last executing test programs: 3m14.448823412s ago: executing program 1 (id=482): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x64, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300069c867542baeaa9c04bd03001e00010000000000000000000718"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x4000810) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r11, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1}, 0x4, 0xc, 0x400001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 3m14.289062742s ago: executing program 1 (id=484): r0 = socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[{0x6, 0x8, 0xff, 0x7fff0000}]}) unshare(0xa000200) (async) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) (async) ppoll(&(0x7f0000000280), 0x0, &(0x7f00000003c0), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040)=0x8, 0x4) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 3m14.13678016s ago: executing program 1 (id=486): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f00000001c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f00000009c0)={[{@resuid={'resuid', 0x3d, r0}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@measure}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^,)#.'}}, {@subj_user={'subj_user', 0x3d, 'grpjquota'}}, {@smackfshat={'smackfshat', 0x3d, '$+\\'}}, {@euid_gt={'euid>', r0}}, {@fowner_eq={'fowner', 0x3d, r1}}]}, 0x1, 0x51e, &(0x7f0000000400)="$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") set_mempolicy(0x2, &(0x7f0000000040)=0x4, 0x1) r2 = socket(0x1d, 0x2, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) 3m14.070803634s ago: executing program 1 (id=488): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x4, 0x6, 0x20, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x700, 0x8, 0x4}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, r2, 0x1230, 0x8020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x14040080) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x21001e, &(0x7f0000000140), 0x1, 0x558, &(0x7f00000004c0)="$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") ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000007c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba650596000000004000"/53, 0x35}], 0x1}, 0x4) 3m13.563938534s ago: executing program 1 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000002480)={0xfffffffe, 0x4, 0x5, 0x5, 0x4, "0000000000000000000000d787d16700"}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x10001, 0x10000002, 0x7, 0x7ffa, 0x90, "a88f72d5000000001d00"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) getdents(r4, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000140)=0xffffff1f, 0x12) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x3, 0x17, "a9b39ba517c50901"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3m13.203286605s ago: executing program 1 (id=505): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000200)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r5 = epoll_create1(0x80000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r10 = syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0x849b, 0x10100, 0xfffffff8, 0x234, 0x0, r7}, &(0x7f0000000140), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xf503, 0x40, 0x0, 0x10}, &(0x7f0000000180)=0x0, &(0x7f0000000640)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r10, 0x184c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x30000009}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x121}}, './file0\x00'}) copy_file_range(r0, &(0x7f0000000000)=0x3ff, r0, 0x0, 0x6, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1f, &(0x7f0000000580)=ANY=[@ANYBLOB="185800000200000000000000000000001863000002000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020786c2500000000002020207b1af8ff0000000009ffb702000008000000b703000007000000850000000600000085100000fbffffff50fb2fc6bd3853ea1b9dd439045587e3819e03e65a6ba9411030a875ce1f1908ca82001de91ea90d23f3e75910c7424eab681a5953bd3ac9b4de67683bfc31fbafb1329848ac8bd4bd50268ab12949e1a044d09ace3c7e2087d056f0"], &(0x7f0000000040)='syzkaller\x00', 0x1004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 3m13.134962989s ago: executing program 32 (id=505): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000200)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r5 = epoll_create1(0x80000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r10 = syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0x849b, 0x10100, 0xfffffff8, 0x234, 0x0, r7}, &(0x7f0000000140), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xf503, 0x40, 0x0, 0x10}, &(0x7f0000000180)=0x0, &(0x7f0000000640)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r10, 0x184c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x30000009}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x121}}, './file0\x00'}) copy_file_range(r0, &(0x7f0000000000)=0x3ff, r0, 0x0, 0x6, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1f, &(0x7f0000000580)=ANY=[@ANYBLOB="185800000200000000000000000000001863000002000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020786c2500000000002020207b1af8ff0000000009ffb702000008000000b703000007000000850000000600000085100000fbffffff50fb2fc6bd3853ea1b9dd439045587e3819e03e65a6ba9411030a875ce1f1908ca82001de91ea90d23f3e75910c7424eab681a5953bd3ac9b4de67683bfc31fbafb1329848ac8bd4bd50268ab12949e1a044d09ace3c7e2087d056f0"], &(0x7f0000000040)='syzkaller\x00', 0x1004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 2m30.543341837s ago: executing program 2 (id=1171): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090528bd7000fddbdf25022000fd", @ANYRES32=r2, @ANYBLOB="0800020064010100080001007f00000108000a000200000008000400e012000108000100000000000800090003"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x1}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x3f, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 2m30.256413594s ago: executing program 2 (id=1179): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000680)={0x0, 0xec21, 0x80, 0x1, 0x36d}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) (fail_nth: 3) 2m29.880136476s ago: executing program 2 (id=1181): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x3}, 0x4020, 0x10000, 0x40008, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) 2m29.728586444s ago: executing program 2 (id=1183): r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x10b15, 0x47104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x30108a6, &(0x7f0000000040)=ANY=[], 0xb, 0x0, &(0x7f0000000040)) 2m29.586528463s ago: executing program 2 (id=1186): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = mq_open(&(0x7f0000000140)='\'\x00', 0x5e59de333a3b7272, 0x4, &(0x7f0000000180)={0x400, 0x5, 0x5, 0x7f}) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x3e, 0x1, @tid=r1}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e22, @loopback}, 0x10) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0xab, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000599c7f80c58d90c8000600000008001b0000000000"], 0x30}}, 0x0) (async) close(0x3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14d53c8b20b593015ef776000000090601020000"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x4040000) (async) r5 = syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/uts\x00') (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SNAPSHOT_FREE(r7, 0x3305) (async) close(r5) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xe8, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfc, {}, [{0xd4, 0x1, [@m_gact={0xd0, 0x12, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b69, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x21b1, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1619, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x785, 0x20000008}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x115f}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2033, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0xb7d, 0x2}}]}, {0x41, 0x6, "d740b5c373c9c440e07906727907c087e0517347651dcdeea4b12d2287a38ec59f037356107b35d0a3a8acaf7f1f7a6a3e4f55f1d05f6eca95195780dd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xe8}}, 0x4000000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x0, 0x0) (async) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f000048b000/0x1000)=nil, &(0x7f0000dae000/0x4000)=nil, &(0x7f000095e000/0x2000)=nil, &(0x7f000085c000/0x1000)=nil, &(0x7f0000e4a000/0x1000)=nil, &(0x7f0000753000/0x2000)=nil, &(0x7f000042e000/0x2000)=nil, &(0x7f0000b46000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000e18000/0x3000)=nil, &(0x7f0000000000)="2c1e117cd1fc9b73b2ca028382d15c0b6f764a10632c3e779c92012144c10e3fa69d363faebab068306c213c3b1becb7fbb3448470c636ad37730d3d5a2500c70f260843850eedb22dd2f0cc9de4ae414c7bab74bee535f4e464c4f551dceffa501fc872baa56d814bbf51f9c7888309bdc8c866495ea77a13785b450b9abaa14b6e112d9c361ad39600", 0x8a, r8}, 0x68) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) (async) r10 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r10, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) (async) r11 = getpid() syz_clone3(&(0x7f00000006c0)={0x128010100, &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000380), {0x16}, &(0x7f00000003c0)=""/36, 0x24, &(0x7f0000000580)=""/193, &(0x7f0000000680)=[r1, r1, r9, r1, r1, r1, r10, r11], 0x8, {r7}}, 0x58) 2m29.076804012s ago: executing program 2 (id=1192): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x3}, 0x4020, 0x10000, 0x40008, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2e8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) 2m29.052229324s ago: executing program 33 (id=1192): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x3}, 0x4020, 0x10000, 0x40008, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2e8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) 1m28.066384276s ago: executing program 5 (id=2315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="002e2e0000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m27.980888861s ago: executing program 5 (id=2316): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91103d000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x40047452, 0xf0ff1f00000000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtaction={0x80, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x6c, 0x1, [@m_sample={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x60000000, 0x2, 0x6, 0x9}}, @TCA_SAMPLE_RATE={0x5, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x80}}, 0x0) 1m27.907315276s ago: executing program 5 (id=2319): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") set_mempolicy(0x2, &(0x7f0000000040)=0x4, 0x1) r0 = socket(0x1d, 0x2, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) 1m27.717962286s ago: executing program 5 (id=2322): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000019c0)="9e83696f", 0x4}], 0x3) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="140400", @ANYBLOB="0101"], 0x24}, 0x1, 0x0, 0x0, 0x40b0}, 0x20000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m27.614540003s ago: executing program 5 (id=2324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000008010001000900000001000000000000bd127bba52697e8e4a00b02d62da552c1ea49f776a1c06338fe3cf7d4160a097cdb4392072", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0x2, 0x0, 0x2, 0xa88, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xbfefffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fallocate(r1, 0x8, 0x9, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) ioprio_set$pid(0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000380)={0x170, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x150, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}5\'6[{\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}\xa2&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(*.{+[\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}-#(#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x85\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '{,l\\&/\\.@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']^:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20000000}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x170}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r7, 0x800, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000c01d) 1m27.445660162s ago: executing program 5 (id=2331): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x8, 0x20, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb, 0x6, 0x4b, {0x7, 0x25, 0x1, 0x0, 0x9, 0x9d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x6f, 0x7, {0x7, 0x25, 0x1, 0x181, 0x21, 0x136}}}}}}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x5, 0xb9, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x0, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x1, 0x8, "aa"}, @as_header={0x7, 0x24, 0x1, 0xf8, 0x9, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x52, 0xf, 0xd, {0x7, 0x25, 0x1, 0x1, 0x8f, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb2, 0x2, 0x2, 0x7f, "d1e3", "d1e4"}, @as_header={0x7, 0x24, 0x1, 0x74, 0x2, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2bcb, 0xe6cb, 0xc, "59145b"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf, 0x4, 0xf7, 0xe2, "", "c2"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x1000, 0x3, "05d29c38a2d19b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x9, 0xa, {0x7, 0x25, 0x1, 0x3, 0x5, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x1, 0x5, 0x8, 0xff, 0x6}, 0x159, &(0x7f0000000740)={0x5, 0xf, 0x159, 0x4, [@generic={0x93, 0x10, 0x4, "358a346d8744aca134ed3c23691f1600dabe2ddf2db9e7d604ae1d35134125e48577c5d95337ca7b00db3637f1b52d858307eb0eed50247c0f83060f585356ca6281efb6da5157ed3d7afc379b2b043a3f8dcf1da41bbf4f885745befa737548cdb15fcda6f841a6ecd42815ff0e36bf5ed8caf358c95d8e3df925bb49cc9e1af7cb18d177f88d7c050b340b758fe04d"}, @ptm_cap={0x3}, @generic={0xae, 0x10, 0x4, "a9254974fb48b917aa7de484ce08d0c3428177addb41787db0c6655242d041bb2a2acffdee2bfd3eb437f14ffe920c0fcc8e518675e50fdcfd20a12cea9de005fbece0e6bebdf10c9f01d52c9b79757f4c40ee6c487e1389010a47e81e97b10de61b54d5b403716b6f1a23fe797c955aed7a604ade3fc45abb5bdd18f0313615f16fddf0ee6879c3794b5efc1f3dbcb9a67286c6daad8b807dde3be53621917b9a426d14c85fad19203b6a"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x5, 0xf00, 0x6, [0xc000]}]}, 0x5, [{0xc4, &(0x7f00000008c0)=@string={0xc4, 0x3, "558d18c2ef8b57af76c66d644626c4232a98f23584eb18c16cdac978a5a12c8e88f0166b0d6d1ceae7b50613b87841d472ccf72d88edc8abefe97ace29fa1f56cbd8738a838267e7ab7f7798128ab666a32cba89927a6df6380ed7cbe5d227652328cb411ca4cf351e65b330a40291fc46cf5a0b6e9dcc36182b6d6ee79f706701b99d1c510a5a288b31fc53c7edcb62ead0f02c37cec1a27141b75ba14a181f64383178f5785f93d0a58378c0b2a925866166699df52a2a940c2ce66f43358323a9"}}, {0xbf, &(0x7f00000009c0)=@string={0xbf, 0x3, "5e1b110f1be35d47cc613e4fa0d37904e544af251038ce073a31d93346f545b266f81bc9529f9a873ac4f55d616821d98f83ef50ce7b2c9345a9e5a7b9928984ac3d159e2434008814968d7ecdef740f5e9b84b4be89c336482a3af0468c4f4d99b023b51acf93dfa68bc08b417047aca9b9045a21d30700981a31c76aa3d1ba7a0abd90730fcfe7f47ee0d882c042e140b29fd841f5a1c8af8b5e768727ad71390f0a86d05961d7339a2f9e5b226a429925c7db5b8ea3563b218f4455"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x4001}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xc0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = getpid() syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f0000000080)={[{@nodots}, {@nodots}, {@nodots}, {@fat=@check_strict}, {@fat=@dos1xfloppy}, {@fat=@debug}, {@fat=@dmask={'dmask', 0x3d, 0x4}}]}, 0x0, 0x22e, &(0x7f0000000100)="$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") process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) 1m24.327094185s ago: executing program 0 (id=2385): socket(0x10, 0x803, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0x94}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 1m23.867265321s ago: executing program 0 (id=2391): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x410881, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x2404c885) 1m23.819796134s ago: executing program 0 (id=2392): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e053d, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc21cc, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0xfffffffffffff800, 0x8}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x2) syz_clone(0x2d000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 1m23.599272617s ago: executing program 0 (id=2396): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff058500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000192, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004000ac98310e7b05c466974b893a66d2bb2bce29d6219295180877625e9e34b42e321e58490086add0ba4a2d8bfe0137c1404cb2fb571fba02e0d6d7c6cf09ec5f3ff282129ccbe848daea6eb6e1cfa6e67beccc3b8"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x14, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x74}}, 