038] swapcached 20480 [ 362.232255][T17038] pgpgin 12618 [ 362.235652][T17038] pgpgout 12607 [ 362.239218][T17038] pgfault 15038 [ 362.242723][T17038] pgmajfault 34 [ 362.246206][T17038] inactive_anon 8192 [ 362.250210][T17038] active_anon 12288 [ 362.254123][T17038] inactive_file 0 [ 362.257862][T17038] active_file 0 [ 362.261343][T17038] unevictable 0 [ 362.264850][T17038] hierarchical_memory_limit 314572800 [ 362.270258][T17038] hierarchical_memsw_limit 9223372036854771712 [ 362.276479][T17038] total_cache 0 [ 362.279963][T17038] total_rss 24576 [ 362.283682][T17038] total_shmem 0 [ 362.287273][T17038] total_mapped_file 0 [ 362.291292][T17038] total_dirty 0 [ 362.294791][T17038] total_writeback 8192 [ 362.298915][T17038] total_workingset_refault_anon 79 [ 362.304091][T17038] total_workingset_refault_file 0 [ 362.309162][T17038] total_swap 356352 [ 362.313139][T17038] total_swapcached 20480 [ 362.317490][T17038] total_pgpgin 12618 [ 362.321502][T17038] total_pgpgout 12607 [ 362.325587][T17038] total_pgfault 15038 [ 362.329614][T17038] total_pgmajfault 34 [ 362.333644][T17038] total_inactive_anon 8192 [ 362.338101][T17038] total_active_anon 12288 [ 362.342495][T17038] total_inactive_file 0 [ 362.346674][T17038] total_active_file 0 [ 362.350698][T17038] total_unevictable 0 [ 362.354709][T17038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4602,pid=18001,uid=0 [ 362.369465][T17038] Memory cgroup out of memory: Killed process 18001 (syz.9.4602) total-vm:94132kB, anon-rss:1204kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 363.181996][T18017] loop9: detected capacity change from 0 to 512 [ 363.204614][T18017] EXT4-fs: Ignoring removed bh option [ 363.210158][T18017] EXT4-fs: Ignoring removed mblk_io_submit option [ 363.247579][T18017] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 363.268731][T18017] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 363.287694][T18017] EXT4-fs (loop9): orphan cleanup on readonly fs [ 363.295042][T18017] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4605: Failed to acquire dquot type 1 [ 363.322426][T18017] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4605: Invalid block bitmap block 0 in block_group 0 [ 363.350518][T18017] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4605: Invalid block bitmap block 0 in block_group 0 [ 363.378681][T18017] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4605: Invalid block bitmap block 0 in block_group 0 [ 363.405481][T18017] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4605: Failed to acquire dquot type 1 [ 363.417380][T18017] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4605: Failed to acquire dquot type 1 [ 363.429279][T18017] EXT4-fs (loop9): 1 orphan inode deleted [ 363.458265][T18017] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 363.549235][T18023] sctp: [Deprecated]: syz.2.4607 (pid 18023) Use of int in max_burst socket option deprecated. [ 363.549235][T18023] Use struct sctp_assoc_value instead [ 363.592977][T18025] netlink: 'syz.2.4608': attribute type 1 has an invalid length. [ 363.650323][T17038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.713188][T18014] tun0: tun_chr_ioctl cmd 1074025675 [ 363.718594][T18014] tun0: persist enabled [ 363.744930][ T6881] kernel write not supported for file [eventfd] (pid: 6881 comm: kworker/1:13) [ 363.894217][T18025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.904664][T11337] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.953463][T18049] netlink: 'syz.2.4611': attribute type 4 has an invalid length. [ 363.970245][T18049] netlink: 'syz.2.4611': attribute type 4 has an invalid length. [ 364.113853][T18060] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26900 sclass=netlink_xfrm_socket pid=18060 comm=wÞ£ÿ [ 364.126563][T18060] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 364.361965][T18066] netlink: 508 bytes leftover after parsing attributes in process `syz.2.4611'. [ 364.901233][T18069] loop5: detected capacity change from 0 to 256 [ 364.922162][T18069] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 364.956144][T18069] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 365.010838][T17038] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 365.021878][T17038] CPU: 1 UID: 0 PID: 17038 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.021985][T17038] Tainted: [W]=WARN [ 365.021995][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.022013][T17038] Call Trace: [ 365.022023][T17038] [ 365.022032][T17038] __dump_stack+0x1d/0x30 [ 365.022065][T17038] dump_stack_lvl+0x95/0xd0 [ 365.022170][T17038] dump_stack+0x15/0x1b [ 365.022199][T17038] dump_header+0x80/0x240 [ 365.022225][T17038] oom_kill_process+0x295/0x350 [ 365.022258][T17038] out_of_memory+0x97d/0xb80 [ 365.022306][T17038] try_charge_memcg+0x62e/0xa10 [ 365.022353][T17038] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 365.022401][T17038] __read_swap_cache_async+0x17b/0x2d0 [ 365.022521][T17038] swap_cluster_readahead+0x262/0x3c0 [ 365.022573][T17038] swapin_readahead+0xde/0x840 [ 365.022672][T17038] ? __perf_event_task_sched_in+0xa65/0xad0 [ 365.022744][T17038] ? __rcu_read_unlock+0x4e/0x70 [ 365.022786][T17038] ? swap_cache_get_folio+0x26f/0x280 [ 365.022831][T17038] do_swap_page+0x59b/0x2a50 [ 365.022954][T17038] ? finish_task_switch+0x79/0x280 [ 365.023022][T17038] ? __schedule+0x82d/0xc90 [ 365.023043][T17038] ? __rcu_read_lock+0x36/0x50 [ 365.023083][T17038] ? __pfx_default_wake_function+0x10/0x10 [ 365.023134][T17038] handle_mm_fault+0xb40/0x3030 [ 365.023234][T17038] ? vma_start_read+0x1c7/0x2c0 [ 365.023346][T17038] do_user_addr_fault+0x62f/0x1050 [ 365.023386][T17038] exc_page_fault+0x62/0xa0 [ 365.023419][T17038] asm_exc_page_fault+0x26/0x30 [ 365.023454][T17038] RIP: 0033:0x7f928e4860d7 [ 365.023477][T17038] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 365.023507][T17038] RSP: 002b:00007ffc913434d0 EFLAGS: 00010202 [ 365.023526][T17038] RAX: 0000000000000000 RBX: 0000555574fc0500 RCX: 00007f928e4860d7 [ 365.023540][T17038] RDX: 00007ffc91343510 RSI: 0000000000000000 RDI: 0000000000000000 [ 365.023557][T17038] RBP: 00007ffc9134357c R08: 0000000000000000 R09: 0000000000000000 [ 365.023578][T17038] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 365.023615][T17038] R13: 00000000000927c0 R14: 00000000000561c7 R15: 00007ffc913435d0 [ 365.023647][T17038] [ 365.023657][T17038] memory: usage 307200kB, limit 307200kB, failcnt 750 [ 365.256827][T17038] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 365.264942][T17038] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 365.272372][T17038] Memory cgroup stats for /syz9: [ 365.289282][T17038] cache 0 [ 365.297286][T17038] rss 12288 [ 365.300532][T17038] shmem 0 [ 365.303499][T17038] mapped_file 0 [ 365.306986][T17038] dirty 0 [ 365.310064][T17038] writeback 20480 [ 365.313893][T17038] workingset_refault_anon 124 [ 365.318632][T17038] workingset_refault_file 0 [ 365.323204][T17038] swap 385024 [ 365.326513][T17038] swapcached 28672 [ 365.330317][T17038] pgpgin 12913 [ 365.333742][T17038] pgpgout 12906 [ 365.337229][T17038] pgfault 15562 [ 365.340784][T17038] pgmajfault 56 [ 365.344276][T17038] inactive_anon 28672 [ 365.348313][T17038] active_anon 0 [ 365.351796][T17038] inactive_file 0 [ 365.355540][T17038] active_file 0 [ 365.359293][T17038] unevictable 0 [ 365.362796][T17038] hierarchical_memory_limit 314572800 [ 365.368339][T17038] hierarchical_memsw_limit 9223372036854771712 [ 365.374585][T17038] total_cache 0 [ 365.378088][T17038] total_rss 12288 [ 365.381809][T17038] total_shmem 0 [ 365.385382][T17038] total_mapped_file 0 [ 365.389488][T17038] total_dirty 0 [ 365.393053][T17038] total_writeback 20480 [ 365.397308][T17038] total_workingset_refault_anon 124 [ 365.402571][T17038] total_workingset_refault_file 0 [ 365.407679][T17038] total_swap 385024 [ 365.411508][T17038] total_swapcached 28672 [ 365.415799][T17038] total_pgpgin 12913 [ 365.419736][T17038] total_pgpgout 12906 [ 365.423741][T17038] total_pgfault 15562 [ 365.427780][T17038] total_pgmajfault 56 [ 365.431795][T17038] total_inactive_anon 28672 [ 365.436410][T17038] total_active_anon 0 [ 365.440509][T17038] total_inactive_file 0 [ 365.444740][T17038] total_active_file 0 [ 365.448840][T17038] total_unevictable 0 [ 365.452912][T17038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4615,pid=18063,uid=0 [ 365.467701][T17038] Memory cgroup out of memory: Killed process 18063 (syz.9.4615) total-vm:94132kB, anon-rss:1204kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 365.679675][T18074] loop9: detected capacity change from 0 to 512 [ 365.740894][T18074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.754022][T18074] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.773019][T18074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.782592][T18074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.819497][ T3437] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.832404][T18059] netlink: 'syz.2.4611': attribute type 29 has an invalid length. [ 365.890723][T18074] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.960280][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 365.971638][T18074] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.987087][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.009282][T18090] loop2: detected capacity change from 0 to 128 [ 366.046037][T18098] FAULT_INJECTION: forcing a failure. [ 366.046037][T18098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.059476][T18098] CPU: 1 UID: 0 PID: 18098 Comm: syz.0.4623 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 366.059520][T18098] Tainted: [W]=WARN [ 366.059529][T18098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.059546][T18098] Call Trace: [ 366.059555][T18098] [ 366.059565][T18098] __dump_stack+0x1d/0x30 [ 366.059621][T18098] dump_stack_lvl+0x95/0xd0 [ 366.059650][T18098] dump_stack+0x15/0x1b [ 366.059755][T18098] should_fail_ex+0x263/0x280 [ 366.059857][T18098] should_fail+0xb/0x20 [ 366.059894][T18098] should_fail_usercopy+0x1a/0x20 [ 366.059948][T18098] _copy_to_iter+0x387/0xea0 [ 366.059995][T18098] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 366.060020][T18098] __skb_datagram_iter+0xc6/0x680 [ 366.060071][T18098] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 366.060101][T18098] skb_copy_datagram_iter+0x3d/0x100 [ 366.060129][T18098] netlink_recvmsg+0x1a8/0x550 [ 366.060158][T18098] ? __pfx_netlink_recvmsg+0x10/0x10 [ 366.060204][T18098] sock_recvmsg+0x139/0x160 [ 366.060240][T18098] ____sys_recvmsg+0xf5/0x280 [ 366.060271][T18098] ___sys_recvmsg+0x11f/0x3b0 [ 366.060331][T18098] do_recvmmsg+0x1ef/0x560 [ 366.060365][T18098] ? get_timespec64+0xd2/0x100 [ 366.060408][T18098] __x64_sys_recvmmsg+0xfb/0x170 [ 366.060489][T18098] x64_sys_call+0x2b75/0x3000 [ 366.060524][T18098] do_syscall_64+0xc0/0x2a0 [ 366.060563][T18098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.060593][T18098] RIP: 0033:0x7f0f80a2aeb9 [ 366.060650][T18098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.060676][T18098] RSP: 002b:00007f0f7f487028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 366.060703][T18098] RAX: ffffffffffffffda RBX: 00007f0f80ca5fa0 RCX: 00007f0f80a2aeb9 [ 366.060722][T18098] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 366.060742][T18098] RBP: 00007f0f7f487090 R08: 0000200000003700 R09: 0000000000000000 [ 366.060759][T18098] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 366.060834][T18098] R13: 00007f0f80ca6038 R14: 00007f0f80ca5fa0 R15: 00007ffd56f39ab8 [ 366.060860][T18098] [ 366.065663][T18074] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.077272][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4620'. [ 366.382639][T17061] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.448269][T18074] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.590863][T18124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18124 comm=syz.1.4625 [ 366.617653][ T3437] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.626043][ T3437] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.634345][ T3437] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.652863][ T3437] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.940118][T18147] loop5: detected capacity change from 0 to 8192 [ 366.950834][T18147] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.111747][T18147] openvswitch: netlink: EtherType 0 is less than min 600 [ 367.664657][T18187] loop1: detected capacity change from 0 to 1024 [ 367.811387][T18187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.823109][T18187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.838613][T18187] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 367.883778][T18186] syz.0.4627 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 367.898033][T18186] CPU: 1 UID: 0 PID: 18186 Comm: syz.0.4627 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 367.898097][T18186] Tainted: [W]=WARN [ 367.898108][T18186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.898126][T18186] Call Trace: [ 367.898138][T18186] [ 367.898149][T18186] __dump_stack+0x1d/0x30 [ 