0x20000885) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000104000000000000000000000000988b12057d5d5f9aace60023382f2ea5a626764f98b153876b5d5819715ca55f2fb186769581d11cdbb8be82b6a1dc691d420e08e4d886ae2e72f74314af1daafa2b7699", @ANYRES32=0x0, @ANYRESOCT=r0], 0x48}}, 0x2000000) 1m23.539853111s ago: executing program 0 (id=2398): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000280), 0x1, 0x5a9, &(0x7f00000002c0)="$eJzs3U9oHGUbAPBnZrNN/+T70g8+QaWHokKF0k3SP1o9tVexUOhB8KJhsw0lm2zJJtqEgOm9iD2ISi/1pgePigcP4sWjVy+KZ6HYoND0oCubnU23MYmbmM3G7O8Hk33fmck+7zszz+zOywwbQM86Xv+TRjwVEZeTiMGWZX2RLTzeWG95aaH4cGmhmEStduWXJJKIeLC0UGyun2SvRyJiMSKejIhv8hEn09W3PNAsVOfmJ0bL5dJ0Vh+ambw+VJ2bP3VtcnS8NF6aOvPiS+fOnz03cnqktbkPa621/Nb6euvH2+/e+u6Vu7c//ezYYvH90SQuxEC2rLUfO6mxTfJxYc38s50I1kVJtxvAtuSyPK+n0hMxGLks69dTaz059O9K84AOqvVH1IAelch/6FHN7wH169/mtJvfP+5dbFyA1OMuLy0U34lm/L7G2EQcXLk2Ofxr8tiVSf168+huNpR9afFmRAz39f31+E+y42/7hneigXTU1xcbO+rR/m8ObKSr559Y5/wz0Bw7/Yea57/l7Py3vHr8PYqf2+D8d7nNGL+//tNHG8a/2R9Prxs/WY2frBM/jYg324x/57Uvz2+0LPk44kSsH391nc3Hh4euXiuXhht/143x1YljL2/c/4jDG8RvjNkeXPmYae3/gaxNaZv9/+Lbz59Z3CT+889uvv/X2/6HIuK9NuP/78Enr2607N7N5H79W8BW938S+bi7WdCWAeEXLhz/ISsaNQQAAAAAAAAAgB2UrtzLlqSF1XKaFgqNZ3j/H4fTcqU6c/JqZXZqrHHP29HIp807rQYb9aReH8nux23WT6+pn8llAXOHVuqFYqU81uW+AwAAAAAAAAAAAAAAAAAAwF5xZM3z/7/lVp7/X/tz1cB+tfFPfgP7nfyH3vV4/iddawew+3z+Q8+qyX/oXfIfepf8h94l/6F3yX/oXfIfepf8BwAAAAAAAAAAAAAAAAAAAAAAAACAjrh86VJ9qj1cWijW62N9c7MTlbdOjZWqE4XJ2WKhWJm+XhivVMbLpUKxMvl375dUKteHY2r2xtBMqTozVJ2bf2OyMjvV/E3RUr7jPQIAAAAAAAAAAAAAAAAAAIB/n4GVKUkLEflGPU0LhYj/RMTRJJKr18ql4Yj4b0R8n8v31+sj3W40AAAAAAAAAAAAAAAAAAAA7DOHstfp6tz8xGi5XNr5Ql/nQ7Rf6NvKyhGxuLPNqL/jlv8rn23ALm+6xwqx2GjTXmlP24Xc3jgO936hG2cjAAAAAAAAAAAAAAAAAADobS1PdLfpj842CAAAAAAAAAAAAAAAAAAAAHpS+nMSEfXpxOBzA2uXHkiWcyuvEfH2nSsf3BidmZkeqc+/vzp/5sNs/ulutB9oVzNP04io5zEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwSHVufmK0XC5Nb7PQ38Y63e4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHb8GQAA//++Gsc2") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaa006201ff000000063c39ac1414bbac1414aa00004001d90f2addbf9a2106f257602e37d446a06e102c7f69be", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078000072355e411c681883105f9e0dac48f528cabe1b8c0d15deaa7764008fc0385b6780e51fd1159dd153986086b13e47e714f44c7116d6a33308fce1"], 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0xf0b, 0x8070bd2e, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10, 0x543, 0x0, 0x4000000}, 0x80, 0x0, 0x4, 0x10001, 0x7ff, 0x4, 0x18, 0x8, 0x5, 0xedf, {0xc16e, 0x9, 0xb, 0xff, 0x6, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8044000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1e}, @TCA_FQ_ORPHAN_MASK={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x200}]}}]}, 0x48}}, 0x4048000) r7 = accept$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000180)=@req={0x0, 0x2, 0x5, 0x4}, 0x10) 1m23.537327711s ago: executing program 0 (id=2399): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x2508, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x41, 0x2003206, @vifc_lcl_addr=@multicast2, @private=0xa010104}, 0x10) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000040)={0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) exit(0x0) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m12.688693104s ago: executing program 34 (id=2331): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x8, 0x20, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb, 0x6, 0x4b, {0x7, 0x25, 0x1, 0x0, 0x9, 0x9d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x6f, 0x7, {0x7, 0x25, 0x1, 0x181, 0x21, 0x136}}}}}}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x5, 0xb9, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x0, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x1, 0x8, "aa"}, @as_header={0x7, 0x24, 0x1, 0xf8, 0x9, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x52, 0xf, 0xd, {0x7, 0x25, 0x1, 0x1, 0x8f, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb2, 0x2, 0x2, 0x7f, "d1e3", "d1e4"}, @as_header={0x7, 0x24, 0x1, 0x74, 0x2, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2bcb, 0xe6cb, 0xc, "59145b"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf, 0x4, 0xf7, 0xe2, "", "c2"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x1000, 0x3, "05d29c38a2d19b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x9, 0xa, {0x7, 0x25, 0x1, 0x3, 0x5, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x1, 0x5, 0x8, 0xff, 0x6}, 0x159, &(0x7f0000000740)={0x5, 0xf, 0x159, 0x4, [@generic={0x93, 0x10, 0x4, "358a346d8744aca134ed3c23691f1600dabe2ddf2db9e7d604ae1d35134125e48577c5d95337ca7b00db3637f1b52d858307eb0eed50247c0f83060f585356ca6281efb6da5157ed3d7afc379b2b043a3f8dcf1da41bbf4f885745befa737548cdb15fcda6f841a6ecd42815ff0e36bf5ed8caf358c95d8e3df925bb49cc9e1af7cb18d177f88d7c050b340b758fe04d"}, @ptm_cap={0x3}, @generic={0xae, 0x10, 0x4, "a9254974fb48b917aa7de484ce08d0c3428177addb41787db0c6655242d041bb2a2acffdee2bfd3eb437f14ffe920c0fcc8e518675e50fdcfd20a12cea9de005fbece0e6bebdf10c9f01d52c9b79757f4c40ee6c487e1389010a47e81e97b10de61b54d5b403716b6f1a23fe797c955aed7a604ade3fc45abb5bdd18f0313615f16fddf0ee6879c3794b5efc1f3dbcb9a67286c6daad8b807dde3be53621917b9a426d14c85fad19203b6a"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x5, 0xf00, 0x6, [0xc000]}]}, 0x5, [{0xc4, &(0x7f00000008c0)=@string={0xc4, 0x3, "558d18c2ef8b57af76c66d644626c4232a98f23584eb18c16cdac978a5a12c8e88f0166b0d6d1ceae7b50613b87841d472ccf72d88edc8abefe97ace29fa1f56cbd8738a838267e7ab7f7798128ab666a32cba89927a6df6380ed7cbe5d227652328cb411ca4cf351e65b330a40291fc46cf5a0b6e9dcc36182b6d6ee79f706701b99d1c510a5a288b31fc53c7edcb62ead0f02c37cec1a27141b75ba14a181f64383178f5785f93d0a58378c0b2a925866166699df52a2a940c2ce66f43358323a9"}}, {0xbf, &(0x7f00000009c0)=@string={0xbf, 0x3, "5e1b110f1be35d47cc613e4fa0d37904e544af251038ce073a31d93346f545b266f81bc9529f9a873ac4f55d616821d98f83ef50ce7b2c9345a9e5a7b9928984ac3d159e2434008814968d7ecdef740f5e9b84b4be89c336482a3af0468c4f4d99b023b51acf93dfa68bc08b417047aca9b9045a21d30700981a31c76aa3d1ba7a0abd90730fcfe7f47ee0d882c042e140b29fd841f5a1c8af8b5e768727ad71390f0a86d05961d7339a2f9e5b226a429925c7db5b8ea3563b218f4455"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x4001}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xc0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = getpid() syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f0000000080)={[{@nodots}, {@nodots}, {@nodots}, {@fat=@check_strict}, {@fat=@dos1xfloppy}, {@fat=@debug}, {@fat=@dmask={'dmask', 0x3d, 0x4}}]}, 0x0, 0x22e, &(0x7f0000000100)="$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") process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) 1m9.215015147s ago: executing program 35 (id=2399): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x2508, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x41, 0x2003206, @vifc_lcl_addr=@multicast2, @private=0xa010104}, 0x10) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000040)={0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) exit(0x0) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 55.082991473s ago: executing program 7 (id=2748): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x64}}, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x1, @perf_bp={0x0, 0x8}, 0x120, 0x10000, 0x3, 0x0, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, 0x0, &(0x7f0000000380)=0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 54.836813577s ago: executing program 7 (id=2750): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r0, 0x4b4a, 0x10000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x11) 54.820071739s ago: executing program 7 (id=2751): r0 = socket(0x10, 0x803, 0x0) sendmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)="9a", 0x1}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c}}], 0x20, 0x4005}}], 0x1, 0x4000050) 54.771483131s ago: executing program 7 (id=2753): r0 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x201}, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8, 0x10, 0x7, 0x800, {{0x7, 0x4, 0x0, 0x9, 0x1c, 0x67, 0x0, 0x4, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x38}, {[@rr={0x7, 0x7, 0x81, [@empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x5, 0x0, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x66, 0x0, 0x8, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x23, 0x1, [{0x0, 0x7, "2bf1ec744a"}, {0x0, 0x10, "693924a3de9521bb9e39e8d64957"}, {0x2, 0x6, "4bc3fa30"}]}]}}}}}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000200080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r8], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000380)={@local, @remote, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x700, 0x7800, 0x6, 0x8, {{0x2e, 0x4, 0x1, 0x8, 0xb8, 0x67, 0x0, 0x10, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x7b, 0x0, [{0x5, 0x12, "111174378291ab367b9f7d0622b340c5"}, {0x7, 0x6, "39d2a72e"}, {0x5, 0x9, "996354c192e5c9"}, {0x0, 0x12, "bad3e3abd47075fd3bd726683986bfe5"}, {0x5, 0xd, "1d5aaa341127fd26802060"}, {0x1, 0x11, "b9b56e8b4d459d70533d2c2f8aad43"}, {0x2, 0x4, "43be"}, {0x6, 0x11, "fbbf7ae8172b0132b53be10a8b20fa"}, {0x1, 0xf, "41e92b64ea16b4bac2ddac7a06"}]}, @timestamp_addr={0x44, 0x1c, 0x68, 0x1, 0x1, [{@rand_addr=0x64010102, 0xf61749d}, {@private=0xa010101, 0x4}, {@private=0xa010101, 0x9}]}, @rr={0x7, 0x7, 0xc4, [@remote]}]}}}}}) r14 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6138, &(0x7f0000000040)={0x0, 0x9fcc, 0x4000, 0x2, 0x2d}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r15, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000506fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r18, @ANYBLOB="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", @ANYRES32=r18, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x80, 0x40, 0x1c0ce51f, 0x3b, {{0x30, 0x4, 0x1, 0x8, 0xc0, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@noop, @cipso={0x86, 0x36, 0x1, [{0x3, 0x10, "98c294abd3f42256a0263dee5952"}, {0x6, 0x7, "ab7ab98a5a"}, {0x6, 0x7, "58c6aa28bd"}, {0x7, 0x3, "f5"}, {0x1, 0xf, "a44f575568b3c1843fad7e20f4"}]}, @timestamp_prespec={0x44, 0x34, 0x70, 0x3, 0x2, [{@private=0xa010102, 0xffffffff}, {@rand_addr=0x64010102, 0x10000}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x8}, {@broadcast, 0x1c07}]}, @lsrr={0x83, 0x13, 0x7b, [@loopback, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x7f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @lsrr={0x83, 0x1b, 0x5c, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}, @local, @rand_addr=0x64010101, @multicast2, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="7c050000", @ANYRES16=r3, @ANYBLOB="100029bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYRESDEC=r19, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c02028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040022000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001006c625f74785f686173685f746f7070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=r10, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003600000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000400fb06070000002d0b18048000000008000100", @ANYRES32=r11, @ANYBLOB="6001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e08000600000000f6ffffffffffffff", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ab08000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000d0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB], 0x57c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 54.057401213s ago: executing program 7 (id=2765): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x7c46, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) write$vga_arbiter(r4, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) 53.968414288s ago: executing program 7 (id=2768): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 39.570663979s ago: executing program 36 (id=2768): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 14.815738885s ago: executing program 6 (id=3299): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek(r1, 0x3, 0x7) setresuid(0x0, 0x0, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x11, r3, 0x1, 0xf, 0x6, @broadcast}, 0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000}, 0x44840) socket$can_j1939(0x1d, 0x2, 0x7) kexec_load(0x100000000, 0x0, 0x0, 0x320000) 14.639394215s ago: executing program 6 (id=3302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xf0bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffe0, 0xffff}, {0x0, 0x1b}}, [@TCA_RATE={0x5, 0x5, {0x8, 0x58}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20040800) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@delchain={0xd4, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r11}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x1000}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x1}}, @TCA_U32_POLICE={0x34, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff0000}]}]}}, @TCA_RATE={0x6, 0x5, {0x1a, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x2c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0xbb81, 0xc, 0x7, 0x4}, {0x9, 0xfb, 0x9, 0x6}, {0x5, 0x5, 0x15, 0xfffffffa}]}}, @TCA_BPF_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0xd4}}, 0x0) 14.56269717s ago: executing program 6 (id=3307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x106bde2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./control\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x343, &(0x7f0000000bc0)="$eJzs3cGLG1UcB/BfY+22tdvsQQQF8aEXvYTd9R8wSAvigrJ2pXoQpu6shkyTJRMqKWJ7E2/+HcWjN0EEz3vx7s3bXjz2UIwk2d1u4u7BQna25POB5L3My5d5k/DC7zJ5+7d/vNveKRs7WT9q76W4EhG1xxErUYtDFw7a2rh/KY57GO/Ub//5+iefff5hc2PjxmZKN5u33l1PKV1/49dvvv3pzd/6L3368/VflmJv5Yv9v9f/2ntl79X9f2593SpTq0ydbj9l6U6328/uFHnabpXtRkofF3lW5qnVKfPe1PhO0d3dHaSss718dbeXl2XKOoPUzgep30393iBlX2WtTmo0Gmn5aiyWZ7nerUebm1lzDpPhDP0we+DK9Mter5mN1vDSf5Jbj+Y6MQDgXJqt/2txeXy8ovr/sET5//X/hUWv/5+F+n8RjOr/Swfrd5r6HwAAAAAAAAAAAAAAngePh8P6cDisH7azj6rnx3z5/hfbsRv3LkcU39/burc1aSfjzZ1oRRF5rEY9nkQMj8T4TsGbH2zcWE1jK7F898EkP2pfmM6vRT1WpvOj51F+LaU0fJDSdP7F8T9aHOXXox4vn5xfn5x/Jn8p3n7rWL4R9fjjy+hGEdsxyj7Nf7eW0vsfbczkl8bvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAxNNKRE/fvbzROG5/kj/bXX416PDl5f/7VE/fnvxivXaz22gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUDm4386KIu+dfedhnDI0PFDVxM6+EzG3U/x+LU77nHXOV+fawZo8H/Op+IcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKvB00++qZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECVysH9dlYUeW+OnaqvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HnybwAAAP//V3Yinw==") mkdir(&(0x7f0000000000)='./control\x00', 0x81) rmdir(&(0x7f0000000040)='./control\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 14.404546079s ago: executing program 6 (id=3309): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c3786f900000040ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0xa00, 0x0, 0x10}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030700"/20, @ANYRES32=0x0, @ANYBLOB="1501000000000000240012800b0001006272696467650000140002800800010007000000080002000302"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c3786f900000040ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0xa00, 0x0, 0x10}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030700"/20, @ANYRES32=0x0, @ANYBLOB="1501000000000000240012800b0001006272696467650000140002800800010007000000080002000302"], 0x4c}}, 0x0) (async) 14.343184732s ago: executing program 6 (id=3311): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xc81, 0x400, 0x43a1bd77, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3a) memfd_create(&(0x7f00000004c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07\x8ex\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x1) r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) preadv(r0, 0x0, 0x0, 0xa3, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket(0x2a, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) fsopen(0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f2435f01000884b647b8cd850800f40b19da105808c36ec22f7634ece3e6bdc2495e55d04863169b33302dad6e43f3ffa6def2be8b0868357d64b581eff81aac2e77129437cc2ca7dfb5b8c5ea24590c6548a4bf6aa7", 0x56, 0x24048040, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 14.205346431s ago: executing program 6 (id=3316): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x1, 0x2b8, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socket$nl_audit(0x10, 0x3, 0x9) getdents(r0, &(0x7f0000001680)=""/4121, 0x1019) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x62) read(r1, &(0x7f0000001400)=""/4096, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000180)={{0x0, 0x1, 0x6, 0xfffffffffffffffd, 0x1, 0x0, 0xfffffffffffffa96, 0x2, 0x8, 0x8, 0x9794, 0xffffffffffffff7f, 0xe, 0x5, 0x1}, 0x10, [0x0, 0x0]}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@mpls_getnetconf={0x2c, 0x52, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x1, 0x2b8, &(0x7f0000000800)="$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") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') (async) socket$nl_audit(0x10, 0x3, 0x9) (async) getdents(r0, &(0x7f0000001680)=""/4121, 0x1019) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x62) (async) read(r1, &(0x7f0000001400)=""/4096, 