367.898183][T18186] dump_stack_lvl+0x95/0xd0 [ 367.898215][T18186] dump_stack+0x15/0x1b [ 367.898304][T18186] dump_header+0x80/0x240 [ 367.898334][T18186] oom_kill_process+0x295/0x350 [ 367.898371][T18186] out_of_memory+0x97d/0xb80 [ 367.898423][T18186] try_charge_memcg+0x62e/0xa10 [ 367.898470][T18186] obj_cgroup_charge_pages+0x23/0xc0 [ 367.898527][T18186] __memcg_kmem_charge_page+0x9e/0x170 [ 367.898572][T18186] __alloc_frozen_pages_noprof+0x18a/0x350 [ 367.898620][T18186] alloc_pages_mpol+0xb3/0x260 [ 367.898733][T18186] alloc_pages_noprof+0x8f/0x130 [ 367.898779][T18186] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 367.898894][T18186] __kvmalloc_node_noprof+0x471/0x680 [ 367.899010][T18186] ? ip_set_alloc+0x24/0x30 [ 367.899053][T18186] ? ip_set_alloc+0x24/0x30 [ 367.899100][T18186] ip_set_alloc+0x24/0x30 [ 367.899270][T18186] hash_netiface_create+0x282/0x740 [ 367.899316][T18186] ? __pfx_hash_netiface_create+0x10/0x10 [ 367.899362][T18186] ip_set_create+0x3cf/0x970 [ 367.899555][T18186] ? __nla_parse+0x40/0x60 [ 367.899605][T18186] nfnetlink_rcv_msg+0x509/0x5d0 [ 367.899735][T18186] netlink_rcv_skb+0x123/0x220 [ 367.899783][T18186] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 367.899875][T18186] nfnetlink_rcv+0x167/0x1720 [ 367.899983][T18186] ? trace_event_reg+0xe0/0x190 [ 367.900012][T18186] ? perf_trace_add+0x176/0x1a0 [ 367.900120][T18186] ? event_sched_in+0xebd/0xf90 [ 367.900157][T18186] ? __list_add_valid_or_report+0x38/0xe0 [ 367.900263][T18186] ? _raw_spin_lock_bh+0x56/0xb0 [ 367.900309][T18186] ? should_fail_ex+0x30/0x280 [ 367.900353][T18186] ? selinux_nlmsg_lookup+0x99/0x890 [ 367.900400][T18186] ? __rcu_read_unlock+0x33/0x70 [ 367.900468][T18186] ? __netlink_lookup+0x276/0x2b0 [ 367.900501][T18186] netlink_unicast+0x5c0/0x690 [ 367.900548][T18186] netlink_sendmsg+0x5c8/0x6f0 [ 367.900577][T18186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.900635][T18186] ____sys_sendmsg+0x5af/0x600 [ 367.900668][T18186] ___sys_sendmsg+0x195/0x1e0 [ 367.900778][T18186] __x64_sys_sendmsg+0xd4/0x160 [ 367.900812][T18186] x64_sys_call+0x17ba/0x3000 [ 367.900853][T18186] do_syscall_64+0xc0/0x2a0 [ 367.900896][T18186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.900924][T18186] RIP: 0033:0x7f0f80a2aeb9 [ 367.900947][T18186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.900971][T18186] RSP: 002b:00007f0f7f487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.901015][T18186] RAX: ffffffffffffffda RBX: 00007f0f80ca5fa0 RCX: 00007f0f80a2aeb9 [ 367.901035][T18186] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 367.901054][T18186] RBP: 00007f0f80a98c1f R08: 0000000000000000 R09: 0000000000000000 [ 367.901072][T18186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.901086][T18186] R13: 00007f0f80ca6038 R14: 00007f0f80ca5fa0 R15: 00007ffd56f39ab8 [ 367.901115][T18186] [ 367.901195][T18186] memory: usage 307200kB, limit 307200kB, failcnt 112 [ 368.228963][T18186] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 368.236879][T18186] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 368.244209][T18186] Memory cgroup stats for /syz0: [ 368.422056][T18186] cache 0 [ 368.430108][T18186] rss 0 [ 368.432958][T18186] shmem 0 [ 368.435921][T18186] mapped_file 0 [ 368.439415][T18186] dirty 0 [ 368.442820][T18186] writeback 4096 [ 368.446504][T18186] workingset_refault_anon 31 [ 368.451298][T18186] workingset_refault_file 0 [ 368.455880][T18186] swap 172032 [ 368.459388][T18186] swapcached 12288 [ 368.463287][T18186] pgpgin 19961 [ 368.466748][T18186] pgpgout 19957 [ 368.470243][T18186] pgfault 25718 [ 368.473770][T18186] pgmajfault 25 [ 368.477300][T18186] inactive_anon 4096 [ 368.481225][T18186] active_anon 8192 [ 368.485072][T18186] inactive_file 0 [ 368.488735][T18186] active_file 4096 [ 368.492490][T18186] unevictable 0 [ 368.496054][T18186] hierarchical_memory_limit 314572800 [ 368.501454][T18186] hierarchical_memsw_limit 9223372036854771712 [ 368.507656][T18186] total_cache 0 [ 368.511144][T18186] total_rss 0 [ 368.514544][T18186] total_shmem 0 [ 368.518054][T18186] total_mapped_file 0 [ 368.522070][T18186] total_dirty 0 [ 368.525637][T18186] total_writeback 4096 [ 368.529781][T18186] total_workingset_refault_anon 31 [ 368.534923][T18186] total_workingset_refault_file 0 [ 368.539994][T18186] total_swap 172032 [ 368.543832][T18186] total_swapcached 12288 [ 368.548114][T18186] total_pgpgin 19961 [ 368.552083][T18186] total_pgpgout 19957 [ 368.556118][T18186] total_pgfault 25718 [ 368.560177][T18186] total_pgmajfault 25 [ 368.564186][T18186] total_inactive_anon 4096 [ 368.568627][T18186] total_active_anon 8192 [ 368.572949][T18186] total_inactive_file 0 [ 368.577130][T18186] total_active_file 4096 [ 368.581477][T18186] total_unevictable 0 [ 368.585480][T18186] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4627,pid=18184,uid=0 [ 368.600233][T18186] Memory cgroup out of memory: Killed process 18184 (syz.0.4627) total-vm:94060kB, anon-rss:1328kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 368.731662][T17061] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.766007][T18200] netlink: 'syz.2.4629': attribute type 1 has an invalid length. [ 368.791096][T18200] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.905548][T18206] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4629'. [ 368.939455][T18212] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4635'. [ 368.985883][T18200] erspan0: entered allmulticast mode [ 368.995501][T18200] bond4: (slave erspan0): making interface the new active one [ 369.006448][T17038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.022139][T18200] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 369.067012][T18218] loop1: detected capacity change from 0 to 512 [ 369.086914][T18220] SELinux: security_context_str_to_sid () failed with errno=-22 [ 369.181576][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 369.181596][ T29] audit: type=1400 audit(2000000126.279:5477): avc: denied { kexec_image_load } for pid=18226 comm="syz.2.4639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 369.314811][T18236] loop9: detected capacity change from 0 to 512 [ 369.324464][T18236] EXT4-fs: Ignoring removed bh option [ 369.330004][T18236] EXT4-fs: Ignoring removed mblk_io_submit option [ 369.377739][T18236] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 369.405785][T18218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.420168][T18218] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.544064][ T29] audit: type=1400 audit(2000000126.625:5478): avc: denied { map } for pid=18217 comm="syz.1.4631" path="/18/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 369.607755][T18236] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 369.618371][T18236] EXT4-fs (loop9): orphan cleanup on readonly fs [ 369.637966][T18236] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 4 [ 369.648582][T18236] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 369.671613][T18236] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4633: Failed to acquire dquot type 1 [ 369.693413][T18236] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4633: Invalid block bitmap block 0 in block_group 0 [ 369.712728][T18236] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4633: Invalid block bitmap block 0 in block_group 0 [ 369.733106][T18236] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4633: Invalid block bitmap block 0 in block_group 0 [ 369.746975][T18236] Quota error (device loop9): write_blk: dquota write failed [ 369.754441][T18236] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 369.764332][T18236] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4633: Failed to acquire dquot type 1 [ 369.778853][T18236] Quota error (device loop9): write_blk: dquota write failed [ 369.786308][T18236] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 369.796218][T18236] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4633: Failed to acquire dquot type 1 [ 369.808607][T18236] EXT4-fs (loop9): 1 orphan inode deleted [ 370.506877][T18252] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.4631: corrupted inode contents [ 370.519001][T18252] EXT4-fs (loop1): Remounting filesystem read-only [ 370.525691][T18252] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 370.555565][T18236] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.648161][T17061] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.726302][T17038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.821053][T18341] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4643'. [ 370.974067][T18352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.011707][T18355] lo speed is unknown, defaulting to 1000 [ 371.221089][T18361] tipc: Enabled bearer , priority 0 [ 