0x1000) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000180)={{0x0, 0x1, 0x6, 0xfffffffffffffffd, 0x1, 0x0, 0xfffffffffffffa96, 0x2, 0x8, 0x8, 0x9794, 0xffffffffffffff7f, 0xe, 0x5, 0x1}, 0x10, [0x0, 0x0]}) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@mpls_getnetconf={0x2c, 0x52, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) 1.644821635s ago: executing program 3 (id=3489): write(0xffffffffffffffff, &(0x7f0000000100)="f0d319933f17f819727b", 0xa) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1.644184834s ago: executing program 3 (id=3490): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlWgrWpStYO2koW2EEJQLnCoBy30JiRNFseModsomqiAV/wFCAokTJy5I/AFIVQ+IM6pUCS6IAwIEQrAtB6RCB3k8brOOnQSaxNn17ye99Xsz4/m+N5GfZ8azMwFMrCcj4sWImIqIZyKiXExPixIHvdJd7q27r6x0SxJZduvvSSTFtP66uu3piLhevG0mIr7+lYhvJUfjtvf2N5cbjfpO0a51mtu19t7+zY3m8np9vb61uLjw/NILS88tzWeFD9TPSr/y0y9/4bXPfPsPt/964zvdtD7/sSjFQD/OUq/rpXxb9HW30c55BBuDqaI/pXEnAgDAqXT38T8cEZ/M9//LMZXvzQ2YGkdmAAAAwFnJvjgb/04iMgAAAOCBlUbEbCRptbgWYDbS9EpxbuCjcS1ttNqdT6+1drdWu/MiKlFK1zYa9fniWuFKlJJue6G4xrbffnagvRgRj0TED8pX83Z1pdVYHfO5DwAAAJgU1weO//9ZTvP6yYb8PwEAAADg0noie+ft91uVcaYCAAAAnBeH/AAAAPDgGzz+f21MeQAAAADn4qsvvdQtWf/516sv7+1utl6+uVpvb1abuyvVldbOdnW91VrP79nXPGl9jVZr+7OxtXun1qm3O7X23v7tZmt3q3N7455HYAMAAAAX6JEnXv9tEhEHn7ualyjuAwhwjz+NOwHgLE2NOwFgbNzFGyZXqV+5Mt48gPFJTpjv4h0AALj/zX386O///VMBpbFmBpw31/oAwOTx+z9MrpIrAGGipRHxoV71oVHLjPz9/9enjZJlEW+UD09xfhEAAC7WbF6StFocB8xGmlarEQ9HpJUoJWsbjfp8cXzwm3LpoW57IX9ncuI1wwAAAAAAAAAAAAAAAAAAAAAAAABAT5YlkQEAAAAPtIj0L0l+N/+IufLTs4PnB64k/yrHn4vGj2/98M5yp7Oz0J3+j/xZXlciovOjW6V8+rMjHx8GAAAAnLXkYOSs3nF68bpwoVkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAHeuvvKSr9cZNy/fSkiKsPiT8dM/joTpYi49nYS04fel0TE1BnEP3g1Ih4dFj+Jd7MsqxRZDIt/9ZzjV/JNMzx+GhHXzyA+TLLXu+PPi8M+f2k8mb8O//xNF+WDGj3+pUXkR/Nxbtj48/CRtTWHxnjszZ/XRsZ/NeKx6eHjT3/8TUbEf+rI2t7JsuxojG9+Y39/VPzsJxFzQ79/knti1TrN7Vp7b//mRnN5vb5e31pcXHh+6YWl55bma2sbjXrx79AY3//EL949rv/XhsT//e964+9x/X961EoH/OfNO3c/0quWhsW/8dTQ79+ZGBE/Lb77PlXUu/Pn+vWDXv2wx3/2xuPH9X91xPY/6e9/45T9f+Zr3/vjKRcFAC5Ae29/c7nRqO8cU5k5xTL3Y+WXM5cijf+xkn2395e7LPn8v5Xu3ur7U/q9ugSJHapkFxZrKi5Jl9+rjHVYAgAAzsGv3tvpH3cmAAAAAAAAAAAAAAAAAAAAMLku4nZigzEPxtNVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBj/TcAAP//GXfizw==") set_mempolicy(0x2, &(0x7f0000000040)=0x4, 0x1) r0 = socket(0x1d, 0x2, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) 1.584729958s ago: executing program 3 (id=3491): socketpair(0x603254b217faaea4, 0x80806, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8932, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe86\xf7}\b\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZy\xc9\xda\x1b\x95\xd9\xe0\xb1G}G\xba\xc6k\xd3H\x81\xddcd\xc5\x16\xd8\xb6K\xad\x12\xcc\xc8D\xee-\xfcy?\x9d\xe8\xea\xf07\xf8k\xc3JeO\x82c\xf3s{-E\x8e>\xdd\x03++\x01s\x00\xf4\x9cMKpp\xf5\xc50\x1d\x98\xaf\x04^L\xf5\x89\xda\xf3,\xf6\xddo\xc9i\xda3\x00\xbc\xc90\xd4\xb7\x1e(\x17\xb6a\xc7_,\xc0\xfc\xa7\xe0u\xe1\x80\xb0\xb9\x94$v2\x17\xa0\x98\n\xabVQb\x1eyV\xba\x16{>\xea\xa4\xf0\xde\xe3~\x19\xb6#\xb22\x029\x1fr\x19\\\xff\xdf\xa3k\xf5U\xd8\xd9\xe4\xeb\xeb\xab1\xd9\x1f^\n\x10\xc9\xad\xacS9\xe7', 0x4) (async) r1 = syz_open_dev$loop(&(0x7f0000000640), 0x9, 0xc4c0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 987.773113ms ago: executing program 8 (id=3506): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000030400088058010c8054000b80080009"], 0x184}}, 0x14) 981.528043ms ago: executing program 8 (id=3507): write(0xffffffffffffffff, &(0x7f0000000100)="f0d319933f17f819727b", 0xa) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 863.30048ms ago: executing program 8 (id=3509): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat2(r3, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x104}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) inotify_init1(0x80000) ioctl$USBDEVFS_CONNECTINFO(r4, 0x80045503, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) msync(&(0x7f0000004000/0x1000)=nil, 0x1000, 0xf) 804.586303ms ago: executing program 9 (id=3510): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0xa0}}, './file0\x00'}) write$P9_RGETATTR(r6, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x400, {0x8, 0x3, 0x3}, 0x11, r2, r3, 0x8, 0x0, 0x7, 0x3ff, 0x100000001, 0x10000, 0xd5ad, 0x8b5a, 0x8, 0x5, 0x81, 0x9, 0x400, 0x8, 0x773}}, 0xa0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) setreuid(0xee01, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setresgid(r3, r3, 0x0) sendmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)="9a", 0x1}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c}}], 0x20, 0x4005}}], 0x1, 0x4000050) 776.684095ms ago: executing program 4 (id=3511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc0100001900010025bd700001000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000003c000000000000000080000000000000000000020000000000000000010300000000440105007f000001000000000000000000000000000000006c00000000000000640100ff0000000000000000000000000000000000000000000000000000000040000000ac1e0001000000000000000000000000000020003c"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 750.131977ms ago: executing program 4 (id=3512): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) fcntl$setpipe(r0, 0x407, 0x7000000) 690.62077ms ago: executing program 3 (id=3513): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x5, 0x2, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@grpquota}, {@nolazytime}, {@resgid}, {@bh}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 690.11606ms ago: executing program 8 (id=3514): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x5, 0x2, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@grpquota}, {@nolazytime}, {@resgid}, {@bh}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 655.172512ms ago: executing program 9 (id=3515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000680)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x7, 0x0, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth1_to_bridge\x00', 0x3}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x214400, 0x0) 560.097418ms ago: executing program 4 (id=3516): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000400)) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f0003002e2e2564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="7415e741f17aa15e5395cb53e4417a3cf92865983e56c74eacf9eae07d2490beec5d001f203ee18ecd20592ef1ffc9f19a0965ec105e175239120c4360d7ded2bdf5fec6aad9d4d133cf3c47aa7594dc27c982dde438", @ANYRESDEC=r0, @ANYRES64=r2, @ANYRES32=r5, @ANYRES8=r0, @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x1e, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000008740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/23, 0x17}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10022, 0x0) getcwd(&(0x7f0000000440)=""/248, 0xf8) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 528.91887ms ago: executing program 9 (id=3517): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000040400088058010c8054000b80080009"], 0x184}}, 0x14) 527.97899ms ago: executing program 3 (id=3518): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x12}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="796100000000fedbdf257e000000050099bd47530c340f6700000000000000000000000000007dd68a3fa21436d1898f61cf36ccc2da95e4b8ae84a354a83828a660b485826e1098006af5d6169c03fb3aa334a4ec0b420e7a758434904aabd555d775b690fe140d02c82511b79f31eba3b853d84460c62b1a66869429a1b0929ed4622eeff503b0e74d15faeb35cde2bd26b5ed9f9771"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x80c) 477.259582ms ago: executing program 9 (id=3519): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x80, 0xf, 0x329, 0x51, @loopback, @private1, 0x40, 0x7, 0xe, 0x1}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0xec, r2, 0xe701ac47a3d23ecd, 0x30bd28, 0x200000, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xec}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x4200004b) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="080000001f0137f7", 0x8}, {&(0x7f0000001480)}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x20}, {0x2d}, {0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x80, 0xf, 0x329, 0x51, @loopback, @private1, 0x40, 0x7, 0xe, 0x1}}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0xec, r2, 0xe701ac47a3d23ecd, 0x30bd28, 0x200000, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xec}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) write$binfmt_elf32(r4, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) (async) inotify_init() (async) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x4200004b) (async) close(r4) (async) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) (async) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="080000001f0137f7", 0x8}, {&(0x7f0000001480)}], 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x20}, {0x2d}, {0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) 388.596768ms ago: executing program 9 (id=3520): set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x75) (async) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) (async, rerun: 32) r0 = open(&(0x7f0000000040)='./bus\x00', 0x189440, 0xfc) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x7fff, 0x9, 0x1b) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x84) (rerun: 64) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400c801) (async) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8001) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000100)) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x40014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x4010) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x6) (rerun: 64) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 361.710239ms ago: executing program 4 (id=3521): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xaa) pipe2$9p(&(0x7f00000001c0), 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc28a, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xfcffffff}) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r3, &(0x7f0000000540), 0xc) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 359.377789ms ago: executing program 4 (id=3522): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc0100001900010025bd700001000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000006c000000000000000080000000000000000000020000000000000000010300000000440105007f000001000000000000000000000000000000006c00000000000000640100ff0000000000000000000000000000000000000000000000000000000040000000ac1e0001000000000000000000000000000020003c"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 356.00141ms ago: executing program 8 (id=3532): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0xc00000, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000008105000000000000850000000300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000001e40)=""/4101, 0x0, 0xc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r6 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000040)="8582", 0x2}], 0x1, 0x1400, 0x0, 0x1) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x5}}, ["", ""]}, 0x24}}, 0x20008000) socket(0x3, 0x4, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 316.841062ms ago: executing program 4 (id=3523): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={0x0, 0x80}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000002f80)=""/61) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x854) write$nci(r0, 0x0, 0xb) close(r0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x840000000002, 0x3, 0xff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 9 (id=3524): syz_clone3(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000f010000bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): m netdevsim4 netdevsim1: renamed from eth1 [ 304.957230][T13629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.977191][T13629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.984679][T13703] loop6: detected capacity change from 0 to 512 [ 305.098212][T13629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.119173][ T8034] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 305.151356][T13629] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.163970][ T8034] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 305.189786][ T1691] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.196957][ T1691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.228662][ T1691] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.235826][ T1691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.285031][T13629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.295695][T13629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.493481][T13629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.532728][T13739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=13739 comm=syz.8.2911 [ 305.775667][T13717] netlink: 'syz.6.2907': attribute type 1 has an invalid length. [ 305.783887][T13717] netlink: 'syz.6.2907': attribute type 2 has an invalid length. [ 305.802609][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2907'. [ 305.910703][ T1916] bond0 (unregistering): Released all slaves [ 306.020386][ T1916] hsr_slave_0: left promiscuous mode [ 306.026629][ T1916] hsr_slave_1: left promiscuous mode [ 306.074610][T13787] loop6: detected capacity change from 0 to 764 [ 306.118853][T13787] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 306.146775][T13787] Symlink component flag not implemented [ 306.165576][T13787] Symlink component flag not implemented (7) [ 306.256782][ T29] kauditd_printk_skb: 631 callbacks suppressed [ 306.256800][ T29] audit: type=1326 audit(5310125928.208:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dfcdaeb9 code=0x7ffc0000 [ 306.321669][ T29] audit: type=1326 audit(5310125928.208:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dfcdaeb9 code=0x7ffc0000 [ 306.346532][ T29] audit: type=1326 audit(5310125928.261:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f51dfcdaeb9 code=0x7ffc0000 [ 306.370851][ T29] audit: type=1326 audit(5310125928.261:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dfcdaeb9 code=0x7ffc0000 [ 306.395484][ T29] audit: type=1326 audit(5310125928.261:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dfcdaeb9 code=0x7ffc0000 [ 306.419787][ T29] audit: type=1326 audit(5310125928.261:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f51dfcdaeb9 code=0x7ffc0000 [ 306.456899][T13732] chnl_net:caif_netlink_parms(): no params data found [ 306.507830][T13815] loop8: detected capacity change from 0 to 512 [ 306.514896][T13815] EXT4-fs: Ignoring removed i_version option [ 306.529196][T13815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.545512][T13815] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 306.573706][T13815] EXT4-fs (loop8): mount failed [ 306.602096][T13732] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.610212][T13732] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.618041][T13732] bridge_slave_0: entered allmulticast mode [ 306.641896][T13732] bridge_slave_0: entered promiscuous mode [ 306.669535][T13629] veth0_vlan: entered promiscuous mode [ 306.689517][T13732] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.696750][T13732] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.704203][ T29] audit: type=1400 audit(5310125928.670:5509): avc: denied { bind } for pid=13814 comm="syz.8.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 306.724897][T13732] bridge_slave_1: entered allmulticast mode [ 306.733254][T13732] bridge_slave_1: entered promiscuous mode [ 306.743649][ T29] audit: type=1400 audit(5310125928.723:5510): avc: denied { bind } for pid=13827 comm="syz.6.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.773348][T13825] loop8: detected capacity change from 0 to 2048 [ 306.783508][ T29] audit: type=1400 audit(5310125928.744:5511): avc: denied { read } for pid=13827 comm="syz.6.