371.228621][T18361] syzkaller0: entered promiscuous mode [ 371.234236][T18361] syzkaller0: entered allmulticast mode [ 371.843625][T18361] tipc: Resetting bearer [ 371.867831][T18361] tipc: Disabling bearer [ 371.887470][T18371] netlink: 'syz.1.4650': attribute type 11 has an invalid length. [ 371.897512][T18371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4650'. [ 371.931028][T18374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4652'. [ 371.945581][T18374] erspan0: left allmulticast mode [ 372.009158][T18375] loop1: detected capacity change from 0 to 512 [ 372.054463][T18375] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 372.074746][T18374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.114048][T18375] EXT4-fs (loop1): orphan cleanup on readonly fs [ 372.136017][T18374] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.159134][T18375] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 372.196075][T18374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.217260][T18375] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 372.224063][T18375] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.4650: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 372.248078][T18375] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4650: couldn't read orphan inode 13 (err -117) [ 372.288464][T18375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.336782][T18382] loop5: detected capacity change from 0 to 4096 [ 372.359911][T18382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.382212][T18382] sctp: [Deprecated]: syz.5.4656 (pid 18382) Use of int in max_burst socket option. [ 372.382212][T18382] Use struct sctp_assoc_value instead [ 372.415950][T13461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.504260][T18371] EXT4-fs error (device loop1): ext4_lookup:1785: comm syz.1.4650: inode #15: comm syz.1.4650: iget: illegal inode # [ 372.540922][T18392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.573982][T17061] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.588795][T18392] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.616958][T18392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.637682][ T29] audit: type=1326 audit(2000000129.506:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18394 comm="syz.5.4659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f571002aeb9 code=0x0 [ 372.787011][T18404] loop1: detected capacity change from 0 to 512 [ 372.794747][T18403] loop9: detected capacity change from 0 to 512 [ 372.802248][T18404] ext4: Unknown parameter '' [ 372.826187][T18403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.874192][T18403] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.912306][T18399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.924527][T18399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.955897][T18403] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4664'. [ 372.972747][T18407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.982110][T18407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.152929][T18399] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.225071][T17038] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.313033][T18417] random: crng reseeded on system resumption [ 373.326830][ T29] audit: type=1400 audit(2000000130.151:5480): avc: denied { shutdown } for pid=18416 comm="syz.9.4666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 373.458790][T18424] netlink: 'syz.9.4668': attribute type 1 has an invalid length. [ 373.486652][T17805] ================================================================== [ 373.494796][T17805] BUG: KCSAN: data-race in __d_drop / fast_dput [ 373.501062][T17805] [ 373.503414][T17805] write to 0xffff88812dc070d0 of 8 bytes by task 3001 on cpu 1: [ 373.511077][T17805] __d_drop+0x14d/0x240 [ 373.515282][T17805] __dentry_kill+0x122/0x460 [ 373.519911][T17805] finish_dput+0x2b/0x200 [ 373.524262][T17805] dput+0x52/0x60 [ 373.527924][T17805] step_into_slowpath+0x38c/0x4c0 [ 373.532975][T17805] path_lookupat+0x330/0x500 [ 373.537608][T17805] filename_lookup+0x32a/0x390 [ 373.542407][T17805] do_readlinkat+0x7d/0x340 [ 373.546936][T17805] __x64_sys_readlink+0x47/0x60 [ 373.551815][T17805] x64_sys_call+0x2af1/0x3000 [ 373.556527][T17805] do_syscall_64+0xc0/0x2a0 [ 373.561064][T17805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.566998][T17805] [ 373.569347][T17805] read to 0xffff88812dc070d0 of 8 bytes by task 17805 on cpu 0: [ 373.577524][T17805] fast_dput+0x5f/0x2c0 [ 373.581703][T17805] dput+0x24/0x60 [ 373.585358][T17805] do_unlinkat+0x217/0x4b0 [ 373.589799][T17805] __x64_sys_unlink+0x2e/0x40 [ 373.594499][T17805] x64_sys_call+0x2f48/0x3000 [ 373.599215][T17805] do_syscall_64+0xc0/0x2a0 [ 373.603749][T17805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.609661][T17805] [ 373.612008][T17805] value changed: 0xffff888237b87e98 -> 0x0000000000000000 [ 373.619126][T17805] [ 373.621473][T17805] Reported by Kernel Concurrency Sanitizer on: [ 373.627731][T17805] CPU: 0 UID: 0 PID: 17805 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 373.638701][T17805] Tainted: [W]=WARN [ 373.642518][T17805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.652591][T17805] ================================================================== [ 373.663821][T18425] loop5: detected capacity change from 0 to 512 [ 373.702328][T18426] FAULT_INJECTION: forcing a failure. [ 373.702328][T18426] name failslab, interval 1, probability 0, space 0, times 0 [ 373.715096][T18426] CPU: 1 UID: 0 PID: 18426 Comm: syz.9.4668 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 373.715140][T18426] Tainted: [W]=WARN [ 373.715150][T18426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.715168][T18426] Call Trace: [ 373.715185][T18426] [ 373.715195][T18426] __dump_stack+0x1d/0x30 [ 373.715222][T18426] dump_stack_lvl+0x95/0xd0 [ 373.715253][T18426] dump_stack+0x15/0x1b [ 373.715388][T18426] should_fail_ex+0x263/0x280 [ 373.715430][T18426] should_failslab+0x8c/0xb0 [ 373.715461][T18426] __kmalloc_cache_noprof+0x64/0x4a0 [ 373.715565][T18426] ? rtnl_newlink+0x5c/0x1370 [ 373.715597][T18426] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.715646][T18426] rtnl_newlink+0x5c/0x1370 [ 373.715747][T18426] ? __rcu_read_unlock+0x4e/0x70 [ 373.715816][T18426] ? __memcg_slab_free_hook+0x135/0x230 [ 373.715859][T18426] ? __rcu_read_unlock+0x4e/0x70 [ 373.715983][T18426] ? avc_has_perm_noaudit+0xab/0x130 [ 373.716052][T18426] ? cred_has_capability+0x224/0x290 [ 373.716089][T18426] ? selinux_capable+0x31/0x40 [ 373.716115][T18426] ? security_capable+0x7b/0x90 [ 373.716194][T18426] ? ns_capable+0x7c/0xb0 [ 373.716252][T18426] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.716284][T18426] rtnetlink_rcv_msg+0x64b/0x720 [ 373.716341][T18426] netlink_rcv_skb+0x123/0x220 [ 373.716415][T18426] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.716455][T18426] rtnetlink_rcv+0x1c/0x30 [ 373.716511][T18426] netlink_unicast+0x5c0/0x690 [ 373.716550][T18426] netlink_sendmsg+0x5c8/0x6f0 [ 373.716581][T18426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.716680][T18426] ____sys_sendmsg+0x5af/0x600 [ 373.716710][T18426] ___sys_sendmsg+0x195/0x1e0 [ 373.716813][T18426] __x64_sys_sendmsg+0xd4/0x160 [ 373.716846][T18426] x64_sys_call+0x17ba/0x3000 [ 373.716880][T18426] do_syscall_64+0xc0/0x2a0 [ 373.716990][T18426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.717073][T18426] RIP: 0033:0x7f928e4caeb9 [ 373.717095][T18426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.717123][T18426] RSP: 002b:00007f928cf06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.717200][T18426] RAX: ffffffffffffffda RBX: 00007f928e746090 RCX: 00007f928e4caeb9 [ 373.717221][T18426] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 373.717239][T18426] RBP: 00007f928cf06090 R08: 0000000000000000 R09: 0000000000000000 [ 373.717322][T18426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.717340][T18426] R13: 00007f928e746128 R14: 00007f928e746090 R15: 00007ffc913431d8 [ 373.717369][T18426] [ 373.998585][T18425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.012246][T18425] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.139872][T18399] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.205127][T18399] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.332107][T18399] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.438353][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.610129][T13461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.876703][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.006138][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.087856][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.258202][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0