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 306.814694][T13629] veth1_vlan: entered promiscuous mode [ 306.828255][T13732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.831657][T13825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.866559][T13732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.890155][T13629] veth0_macvtap: entered promiscuous mode [ 306.918012][T13629] veth1_macvtap: entered promiscuous mode [ 306.933657][T13732] team0: Port device team_slave_0 added [ 306.945636][T13629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.958833][T13732] team0: Port device team_slave_1 added [ 306.972528][T13629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.004519][T13732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.011739][T13732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.038982][T13732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.051390][T13732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.058854][T13732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.086191][T13732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.107191][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.142669][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.179727][T13732] hsr_slave_0: entered promiscuous mode [ 307.186427][T13732] hsr_slave_1: entered promiscuous mode [ 307.192512][T13732] debugfs: 'hsr0' already exists in 'hsr' [ 307.198401][T13732] Cannot create hsr debugfs directory [ 307.208296][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.391963][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.412052][T13858] bridge0: entered promiscuous mode [ 307.420655][T13858] bridge0: port 3(macsec1) entered blocking state [ 307.427406][T13858] bridge0: port 3(macsec1) entered disabled state [ 307.434405][T13858] macsec1: entered allmulticast mode [ 307.439772][T13858] bridge0: entered allmulticast mode [ 307.446157][T13858] macsec1: left allmulticast mode [ 307.451407][T13858] bridge0: left allmulticast mode [ 307.459003][T13858] bridge0: left promiscuous mode [ 307.475992][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.682559][T13880] loop8: detected capacity change from 0 to 512 [ 307.692253][ T29] audit: type=1326 audit(5310125929.720:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.6.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dfcdaeb9 code=0x7ffc0000 [ 307.722035][T13732] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 307.756726][T13880] msdos filesystem being mounted at /91/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 307.772602][T13732] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 307.785107][T13732] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 307.798429][T13732] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 307.865723][T13732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.901313][T13732] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.929787][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.937190][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.960658][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.967960][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.089032][T13897] loop8: detected capacity change from 0 to 8192 [ 308.118359][T13913] loop4: detected capacity change from 0 to 512 [ 308.126110][T13897] vfat filesystem being mounted at /92/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 308.138496][T13913] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.172018][T13732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.195100][T13913] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 308.215398][T13913] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.2938: inode #15: comm syz.4.2938: iget: illegal inode # [ 308.249658][T13913] EXT4-fs (loop4): Remounting filesystem read-only [ 308.281574][T13913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.347575][T13629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.501474][T13944] loop4: detected capacity change from 0 to 512 [ 308.506634][T13732] veth0_vlan: entered promiscuous mode [ 308.524346][T13732] veth1_vlan: entered promiscuous mode [ 308.532292][T13944] msdos filesystem being mounted at /3/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 308.562185][T13732] veth0_macvtap: entered promiscuous mode [ 308.577261][T13732] veth1_macvtap: entered promiscuous mode [ 308.602821][T13732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.655714][T13732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.672518][T13950] loop6: detected capacity change from 0 to 512 [ 308.691614][ T1691] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.719672][T13950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.746307][ T1691] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.757723][T13950] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.786654][ T1691] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.821718][ T1691] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.834271][T13967] loop4: detected capacity change from 0 to 512 [ 308.885660][T13965] loop8: detected capacity change from 0 to 2048 [ 308.901670][T13967] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 308.948897][T13965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.961817][T13978] loop9: detected capacity change from 0 to 1024 [ 308.979172][T13978] EXT4-fs: inline encryption not supported [ 308.985830][T13978] EXT4-fs: Ignoring removed i_version option [ 309.017171][T13978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.070364][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.081054][T13978] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 309.105917][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.191454][T13732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.265665][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2959'. [ 309.276702][T13993] loop8: detected capacity change from 0 to 1024 [ 309.295431][T13993] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 309.313396][T13996] loop9: detected capacity change from 0 to 1024 [ 309.324577][T13996] EXT4-fs: Ignoring removed orlov option [ 309.331861][T13993] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.2960: lblock 2 mapped to illegal pblock 2 (length 1) [ 309.346793][T13993] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.2960: lblock 0 mapped to illegal pblock 48 (length 1) [ 309.364397][T13998] veth2: entered promiscuous mode [ 309.369896][T13998] veth2: entered allmulticast mode [ 309.384089][T13993] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.2960: Failed to acquire dquot type 0 [ 309.414737][T13993] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 309.433515][T13996] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.446171][T13993] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.2960: mark_inode_dirty error [ 309.507899][T13993] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 309.519853][T13732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.524889][T13993] EXT4-fs (loop8): 1 orphan inode deleted [ 309.536781][ T847] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.569372][ T847] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 309.593468][T14016] SELinux: failed to load policy [ 309.594134][T13993] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.624407][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2967'. [ 309.669568][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.680775][ T52] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.708573][ T52] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 309.725768][T12256] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 309.739477][T12256] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 309.770132][T12256] EXT4-fs error (device loop8): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 310.040180][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2975'. [ 310.166066][T14050] EXT4-fs: Ignoring removed orlov option [ 310.190181][T14050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.252262][T14048] loop9: p1 p3 p4 [ 310.256151][T14048] loop9: p1 size 477167616 extends beyond EOD, truncated [ 310.275289][T14048] loop9: p3 start 4294901760 is beyond EOD, truncated [ 310.282183][T14048] loop9: p4 size 32768 extends beyond EOD, truncated [ 310.294525][T14059] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 310.349457][T14059] vfat filesystem being mounted at /102/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 310.360580][T13629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.437841][ T1691] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 310.562243][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2983'. [ 310.573736][T14067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.617844][T13629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.762536][T14093] EXT4-fs: Ignoring removed nobh option [ 310.773915][T14094] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 310.782366][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2991'. [ 310.830674][T14093] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2990: iget: bad i_size value: 38620345925642 [ 310.858044][T14093] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2990: couldn't read orphan inode 15 (err -117) [ 310.888591][T14093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.951785][T14101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.978482][T14101] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.994980][T14093] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2990: bg 0: block 5: invalid block bitmap [ 311.008698][T14093] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 16 with error 28 [ 311.021213][T14093] EXT4-fs (loop6): This should not happen!! Data will be lost [ 311.021213][T14093] [ 311.031095][T14093] EXT4-fs (loop6): Total free blocks count 0 [ 311.037805][T14093] EXT4-fs (loop6): Free/Dirty block details [ 311.043820][T14093] EXT4-fs (loop6): free_blocks=0 [ 311.048793][T14093] EXT4-fs (loop6): dirty_blocks=956 [ 311.054061][T14093] EXT4-fs (loop6): Block reservation details [ 311.060088][T14093] EXT4-fs (loop6): i_reserved_data_blocks=956 [ 311.078861][T14110] netlink: 348 bytes leftover after parsing attributes in process `syz.8.2993'. [ 311.121900][ T847] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 12 with error 28 [ 311.124469][T14101] xt_l2tp: missing protocol rule (udp|l2tpip) [ 311.169032][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 311.169051][ T29] audit: type=1400 audit(5310125933.353:5634): avc: denied { getopt } for pid=14112 comm="syz.9.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 311.221028][ T29] audit: type=1400 audit(5310125933.416:5635): avc: denied { setopt } for pid=14114 comm="syz.9.2996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 311.312540][T14120] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2998'. [ 311.333123][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.380119][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2999'. [ 311.423026][T14129] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.452119][T14129] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 311.505647][T13732] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.556914][T14140] FAT-fs (loop8): Directory bread(block 1285) failed [ 311.563696][T14140] FAT-fs (loop8): Directory bread(block 1286) failed [ 311.593321][T14140] FAT-fs (loop8): Directory bread(block 1287) failed [ 311.606346][T14140] FAT-fs (loop8): Directory bread(block 1288) failed [ 311.627615][T14140] vfat filesystem being mounted at /108/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 311.673222][T14136] FAT-fs (loop8): Directory bread(block 1285) failed [ 311.686039][T14136] FAT-fs (loop8): Directory bread(block 1286) failed [ 311.693329][T14136] FAT-fs (loop8): Directory bread(block 1287) failed [ 311.700187][T14136] FAT-fs (loop8): Directory bread(block 1288) failed [ 311.707201][T14136] FAT-fs (loop8): Directory bread(block 1285) failed [ 311.714355][ T4997] loop6: p2 p3 p4 < > [ 311.718779][ T4997] loop6: p2 size 590592 extends beyond EOD, truncated [ 311.725737][T14136] FAT-fs (loop8): Directory bread(block 1286) failed [ 311.772785][T14149] netlink: 'syz.3.3008': attribute type 10 has an invalid length. [ 311.776206][ T4997] loop6: p3 start 589824 is beyond EOD, truncated [ 311.794647][T14149] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.801924][T14149] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.810584][T14139] loop6: p2 p3 p4 < > [ 311.817029][T14149] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.824270][T14149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.831631][T14149] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.838756][T14149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.846525][T14139] loop6: p2 size 590592 extends beyond EOD, truncated [ 311.865150][T14139] loop6: p3 start 589824 is beyond EOD, truncated [ 311.869396][T14149] team0: Port device bridge0 added [ 311.928333][ T29] audit: type=1400 audit(5310125934.172:5636): avc: denied { shutdown } for pid=14158 comm="syz.3.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 311.969658][ T29] audit: type=1400 audit(5310125934.193:5637): avc: denied { read } for pid=14158 comm="syz.3.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.242091][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3015'. [ 312.246626][ T29] audit: type=1400 audit(5310125934.497:5638): avc: denied { nlmsg_read } for pid=14177 comm="syz.9.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 312.366454][T14183] netlink: 131724 bytes leftover after parsing attributes in process `syz.4.3014'. [ 312.385719][T14190] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.429478][T14172] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 312.469717][T14190] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.503068][T14196] set_capacity_and_notify: 11 callbacks suppressed [ 312.503091][T14196] loop8: detected capacity change from 0 to 164 [ 312.531015][T14196] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 312.566051][T14190] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.654533][T14190] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.812707][ T1691] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.825233][ T1691] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.834981][ T1691] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.872304][ T1691] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.943647][T14213] loop8: detected capacity change from 0 to 512 [ 312.961023][T14213] msdos filesystem being mounted at /116/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 313.018558][T14218] program syz.9.3030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.101976][T14223] 9p: Could not find request transport: fd¸rfdno=ä×Þdøpê52t[%F‰©OG'‚ [ 313.109207][T14218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.118114][T14218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.128585][T14209] loop4: detected capacity change from 0 to 512 [ 313.139437][T14218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.147017][T14218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.204563][T14230] loop6: detected capacity change from 0 to 128 [ 313.230276][ T29] audit: type=1326 audit(5310125935.526:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.3.3034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d982eaeb9 code=0x0 [ 313.253631][T14230] vfat filesystem being mounted at /360/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 313.293627][T14235] hsr_slave_0: left promiscuous mode [ 313.299582][T14235] hsr_slave_1: left promiscuous mode [ 313.382360][T14251] loop6: detected capacity change from 0 to 512 [ 313.412251][T14251] EXT4-fs (loop6): 1 orphan inode deleted [ 313.418741][T14251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.433719][ T12] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 313.443643][ T12] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 313.456598][T14251] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.621379][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.669752][T14264] loop6: detected capacity change from 0 to 1024 [ 313.672178][ T29] audit: type=1400 audit(5310125935.999:5640): avc: denied { listen } for pid=14263 comm="syz.6.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.696604][ T29] audit: type=1400 audit(5310125935.999:5641): avc: denied { getopt } for pid=14263 comm="syz.6.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.737222][T14264] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 313.755672][T14264] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 313.764069][T14264] EXT4-fs (loop6): orphan cleanup on readonly fs [ 313.770941][T14264] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 313.780637][T14264] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 313.795192][T14264] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 313.802856][T14264] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3043: iget: bad extra_isize 32769 (inode size 256) [ 313.817463][T14264] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3043: couldn't read orphan inode 15 (err -117) [ 313.830300][T14264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 313.860138][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.970938][T14279] loop6: detected capacity change from 0 to 128 [ 314.008696][T14279] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 314.062637][T14279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=14279 comm=syz.6.3047 [ 314.096029][T14284] syzkaller0: entered promiscuous mode [ 314.101676][T14284] syzkaller0: entered allmulticast mode [ 314.112253][ T7615] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.136820][T14290] __nla_validate_parse: 4 callbacks suppressed [ 314.136839][T14290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3051'. [ 314.172594][T14290] tmpfs: Bad value for 'mpol' [ 314.286852][T14305] loop8: detected capacity change from 0 to 128 [ 314.292818][T14308] loop4: detected capacity change from 0 to 512 [ 314.305606][T14305] FAT-fs (loop8): bogus number of reserved sectors [ 314.312293][T14305] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 314.322351][T14305] FAT-fs (loop8): Can't find a valid FAT filesystem [ 314.323730][T14308] msdos filesystem being mounted at /30/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 314.399229][T14305] loop8: detected capacity change from 0 to 128 [ 314.526098][T14320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3062'. [ 314.638965][T14337] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3064'. [ 314.690752][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3067'. [ 314.807041][T14352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.832691][T14352] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.867444][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.945875][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3074'. [ 314.980968][T14373] vfat filesystem being mounted at /370/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 314.998953][T14377] xt_bpf: check failed: parse error [ 315.073138][T14377] syzkaller0: entered promiscuous mode [ 315.078747][T14377] syzkaller0: entered allmulticast mode [ 315.148324][ T1691] bio_check_eod: 23 callbacks suppressed [ 315.148339][ T1691] kworker/u8:5: attempt to access beyond end of device [ 315.148339][ T1691] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 315.197689][ T1691] kworker/u8:5: attempt to access beyond end of device [ 315.197689][ T1691] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 315.212700][ T1691] kworker/u8:5: attempt to access beyond end of device [ 315.212700][ T1691] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 315.228403][ T1691] kworker/u8:5: attempt to access beyond end of device [ 315.228403][ T1691] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 315.242379][ T1691] kworker/u8:5: attempt to access beyond end of device [ 315.242379][ T1691] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 315.265130][T14381] syzkaller1: entered promiscuous mode [ 315.270799][T14381] syzkaller1: entered allmulticast mode [ 315.277896][ T1691] kworker/u8:5: attempt to access beyond end of device [ 315.277896][ T1691] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 315.301264][ T1691] kworker/u8:5: attempt to access beyond end of device [ 315.301264][ T1691] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 315.315172][ T1691] kworker/u8:5: attempt to access beyond end of device [ 315.315172][ T1691] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 315.353152][ T1691] kworker/u8:5: attempt to access beyond end of device [ 315.353152][ T1691] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 315.369620][ T1691] kworker/u8:5: attempt to access beyond end of device [ 315.369620][ T1691] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 315.383393][T14383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3078'. [ 315.423556][T14385] tipc: Started in network mode [ 315.428519][T14385] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 315.437656][T14385] tipc: Enabling of bearer rejected, failed to enable media [ 315.575468][T14398] netlink: 'syz.3.3081': attribute type 4 has an invalid length. [ 315.846157][ T1853] Bluetooth: hci0: Frame reassembly failed (-84) [ 315.903617][T14417] vhci_hcd vhci_hcd.2: invalid port number 98 [ 315.909977][T14417] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffc i0062 l0 [ 316.054954][T14429] iso9660: Unknown parameter '@' [ 316.167656][T14437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.181454][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 316.181475][ T29] audit: type=1400 audit(5310125938.634:5681): avc: denied { map } for pid=14436 comm="syz.4.3092" path="/41/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 316.211547][ T29] audit: type=1400 audit(5310125938.634:5682): avc: denied { execute } for pid=14436 comm="syz.4.3092" path="/41/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 316.423930][T13629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.463612][T14443] tipc: Failed to remove unknown binding: 66,0,0/0:479117238/479117239 [ 316.498711][T14448] tmpfs: Bad value for 'nr_blocks' [ 316.869930][T14460] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3099: invalid indirect mapped block 256 (level 2) [ 316.892712][T14460] EXT4-fs (loop8): 2 truncates cleaned up [ 316.899423][T14460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.937845][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.963230][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 316.998705][T14466] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.3101: corrupted inode contents [ 317.011413][T14466] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #3: comm syz.8.3101: mark_inode_dirty error [ 317.026270][T14466] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.3101: corrupted inode contents [ 317.043899][T14466] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3101: mark_inode_dirty error [ 317.056682][T14466] Quota error (device loop8): write_blk: dquota write failed [ 317.064528][T14466] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 317.075038][T14466] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3101: Failed to acquire dquot type 0 [ 317.078034][T14469] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 317.089889][T14466] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3101: corrupted inode contents [ 317.115462][T14466] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #16: comm syz.8.3101: mark_inode_dirty error [ 317.127142][T14466] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3101: corrupted inode contents [ 317.140165][T14466] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3101: mark_inode_dirty error [ 317.151662][T14466] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3101: corrupted inode contents [ 317.164013][T14466] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 317.179580][T14466] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3101: corrupted inode contents [ 317.195503][T14466] EXT4-fs error (device loop8): ext4_truncate:4635: inode #16: comm syz.8.3101: mark_inode_dirty error [ 317.207966][T14466] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 317.220081][T14466] EXT4-fs (loop8): 1 truncate cleaned up [ 317.226522][T14466] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.239615][T14466] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.279138][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.320797][T14488] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3103'. [ 317.366235][T14491] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3104'. [ 317.678756][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3107'. [ 317.775005][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 317.781575][T14464] Bluetooth: hci0: command 0x1003 tx timeout [ 317.806760][T14507] set_capacity_and_notify: 8 callbacks suppressed [ 317.806781][T14507] loop8: detected capacity change from 0 to 164 [ 317.828033][T14507] Unable to read rock-ridge attributes [ 317.833780][T14507] isofs_fill_super: root inode is not a directory. Corrupted media? [ 317.919954][T14517] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3113'. [ 317.960069][T14517] gtp1: entered promiscuous mode [ 317.965167][T14517] gtp1: entered allmulticast mode [ 317.989884][T14521] loop6: detected capacity change from 0 to 512 [ 318.024954][T14521] msdos filesystem being mounted at /380/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 318.292522][T14541] loop9: detected capacity change from 0 to 512 [ 318.341799][T14541] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.364720][T14535] tipc: Started in network mode [ 318.370377][T14535] tipc: Node identity 8a30b0527cb9, cluster identity 4711 [ 318.377897][T14535] tipc: Enabled bearer , priority 0 [ 318.393734][T14541] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.411430][T14535] syzkaller0: entered promiscuous mode [ 318.417133][T14535] syzkaller0: entered allmulticast mode [ 318.429639][T14553] loop6: detected capacity change from 0 to 512 [ 318.478144][T14534] tipc: Resetting bearer [ 318.486642][T14534] tipc: Disabling bearer [ 318.495628][T14553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.514743][T14553] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.609905][T13732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.691352][ T29] audit: type=1326 audit(5310125941.270:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14561 comm="syz.9.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 318.715099][ T29] audit: type=1326 audit(5310125941.270:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14561 comm="syz.9.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 318.743692][ T29] audit: type=1326 audit(5310125941.270:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14561 comm="syz.9.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 318.767894][ T29] audit: type=1326 audit(5310125941.270:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14561 comm="syz.9.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 318.792044][ T29] audit: type=1326 audit(5310125941.270:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14561 comm="syz.9.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 318.813901][T14564] loop8: detected capacity change from 0 to 512 [ 318.816371][ T29] audit: type=1326 audit(5310125941.270:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14561 comm="syz.9.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 318.828126][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.900139][T14564] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.3120: corrupted inode contents [ 318.920629][ T3563] Bluetooth: hci1: command 0x1003 tx timeout [ 318.926875][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 318.933777][T14564] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #3: comm syz.8.3120: mark_inode_dirty error [ 318.995690][T14578] loop9: detected capacity change from 0 to 1024 [ 319.008374][T14582] SELinux: syz.4.3125 (14582) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 319.022568][T14564] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.3120: corrupted inode contents [ 319.035350][T14578] EXT4-fs: Ignoring removed orlov option [ 319.042146][T14578] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 319.058457][T14564] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3120: mark_inode_dirty error [ 319.136921][T14564] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3120: Failed to acquire dquot type 0 [ 319.165089][T14564] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3120: corrupted inode contents [ 319.237865][T14564] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #16: comm syz.8.3120: mark_inode_dirty error [ 319.253865][T14564] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3120: corrupted inode contents [ 319.275261][T14564] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3120: mark_inode_dirty error [ 319.291374][T14564] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3120: corrupted inode contents [ 319.353960][T14610] loop6: detected capacity change from 0 to 512 [ 319.362321][T14564] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 319.386304][T14564] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3120: corrupted inode contents [ 319.405838][T14564] EXT4-fs error (device loop8): ext4_truncate:4635: inode #16: comm syz.8.3120: mark_inode_dirty error [ 319.418254][T14564] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 319.430640][T14564] EXT4-fs (loop8): 1 truncate cleaned up [ 319.437018][T14564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.459353][T14564] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.493655][T14616] loop6: detected capacity change from 0 to 512 [ 319.517591][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.672414][T14622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=14622 comm=syz.9.3133 [ 319.907788][T14647] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 320.062080][T14657] tipc: Enabling of bearer rejected, failed to enable media [ 320.075129][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3140'. [ 320.133378][T14657] netlink: 'syz.8.3141': attribute type 13 has an invalid length. [ 320.435330][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3147'. [ 320.436643][T14664] loop9: detected capacity change from 0 to 512 [ 320.481054][T14664] EXT4-fs: Ignoring removed orlov option [ 320.487378][T14676] loop8: detected capacity change from 0 to 1024 [ 320.487747][T14664] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.555793][T14664] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 320.581472][T14676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.594896][T14664] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3142: attempt to clear invalid blocks 2 len 1 [ 320.611489][T14664] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 320.627320][T14664] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3142: invalid indirect mapped block 1819239214 (level 0) [ 320.645169][T14664] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3142: invalid indirect mapped block 1819239214 (level 1) [ 320.668411][T14664] EXT4-fs (loop9): 1 truncate cleaned up [ 320.684189][T14664] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.708872][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.734401][T14664] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.808189][T14687] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3150'. [ 320.882821][T14698] EXT4-fs: Ignoring removed bh option [ 320.886636][T14664] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.888375][T14698] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.959855][T14698] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 320.989490][T14698] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 321.005007][T14698] EXT4-fs (loop8): orphan cleanup on readonly fs [ 321.011963][T14698] __quota_error: 127 callbacks suppressed [ 321.012019][T14698] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 4 [ 321.027556][T14698] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 321.042016][T14698] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3150: Failed to acquire dquot type 1 [ 321.055961][T14698] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3150: Invalid block bitmap block 0 in block_group 0 [ 321.073188][T14698] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3150: Invalid block bitmap block 0 in block_group 0 [ 321.090185][T14698] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3150: Invalid block bitmap block 0 in block_group 0 [ 321.106096][T14698] Quota error (device loop8): write_blk: dquota write failed [ 321.113666][T14698] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 321.124285][T14698] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3150: Failed to acquire dquot type 1 [ 321.137623][T14664] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.146004][T14698] Quota error (device loop8): write_blk: dquota write failed [ 321.155004][T14698] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 321.164910][T14698] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3150: Failed to acquire dquot type 1 [ 321.187510][T14698] EXT4-fs (loop8): 1 orphan inode deleted [ 321.204554][T14698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.218353][T14664] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.277198][ T37] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.292137][ T37] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.304339][ T37] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.328596][ T37] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.347716][T13732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.368463][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.536065][T14721] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #3: comm syz.9.3158: corrupted inode contents [ 321.560096][T14721] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #3: comm syz.9.3158: mark_inode_dirty error [ 321.573890][T14721] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #3: comm syz.9.3158: corrupted inode contents [ 321.592901][T14728] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 321.640233][T14728] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.653988][T14721] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.3158: mark_inode_dirty error [ 321.666655][T14728] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.678104][T14721] Quota error (device loop9): write_blk: dquota write failed [ 321.686240][T14721] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 321.702027][T14721] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3158: Failed to acquire dquot type 0 [ 321.728541][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.740254][T14721] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3158: corrupted inode contents [ 321.752654][T14721] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.3158: mark_inode_dirty error [ 321.764446][T14721] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3158: corrupted inode contents [ 321.777782][T14721] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.3158: mark_inode_dirty error [ 321.801086][T14721] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3158: corrupted inode contents [ 321.824359][T14721] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 321.834099][T14721] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3158: corrupted inode contents [ 321.847414][T14721] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.3158: mark_inode_dirty error [ 321.863208][T14721] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 321.876539][T14721] EXT4-fs (loop9): 1 truncate cleaned up [ 321.884364][T14721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.897626][T14721] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.924862][T13732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.968192][T14735] msdos filesystem being mounted at /23/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 322.074534][T14745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.083736][T14745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.103832][T14747] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3170'. [ 322.126429][T14741] EXT4-fs: inline encryption not supported [ 322.140308][T14741] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.155139][T14741] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 322.166700][T14741] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.3168: lblock 2 mapped to illegal pblock 2 (length 1) [ 322.207393][T14741] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 322.245281][T14741] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.3168: lblock 0 mapped to illegal pblock 48 (length 1) [ 322.294238][T14741] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 322.303161][T14741] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3168: Failed to acquire dquot type 0 [ 322.315337][T14741] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 322.325474][T14741] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.3168: mark_inode_dirty error [ 322.352900][T14741] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 322.364811][T14741] EXT4-fs (loop9): 1 orphan inode deleted [ 322.372400][T14754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.385060][ T1691] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 322.400681][T14741] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.414341][T14754] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.420045][ T1691] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 322.459743][T14741] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 322.530341][ C1] vcan0: j1939_tp_rxtimer: 0xffff88816d7f6600: rx timeout, send abort [ 322.546761][T14764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3174'. [ 322.592434][T14765] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 322.869478][T14778] bridge1: entered promiscuous mode [ 322.874992][T14778] bridge1: entered allmulticast mode [ 322.897385][T14778] set_capacity_and_notify: 7 callbacks suppressed [ 322.897463][T14778] loop9: detected capacity change from 0 to 1024 [ 322.918882][T14778] EXT4-fs: Ignoring removed bh option [ 322.942488][T14778] EXT4-fs: Ignoring removed nobh option [ 322.948155][T14778] EXT4-fs: inline encryption not supported [ 322.981173][T14778] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.3179: Allocating blocks 497-513 which overlap fs metadata [ 323.014995][ C1] vcan0: j1939_tp_rxtimer: 0xffff88816d7f6600: abort rx timeout. Force session deactivation [ 323.028229][T14787] sctp: [Deprecated]: syz.8.3182 (pid 14787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.028229][T14787] Use struct sctp_sack_info instead [ 323.051900][T14788] EXT4-fs (loop9): pa ffff8881091c5e70: logic 16, phys. 129, len 24 [ 323.059956][T14788] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 323.166634][T14796] loop8: detected capacity change from 0 to 128 [ 323.176643][T14796] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 323.226155][T14796] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 323.243832][T14796] vfat filesystem being mounted at /158/bus supports timestamps until 2107-12-31 (0x10391447e) [ 323.440916][T14808] loop8: detected capacity change from 0 to 8192 [ 323.463335][T14808] vfat filesystem being mounted at /160/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 323.772812][T14831] bridge0: port 3(macsec1) entered blocking state [ 323.780136][T14831] bridge0: port 3(macsec1) entered disabled state [ 323.786992][T14831] macsec1: entered allmulticast mode [ 323.792342][T14831] bridge0: entered allmulticast mode [ 323.805481][T14831] macsec1: left allmulticast mode [ 323.810791][T14831] bridge0: left allmulticast mode [ 323.888808][T14834] loop4: detected capacity change from 0 to 512 [ 323.911888][T14834] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.978320][T14846] netlink: 284 bytes leftover after parsing attributes in process `syz.9.3201'. [ 324.081063][T14861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.148113][T14867] loop9: detected capacity change from 0 to 512 [ 324.186560][T14861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.203835][T14867] msdos filesystem being mounted at /32/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 324.242121][T14861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.291399][T14871] loop9: detected capacity change from 0 to 1764 [ 324.313612][T14861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.388278][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.402337][ T847] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.423891][ T847] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.434967][T14878] loop9: detected capacity change from 0 to 128 [ 324.442047][T14878] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 324.453226][T14878] vfat filesystem being mounted at /34/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 324.458549][ T1853] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.498511][T14880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.512523][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 324.522375][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3213'. [ 324.541203][T14880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.605246][T14880] bond1: (slave bond0): making interface the new active one [ 324.616728][T14888] loop8: detected capacity change from 0 to 512 [ 324.627210][T14888] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 324.661402][T14880] bond1: (slave bond0): Enslaving as an active interface with an up link [ 324.685612][T14888] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 324.685665][T14888] EXT4-fs: failed to create workqueue [ 324.700997][T14888] EXT4-fs (loop8): mount failed [ 324.730982][T14886] bond1: (slave bond0): Releasing active interface [ 324.814456][T14886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.871732][T14911] loop6: detected capacity change from 0 to 1024 [ 324.894986][T14911] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 324.960352][T14911] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.3222: lblock 2 mapped to illegal pblock 2 (length 1) [ 324.994568][T14911] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.3222: lblock 0 mapped to illegal pblock 48 (length 1) [ 325.015907][T14911] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3222: Failed to acquire dquot type 0 [ 325.038484][T14919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3225'. [ 325.058769][T14911] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 325.073806][T14919] netlink: 'syz.3.3225': attribute type 27 has an invalid length. [ 325.095506][T14919] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.102732][T14919] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.111156][T14911] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.3222: mark_inode_dirty error [ 325.123477][T14911] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 325.136376][T14911] EXT4-fs (loop6): 1 orphan inode deleted [ 325.154758][ T1691] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.190050][T14919] team0: Port device bridge0 removed [ 325.209657][T14919] bridge_slave_0: left allmulticast mode [ 325.209685][T14919] bridge_slave_0: left promiscuous mode [ 325.209833][T14919] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.215864][ T1691] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 325.239864][T14919] bridge_slave_1: left allmulticast mode [ 325.239909][T14919] bridge_slave_1: left promiscuous mode [ 325.240058][T14919] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.243712][T14919] bond0: (slave bond_slave_0): Releasing backup interface [ 325.256729][T14919] bond0: (slave bond_slave_1): Releasing backup interface [ 325.296460][T14923] loop9: detected capacity change from 0 to 8192 [ 325.321799][T14923] vfat filesystem being mounted at /39/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 325.346487][T14919] team0: Port device team_slave_0 removed [ 325.442429][T14919] team0: Port device team_slave_1 removed [ 325.443888][T14919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.443910][T14919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.463693][T14919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.506489][T14919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.602509][T14919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.609591][T14928] bridge0: entered promiscuous mode [ 325.628055][T14928] bridge0: port 3(macsec1) entered blocking state [ 325.634690][T14928] bridge0: port 3(macsec1) entered disabled state [ 325.641534][T14928] macsec1: entered allmulticast mode [ 325.646988][T14928] bridge0: entered allmulticast mode [ 325.703812][T14928] macsec1: left allmulticast mode [ 325.709019][T14928] bridge0: left allmulticast mode [ 325.715098][T14928] bridge0: left promiscuous mode [ 325.736138][ T7615] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 325.752694][ T7615] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 325.762520][ T7615] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 325.855755][T14941] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.872821][T14947] can0: slcan on ttyS3. [ 325.956765][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 325.956781][ T29] audit: type=1400 audit(5310125948.903:6163): avc: denied { read } for pid=14937 comm="syz.6.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.074031][ T29] audit: type=1326 audit(5310125949.018:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14965 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d982eaeb9 code=0x7ffc0000 [ 326.115380][ T29] audit: type=1326 audit(5310125949.050:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14965 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d982eaeb9 code=0x7ffc0000 [ 326.140610][ T29] audit: type=1326 audit(5310125949.050:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14965 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f4d982eaeb9 code=0x7ffc0000 [ 326.164920][ T29] audit: type=1326 audit(5310125949.050:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14965 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d982eaeb9 code=0x7ffc0000 [ 326.189265][ T29] audit: type=1326 audit(5310125949.050:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14965 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d982eaeb9 code=0x7ffc0000 [ 326.213209][ T29] audit: type=1326 audit(5310125949.050:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14965 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d982eaeb9 code=0x7ffc0000 [ 326.237886][ T29] audit: type=1326 audit(5310125949.050:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14965 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d982eaeb9 code=0x7ffc0000 [ 326.262853][ T29] audit: type=1326 audit(5310125949.050:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14965 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d982eaeb9 code=0x7ffc0000 [ 326.286407][ T29] audit: type=1326 audit(5310125949.060:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14965 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d982eaeb9 code=0x7ffc0000 [ 326.534547][T14985] bridge1: entered promiscuous mode [ 326.539860][T14985] bridge1: entered allmulticast mode [ 326.554618][T14985] EXT4-fs: Ignoring removed bh option [ 326.568498][T14985] EXT4-fs: Ignoring removed nobh option [ 326.574170][T14985] EXT4-fs: inline encryption not supported [ 326.600588][T14985] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.3238: Allocating blocks 497-513 which overlap fs metadata [ 326.641391][T14985] EXT4-fs (loop4): pa ffff8881075d6cb0: logic 16, phys. 129, len 24 [ 326.649599][T14985] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 326.680627][T14977] can0 (unregistered): slcan off ttyS3. [ 326.736178][ T4997] Alternate GPT is invalid, using primary GPT. [ 326.743417][ T4997] loop6: p2 p3 p7 [ 326.764158][T14994] Alternate GPT is invalid, using primary GPT. [ 326.771487][T14994] loop6: p2 p3 p7 [ 326.844451][T15011] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3245'. [ 326.862574][ T5007] udevd[5007]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 326.863226][ T4997] udevd[4997]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 326.886531][ T9109] udevd[9109]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 326.914178][ T9109] udevd[9109]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 326.914493][ T5007] udevd[5007]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 326.929651][ T4997] udevd[4997]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 327.017725][T15024] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.075126][T15033] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.189008][T15033] tipc: Enabled bearer , priority 0 [ 327.204955][T15032] tipc: Resetting bearer [ 327.240215][T15033] tipc: Resetting bearer [ 327.279465][T15033] tipc: Disabling bearer [ 327.297835][T15054] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3252'. [ 327.316168][T15057] FAULT_INJECTION: forcing a failure. [ 327.316168][T15057] name failslab, interval 1, probability 0, space 0, times 0 [ 327.330087][T15057] CPU: 1 UID: 0 PID: 15057 Comm: syz.4.3251 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 327.330130][T15057] Tainted: [W]=WARN [ 327.330140][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.330220][T15057] Call Trace: [ 327.330230][T15057] [ 327.330241][T15057] __dump_stack+0x1d/0x30 [ 327.330343][T15057] dump_stack_lvl+0x95/0xd0 [ 327.330372][T15057] dump_stack+0x15/0x1b [ 327.330399][T15057] should_fail_ex+0x263/0x280 [ 327.330523][T15057] should_failslab+0x8c/0xb0 [ 327.330555][T15057] kmem_cache_alloc_noprof+0x68/0x490 [ 327.330589][T15057] ? audit_log_start+0x34c/0x730 [ 327.330652][T15057] audit_log_start+0x34c/0x730 [ 327.330685][T15057] ? kstrtouint+0x76/0xc0 [ 327.330782][T15057] audit_seccomp+0x47/0x100 [ 327.330840][T15057] ? __seccomp_filter+0x8db/0x1350 [ 327.330869][T15057] __seccomp_filter+0x8ec/0x1350 [ 327.330925][T15057] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 327.330956][T15057] ? vfs_write+0x86e/0x9f0 [ 327.330982][T15057] __secure_computing+0x81/0x150 [ 327.331070][T15057] syscall_trace_enter+0xce/0x1e0 [ 327.331107][T15057] do_syscall_64+0x9a/0x2a0 [ 327.331229][T15057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.331252][T15057] RIP: 0033:0x7f8271b5aeb9 [ 327.331336][T15057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.331361][T15057] RSP: 002b:00007f82705b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 327.331388][T15057] RAX: ffffffffffffffda RBX: 00007f8271dd5fa0 RCX: 00007f8271b5aeb9 [ 327.331406][T15057] RDX: 000000000000000f RSI: 0000000000001000 RDI: 0000200000004000 [ 327.331422][T15057] RBP: 00007f82705b7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.331436][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.331525][T15057] R13: 00007f8271dd6038 R14: 00007f8271dd5fa0 R15: 00007ffc4ac582d8 [ 327.331553][T15057] [ 327.644241][T15074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3257'. [ 327.727047][T15069] bridge2: entered promiscuous mode [ 327.733296][T15069] bridge2: entered allmulticast mode [ 327.772495][T15069] set_capacity_and_notify: 6 callbacks suppressed [ 327.772517][T15069] loop8: detected capacity change from 0 to 1024 [ 327.815339][T15069] EXT4-fs: Ignoring removed bh option [ 327.841771][T15069] EXT4-fs: Ignoring removed nobh option [ 327.849051][T15069] EXT4-fs: inline encryption not supported [ 327.892984][T15069] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.3255: Allocating blocks 497-513 which overlap fs metadata [ 327.955902][T15069] EXT4-fs (loop8): pa ffff8881091c5d90: logic 16, phys. 129, len 24 [ 327.964392][T15069] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 328.103620][T15105] FAULT_INJECTION: forcing a failure. [ 328.103620][T15105] name failslab, interval 1, probability 0, space 0, times 0 [ 328.116576][T15105] CPU: 0 UID: 0 PID: 15105 Comm: syz.4.3267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 328.116660][T15105] Tainted: [W]=WARN [ 328.116670][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.116687][T15105] Call Trace: [ 328.116696][T15105] [ 328.116708][T15105] __dump_stack+0x1d/0x30 [ 328.116765][T15105] dump_stack_lvl+0x95/0xd0 [ 328.116788][T15105] dump_stack+0x15/0x1b [ 328.116832][T15105] should_fail_ex+0x263/0x280 [ 328.116874][T15105] should_failslab+0x8c/0xb0 [ 328.116956][T15105] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 328.116986][T15105] ? __alloc_skb+0x2f0/0x4b0 [ 328.117026][T15105] __alloc_skb+0x2f0/0x4b0 [ 328.117141][T15105] ? __alloc_skb+0x219/0x4b0 [ 328.117183][T15105] audit_log_start+0x3aa/0x730 [ 328.117223][T15105] ? kstrtouint+0x76/0xc0 [ 328.117279][T15105] audit_seccomp+0x47/0x100 [ 328.117327][T15105] ? __seccomp_filter+0x8db/0x1350 [ 328.117356][T15105] __seccomp_filter+0x8ec/0x1350 [ 328.117447][T15105] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 328.117485][T15105] ? vfs_write+0x86e/0x9f0 [ 328.117510][T15105] ? __rcu_read_unlock+0x4e/0x70 [ 328.117595][T15105] ? __fget_files+0x184/0x1c0 [ 328.117631][T15105] __secure_computing+0x81/0x150 [ 328.117717][T15105] syscall_trace_enter+0xce/0x1e0 [ 328.117761][T15105] do_syscall_64+0x9a/0x2a0 [ 328.117796][T15105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.117819][T15105] RIP: 0033:0x7f8271b5aeb9 [ 328.117841][T15105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.117948][T15105] RSP: 002b:00007f82705b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 328.117975][T15105] RAX: ffffffffffffffda RBX: 00007f8271dd5fa0 RCX: 00007f8271b5aeb9 [ 328.117989][T15105] RDX: 000000000000000f RSI: 0000000000001000 RDI: 0000200000004000 [ 328.118003][T15105] RBP: 00007f82705b7090 R08: 0000000000000000 R09: 0000000000000000 [ 328.118076][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.118094][T15105] R13: 00007f8271dd6038 R14: 00007f8271dd5fa0 R15: 00007ffc4ac582d8 [ 328.118123][T15105] [ 328.342953][T15110] loop6: detected capacity change from 0 to 512 [ 328.350171][T12256] EXT4-fs unmount: 19 callbacks suppressed [ 328.350255][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.422838][T15112] loop8: detected capacity change from 0 to 512 [ 328.499037][T15110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.520728][T15112] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.3268: corrupted inode contents [ 328.535656][T15118] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3270'. [ 328.555222][T15112] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #3: comm syz.8.3268: mark_inode_dirty error [ 328.569341][T15110] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.586921][T15112] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.3268: corrupted inode contents [ 328.599390][T15120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3269'. [ 328.628538][T15120] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 328.661382][T15112] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3268: mark_inode_dirty error [ 328.684488][T15129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15129 comm=syz.3.3273 [ 328.710893][T15130] bridge0: entered promiscuous mode [ 328.717901][T15130] bridge0: port 3(macsec1) entered blocking state [ 328.724458][T15130] bridge0: port 3(macsec1) entered disabled state [ 328.732836][T15112] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3268: Failed to acquire dquot type 0 [ 328.754388][T15130] macsec1: entered allmulticast mode [ 328.759828][T15130] bridge0: entered allmulticast mode [ 328.774246][T15112] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3268: corrupted inode contents [ 328.774523][T15130] macsec1: left allmulticast mode [ 328.787050][T15112] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #16: comm syz.8.3268: mark_inode_dirty error [ 328.791310][T15130] bridge0: left allmulticast mode [ 328.816967][T15130] bridge0: left promiscuous mode [ 328.835143][T15112] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3268: corrupted inode contents [ 328.857289][T15112] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3268: mark_inode_dirty error [ 328.878164][T15112] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3268: corrupted inode contents [ 328.892478][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.903466][T15112] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 328.912403][T15112] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3268: corrupted inode contents [ 328.961479][T15139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3278'. [ 328.964684][T15112] EXT4-fs error (device loop8): ext4_truncate:4635: inode #16: comm syz.8.3268: mark_inode_dirty error [ 328.997944][T15112] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 329.026813][T15112] EXT4-fs (loop8): 1 truncate cleaned up [ 329.043793][T15112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.065099][T15112] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.108959][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.134916][T15143] loop6: detected capacity change from 0 to 1024 [ 329.152396][T15143] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.243792][T15143] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3277: Invalid block bitmap block 0 in block_group 0 [ 329.268640][T15143] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3277: Failed to acquire dquot type 0 [ 329.325954][T15143] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.3277: Freeing blocks not in datazone - block = 0, count = 4096 [ 329.343662][T15143] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3277: Invalid inode bitmap blk 0 in block_group 0 [ 329.360520][ T12] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 329.405515][T15143] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 329.477488][T15143] EXT4-fs (loop6): 1 orphan inode deleted [ 329.536645][T15143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.591788][T15143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.610826][T15187] loop9: detected capacity change from 0 to 1024 [ 329.623635][T15187] EXT4-fs: Ignoring removed orlov option [ 329.654693][T15187] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #4: comm syz.9.3292: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 329.679236][T15190] bridge0: port 1(macsec1) entered blocking state [ 329.686510][T15190] bridge0: port 1(macsec1) entered disabled state [ 329.697148][T15187] EXT4-fs error (device loop9): ext4_quota_enable:7180: comm syz.9.3292: Bad quota inode: 4, type: 1 [ 329.728050][T15190] macsec1: entered allmulticast mode [ 329.733725][T15190] bridge0: entered allmulticast mode [ 329.779955][T15187] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 329.804665][T15190] macsec1: left allmulticast mode [ 329.809934][T15190] bridge0: left allmulticast mode [ 329.836043][T15187] EXT4-fs (loop9): mount failed [ 330.076130][T15205] bridge0: entered promiscuous mode [ 330.083279][T15205] bridge0: port 3(macsec1) entered blocking state [ 330.089949][T15205] bridge0: port 3(macsec1) entered disabled state [ 330.119780][T15205] macsec1: entered allmulticast mode [ 330.125221][T15205] bridge0: entered allmulticast mode [ 330.179968][T15205] macsec1: left allmulticast mode [ 330.185145][T15205] bridge0: left allmulticast mode [ 330.200900][T15205] bridge0: left promiscuous mode [ 330.243322][T15212] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3302'. [ 330.253896][T15211] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3302'. [ 330.316627][T15221] loop4: detected capacity change from 0 to 512 [ 330.339758][T15223] loop6: detected capacity change from 0 to 512 [ 330.360005][T15223] vfat filesystem being mounted at /416/control supports timestamps until 2107-12-31 (0x10391447e) [ 330.373780][T15221] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 330.403380][T15221] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 330.413908][T15221] EXT4-fs (loop4): orphan cleanup on readonly fs [ 330.421771][T15221] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 330.438183][T15221] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 330.445976][T15221] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 330.460681][T15221] EXT4-fs (loop4): Remounting filesystem read-only [ 330.467955][T15221] EXT4-fs (loop4): 1 truncate cleaned up [ 330.474076][T15221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 330.496561][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3309'. [ 330.510029][T15229] bridge2: entered promiscuous mode [ 330.545231][T13629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.579084][T15234] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 84:b6:47:b8:cd:85 [ 330.634000][T15246] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3311'. [ 330.693426][T15250] loop6: detected capacity change from 0 to 128 [ 330.700856][T15250] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 330.747306][T15250] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 330.757907][T15250] vfat filesystem being mounted at /419/bus supports timestamps until 2107-12-31 (0x10391447e) [ 330.768505][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 330.768519][ T29] audit: type=1326 audit(5310125953.942:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.4.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8271b5aeb9 code=0x7ffc0000 [ 330.798370][ T29] audit: type=1326 audit(5310125953.942:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.4.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8271b5aeb9 code=0x7ffc0000 [ 330.822904][ T29] audit: type=1326 audit(5310125953.942:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.4.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8271b5aeb9 code=0x7ffc0000 [ 330.846648][ T29] audit: type=1326 audit(5310125953.942:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.4.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8271b5aeb9 code=0x7ffc0000 [ 330.870510][ T29] audit: type=1326 audit(5310125953.942:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.4.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8271b5aeb9 code=0x7ffc0000 [ 330.894245][ T29] audit: type=1326 audit(5310125953.942:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.4.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8271b5aeb9 code=0x7ffc0000 [ 330.917852][ T29] audit: type=1326 audit(5310125953.942:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.4.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8271b5aeb9 code=0x7ffc0000 [ 330.942231][ T29] audit: type=1326 audit(5310125953.942:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.4.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8271b5aeb9 code=0x7ffc0000 [ 330.966071][ T29] audit: type=1326 audit(5310125953.942:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.4.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8271b5aeb9 code=0x7ffc0000 [ 330.990793][ T29] audit: type=1326 audit(5310125953.942:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.4.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f8271b5aeb9 code=0x7ffc0000 [ 331.013752][T15258] debugfs: 'ttyS3' already exists in 'caif_serial' [ 331.118733][T15266] loop8: detected capacity change from 0 to 512 [ 331.129356][T15266] ext3: Unknown parameter 'smackfshat' [ 331.167887][T15276] loop4: detected capacity change from 0 to 256 [ 331.184277][T15274] msdos filesystem being mounted at /54/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 331.208244][T15276] vfat filesystem being mounted at /83 supports timestamps until 2107-12-31 (0x10391447e) [ 331.363263][T15298] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3326'. [ 331.552150][T15322] bridge0: port 3(macsec1) entered blocking state [ 331.558894][T15322] bridge0: port 3(macsec1) entered disabled state [ 331.577208][T15322] macsec1: entered allmulticast mode [ 331.582861][T15322] bridge0: entered allmulticast mode [ 331.597737][T15322] macsec1: left allmulticast mode [ 331.603200][T15322] bridge0: left allmulticast mode [ 331.639949][T15330] msdos filesystem being mounted at /59/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 331.795004][T15340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3338'. [ 331.863531][T15341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.874671][T15341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.579910][T15365] set_capacity_and_notify: 3 callbacks suppressed [ 332.579930][T15365] loop9: detected capacity change from 0 to 512 [ 332.605266][T15367] netlink: 'syz.8.3347': attribute type 30 has an invalid length. [ 332.628504][T15365] msdos filesystem being mounted at /63/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 332.742707][T15371] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3349'. [ 332.831450][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3357'. [ 332.840678][T15392] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3357'. [ 332.932349][T15400] netlink: 'syz.9.3359': attribute type 13 has an invalid length. [ 333.021331][T15400] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.028749][T15400] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.246835][ T12] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.256383][ T12] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.285643][ T12] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.299824][ T12] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.441756][T15423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3367'. [ 333.631088][T15429] bridge1: entered promiscuous mode [ 333.636510][T15429] bridge1: entered allmulticast mode [ 333.688273][T15433] loop4: detected capacity change from 0 to 512 [ 333.770908][T15439] FAULT_INJECTION: forcing a failure. [ 333.770908][T15439] name failslab, interval 1, probability 0, space 0, times 0 [ 333.783914][T15439] CPU: 1 UID: 0 PID: 15439 Comm: syz.4.3371 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 333.784038][T15439] Tainted: [W]=WARN [ 333.784046][T15439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.784064][T15439] Call Trace: [ 333.784074][T15439] [ 333.784153][T15439] __dump_stack+0x1d/0x30 [ 333.784205][T15439] dump_stack_lvl+0x95/0xd0 [ 333.784329][T15439] dump_stack+0x15/0x1b [ 333.784395][T15439] should_fail_ex+0x263/0x280 [ 333.784440][T15439] should_failslab+0x8c/0xb0 [ 333.784482][T15439] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 333.784576][T15439] ? sidtab_sid2str_get+0xa0/0x130 [ 333.784609][T15439] kmemdup_noprof+0x2b/0x70 [ 333.784668][T15439] sidtab_sid2str_get+0xa0/0x130 [ 333.784732][T15439] security_sid_to_context_core+0x1eb/0x2e0 [ 333.784799][T15439] security_sid_to_context+0x27/0x40 [ 333.784858][T15439] selinux_lsmprop_to_secctx+0x67/0xf0 [ 333.784890][T15439] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 333.784940][T15439] audit_log_subj_ctx+0xa4/0x3e0 [ 333.785028][T15439] ? skb_put+0xa9/0xf0 [ 333.785079][T15439] audit_log_task_context+0x48/0x70 [ 333.785162][T15439] audit_log_task+0xf3/0x250 [ 333.785235][T15439] audit_seccomp+0x60/0x100 [ 333.785284][T15439] ? __seccomp_filter+0x8db/0x1350 [ 333.785310][T15439] __seccomp_filter+0x8ec/0x1350 [ 333.785339][T15439] ? __schedule+0x82d/0xc90 [ 333.785365][T15439] __secure_computing+0x81/0x150 [ 333.785454][T15439] syscall_trace_enter+0xce/0x1e0 [ 333.785499][T15439] do_syscall_64+0x9a/0x2a0 [ 333.785540][T15439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.785681][T15439] RIP: 0033:0x7f8271b1b78e [ 333.785704][T15439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.785735][T15439] RSP: 002b:00007f82705b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.785757][T15439] RAX: ffffffffffffffda RBX: 00007f82705b76c0 RCX: 00007f8271b1b78e [ 333.785772][T15439] RDX: 000000000000000f RSI: 00007f82705b70a0 RDI: 0000000000000005 [ 333.785786][T15439] RBP: 00007f82705b7090 R08: 0000000000000000 R09: 0000000000000000 [ 333.785845][T15439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.785858][T15439] R13: 00007f8271dd6038 R14: 00007f8271dd5fa0 R15: 00007ffc4ac582d8 [ 333.785955][T15439] [ 334.079101][T15442] loop8: detected capacity change from 0 to 512 [ 334.099386][T15442] msdos filesystem being mounted at /191/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 334.209128][T15447] loop4: detected capacity change from 0 to 512 [ 334.241962][T15447] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.4.3374: corrupted xattr block 95: invalid header [ 334.291774][T15447] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3374: bg 0: block 7: invalid block bitmap [ 334.305262][T15447] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 334.315963][T15447] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.3374: corrupted xattr block 95: invalid header [ 334.334407][T15447] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 334.344072][T15447] EXT4-fs (loop4): 1 orphan inode deleted [ 334.350539][T15447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.400602][T15453] netlink: 'syz.9.3377': attribute type 1 has an invalid length. [ 334.421969][T15453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.431079][T15453] bond2: (slave batadv0): making interface the new active one [ 334.441131][T15453] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 334.457170][T15453] loop9: detected capacity change from 0 to 512 [ 334.465668][T15453] msdos filesystem being mounted at /69/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 334.478055][T15453] 9p: Bad value for 'wfdno' [ 334.484223][T15453] bond2 (unregistering): (slave batadv0): Releasing active interface [ 334.493626][T15453] bond2 (unregistering): Released all slaves [ 334.527056][T13629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.870474][T15471] netlink: 'syz.4.3382': attribute type 33 has an invalid length. [ 334.977682][T15486] loop4: detected capacity change from 0 to 1024 [ 334.984411][T15484] bridge3: entered promiscuous mode [ 334.989830][T15484] bridge3: entered allmulticast mode [ 335.010715][T15489] bridge0: port 1(macsec1) entered blocking state [ 335.017309][T15489] bridge0: port 1(macsec1) entered disabled state [ 335.017744][T15484] loop8: detected capacity change from 0 to 1024 [ 335.027095][T15486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.041726][T15484] EXT4-fs: Ignoring removed bh option [ 335.048808][T15489] macsec1: entered allmulticast mode [ 335.054263][T15489] bridge0: entered allmulticast mode [ 335.062810][T15489] macsec1: left allmulticast mode [ 335.067176][T15484] EXT4-fs: Ignoring removed nobh option [ 335.067937][T15489] bridge0: left allmulticast mode [ 335.073522][T15484] EXT4-fs: inline encryption not supported [ 335.112512][T15484] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.135921][T15495] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 335.151363][T15495] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 335.163664][T15495] EXT4-fs (loop4): This should not happen!! Data will be lost [ 335.163664][T15495] [ 335.173077][T15486] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1448 with error 28 [ 335.173495][T15495] EXT4-fs (loop4): Total free blocks count 0 [ 335.187755][T15486] EXT4-fs (loop4): This should not happen!! Data will be lost [ 335.187755][T15486] [ 335.191814][T15495] EXT4-fs (loop4): Free/Dirty block details [ 335.191829][T15495] EXT4-fs (loop4): free_blocks=68451041280 [ 335.191843][T15495] EXT4-fs (loop4): dirty_blocks=1472 [ 335.201626][T15486] EXT4-fs (loop4): Total free blocks count 0 [ 335.231954][T15484] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.3386: Allocating blocks 497-513 which overlap fs metadata [ 335.263565][T15484] EXT4-fs (loop8): pa ffff8881091c5d90: logic 16, phys. 129, len 24 [ 335.271838][T15484] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 335.288261][T15501] __nla_validate_parse: 5 callbacks suppressed [ 335.288280][T15501] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3389'. [ 335.335125][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.502289][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3395'. [ 335.511277][T15516] netlink: 'syz.8.3395': attribute type 8 has an invalid length. [ 335.522016][T15517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3394'. [ 335.553514][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3397'. [ 335.570387][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3397'. [ 335.601390][ T29] kauditd_printk_skb: 968 callbacks suppressed [ 335.601409][ T29] audit: type=1326 audit(5310125959.014:7399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.9.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 335.633880][ T29] audit: type=1326 audit(5310125959.014:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.9.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 335.657745][ T29] audit: type=1326 audit(5310125959.014:7401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.9.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 335.681701][ T29] audit: type=1326 audit(5310125959.014:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.9.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 335.705654][ T29] audit: type=1326 audit(5310125959.014:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.9.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 335.729511][ T29] audit: type=1326 audit(5310125959.014:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.9.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 335.753252][ T29] audit: type=1326 audit(5310125959.014:7405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.9.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 335.776953][ T29] audit: type=1326 audit(5310125959.014:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.9.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 335.800794][ T29] audit: type=1326 audit(5310125959.014:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.9.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 335.803937][T15531] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3400'. [ 335.824439][ T29] audit: type=1326 audit(5310125959.014:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.9.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f56a797aeb9 code=0x7ffc0000 [ 335.894982][T15523] loop4: detected capacity change from 0 to 512 [ 335.956074][T15541] FAULT_INJECTION: forcing a failure. [ 335.956074][T15541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.969334][T15541] CPU: 1 UID: 0 PID: 15541 Comm: syz.3.3403 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 335.969369][T15541] Tainted: [W]=WARN [ 335.969376][T15541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.969389][T15541] Call Trace: [ 335.969424][T15541] [ 335.969516][T15541] __dump_stack+0x1d/0x30 [ 335.969554][T15541] dump_stack_lvl+0x95/0xd0 [ 335.969635][T15541] dump_stack+0x15/0x1b [ 335.969689][T15541] should_fail_ex+0x263/0x280 [ 335.969726][T15541] should_fail+0xb/0x20 [ 335.969772][T15541] should_fail_usercopy+0x1a/0x20 [ 335.969820][T15541] _copy_from_user+0x1c/0xb0 [ 335.969845][T15541] ___sys_sendmsg+0xc1/0x1e0 [ 335.969881][T15541] __sys_sendmmsg+0x185/0x320 [ 335.969921][T15541] __x64_sys_sendmmsg+0x57/0x70 [ 335.969980][T15541] x64_sys_call+0x1e28/0x3000 [ 335.970011][T15541] do_syscall_64+0xc0/0x2a0 [ 335.970054][T15541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.970109][T15541] RIP: 0033:0x7f4d982eaeb9 [ 335.970131][T15541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.970156][T15541] RSP: 002b:00007f4d96d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 335.970184][T15541] RAX: ffffffffffffffda RBX: 00007f4d98565fa0 RCX: 00007f4d982eaeb9 [ 335.970267][T15541] RDX: 0000000000000001 RSI: 00002000000043c0 RDI: 0000000000000003 [ 335.970281][T15541] RBP: 00007f4d96d47090 R08: 0000000000000000 R09: 0000000000000000 [ 335.970294][T15541] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000001 [ 335.970347][T15541] R13: 00007f4d98566038 R14: 00007f4d98565fa0 R15: 00007ffcb638b0b8 [ 335.970375][T15541] [ 335.971542][T15537] bridge2: entered promiscuous mode [ 336.018016][T15544] loop9: detected capacity change from 0 to 1024 [ 336.022859][T15537] bridge2: entered allmulticast mode [ 336.094033][T15544] EXT4-fs: Ignoring removed bh option [ 336.176161][T15544] EXT4-fs: Ignoring removed nobh option [ 336.181992][T15544] EXT4-fs: inline encryption not supported [ 336.206777][T15549] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3408'. [ 336.259080][T15544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.321002][T15537] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.3402: Allocating blocks 497-513 which overlap fs metadata [ 336.396567][T15549] netlink: 'syz.8.3408': attribute type 142 has an invalid length. [ 336.406006][T15549] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3408'. [ 336.490213][T15544] EXT4-fs (loop9): pa ffff8881075d6e00: logic 16, phys. 129, len 24 [ 336.498360][T15544] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 336.710779][T13732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.961407][T15573] loop4: detected capacity change from 0 to 512 [ 337.034738][T15573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.060315][T15573] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.201988][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 337.229617][T13629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.287902][T15602] FAULT_INJECTION: forcing a failure. [ 337.287902][T15602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.301552][T15602] CPU: 1 UID: 0 PID: 15602 Comm: syz.8.3419 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 337.301649][T15602] Tainted: [W]=WARN [ 337.301659][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.301677][T15602] Call Trace: [ 337.301686][T15602] [ 337.301698][T15602] __dump_stack+0x1d/0x30 [ 337.301753][T15602] dump_stack_lvl+0x95/0xd0 [ 337.301807][T15602] dump_stack+0x15/0x1b [ 337.301835][T15602] should_fail_ex+0x263/0x280 [ 337.301937][T15602] should_fail+0xb/0x20 [ 337.301971][T15602] should_fail_usercopy+0x1a/0x20 [ 337.302071][T15602] _copy_from_user+0x1c/0xb0 [ 337.302098][T15602] ____sys_sendmsg+0x1e2/0x600 [ 337.302180][T15602] ___sys_sendmsg+0x195/0x1e0 [ 337.302220][T15602] __sys_sendmmsg+0x185/0x320 [ 337.302261][T15602] __x64_sys_sendmmsg+0x57/0x70 [ 337.302289][T15602] x64_sys_call+0x1e28/0x3000 [ 337.302323][T15602] do_syscall_64+0xc0/0x2a0 [ 337.302404][T15602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.302476][T15602] RIP: 0033:0x7f1c1491aeb9 [ 337.302529][T15602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.302561][T15602] RSP: 002b:00007f1c13377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 337.302583][T15602] RAX: ffffffffffffffda RBX: 00007f1c14b95fa0 RCX: 00007f1c1491aeb9 [ 337.302597][T15602] RDX: 0000000000000001 RSI: 00002000000043c0 RDI: 0000000000000003 [ 337.302612][T15602] RBP: 00007f1c13377090 R08: 0000000000000000 R09: 0000000000000000 [ 337.302625][T15602] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000001 [ 337.302639][T15602] R13: 00007f1c14b96038 R14: 00007f1c14b95fa0 R15: 00007ffdd3e198e8 [ 337.302684][T15602] [ 337.568076][T15604] bridge4: entered promiscuous mode [ 337.573384][T15604] bridge4: entered allmulticast mode [ 337.586705][T15604] loop8: detected capacity change from 0 to 1024 [ 337.599150][T15604] EXT4-fs: Ignoring removed bh option [ 337.605858][T15604] EXT4-fs: Ignoring removed nobh option [ 337.611562][T15604] EXT4-fs: inline encryption not supported [ 337.637957][T15604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.656725][T15604] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.3421: Allocating blocks 497-513 which overlap fs metadata [ 337.682096][T15604] EXT4-fs (loop8): pa ffff8881075d6c40: logic 16, phys. 129, len 24 [ 337.690212][T15604] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 337.758806][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.770035][T15610] loop4: detected capacity change from 0 to 512 [ 337.779211][T15610] EXT4-fs: Ignoring removed nobh option [ 337.836913][T15610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.881095][T15610] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.915816][T15610] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.3422: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 338.006794][T13629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.055418][T15620] syzkaller0: entered promiscuous mode [ 338.061001][T15620] syzkaller0: entered allmulticast mode [ 338.266318][T15635] loop9: detected capacity change from 0 to 512 [ 338.299338][T15635] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #3: comm syz.9.3431: corrupted inode contents [ 338.412140][T15635] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #3: comm syz.9.3431: mark_inode_dirty error [ 338.424179][T15635] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #3: comm syz.9.3431: corrupted inode contents [ 338.437728][T15635] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.3431: mark_inode_dirty error [ 338.449884][T15635] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.3431: Failed to acquire dquot type 0 [ 338.462288][T15635] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3431: corrupted inode contents [ 338.476504][T15635] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.3431: mark_inode_dirty error [ 338.488771][T15635] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3431: corrupted inode contents [ 338.507565][T15635] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.3431: mark_inode_dirty error [ 338.519857][T15635] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3431: corrupted inode contents [ 338.533191][T15635] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 338.542313][T15635] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.3431: corrupted inode contents [ 338.570831][T15644] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3434'. [ 338.571631][T15635] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.3431: mark_inode_dirty error [ 338.592559][T15635] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 338.609494][T15635] EXT4-fs (loop9): 1 truncate cleaned up [ 338.617571][T15635] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.634893][T15644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.643826][T15635] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.656615][T15644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.667391][T15644] bond0 (unregistering): Released all slaves [ 338.733742][T13732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.761984][T15655] netlink: 'syz.8.3436': attribute type 13 has an invalid length. [ 338.778629][T15654] loop9: detected capacity change from 0 to 1024 [ 338.795752][T15654] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.808263][T15654] EXT4-fs: Ignoring removed bh option [ 338.845970][T15654] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.846583][T15647] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 338.881594][T15655] lo: entered promiscuous mode [ 338.886510][T15655] lo: entered allmulticast mode [ 338.895677][T15655] tunl0: entered promiscuous mode [ 338.900873][T15655] tunl0: entered allmulticast mode [ 338.907184][T15655] gre0: entered promiscuous mode [ 338.909691][T13732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.914153][T15655] gre0: entered allmulticast mode [ 338.927200][T15655] gretap0: entered promiscuous mode [ 338.932542][T15655] gretap0: entered allmulticast mode [ 338.940032][T15655] erspan0: entered promiscuous mode [ 338.945562][T15655] erspan0: entered allmulticast mode [ 338.954201][T15655] ip_vti0: entered promiscuous mode [ 338.959707][T15655] ip_vti0: entered allmulticast mode [ 338.965670][T15655] ip6_vti0: entered promiscuous mode [ 338.971067][T15655] ip6_vti0: entered allmulticast mode [ 338.977210][T15655] sit0: entered promiscuous mode [ 338.982229][T15655] sit0: entered allmulticast mode [ 338.988729][T15655] ip6tnl0: entered promiscuous mode [ 338.993985][T15655] ip6tnl0: entered allmulticast mode [ 338.999725][T15655] ip6gre0: entered promiscuous mode [ 339.005009][T15655] ip6gre0: entered allmulticast mode [ 339.011001][T15655] syz_tun: entered promiscuous mode [ 339.013776][T15664] loop9: detected capacity change from 0 to 512 [ 339.016508][T15655] syz_tun: entered allmulticast mode [ 339.025454][T15655] ip6gretap0: entered promiscuous mode [ 339.035206][T15655] ip6gretap0: entered allmulticast mode [ 339.041297][T15664] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 339.052032][T15664] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 339.056816][T15655] bridge0: entered promiscuous mode [ 339.061111][T15664] EXT4-fs (loop9): The Hurd can't support 64-bit file systems [ 339.066420][T15655] bridge0: entered allmulticast mode [ 339.094305][T15664] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.3439' sets config #1 [ 339.103577][T15655] vcan0: entered promiscuous mode [ 339.103601][T15655] vcan0: entered allmulticast mode [ 339.104079][T15655] bond0: entered promiscuous mode [ 339.104099][T15655] bond_slave_0: entered promiscuous mode [ 339.104184][T15655] bond_slave_1: entered promiscuous mode [ 339.104449][T15655] bond0: entered allmulticast mode [ 339.136397][T15655] bond_slave_0: entered allmulticast mode [ 339.142292][T15655] bond_slave_1: entered allmulticast mode [ 339.148778][T15655] team0: entered promiscuous mode [ 339.153950][T15655] team_slave_1: entered promiscuous mode [ 339.159900][T15655] bridge1: entered promiscuous mode [ 339.165441][T15655] team0: entered allmulticast mode [ 339.170736][T15655] team_slave_1: entered allmulticast mode [ 339.176613][T15655] bridge1: entered allmulticast mode [ 339.182227][T15655] dummy0: entered promiscuous mode [ 339.187681][T15655] dummy0: entered allmulticast mode [ 339.193373][T15655] nlmon0: entered promiscuous mode [ 339.198636][T15655] nlmon0: entered allmulticast mode [ 339.204128][T15655] caif0: entered promiscuous mode [ 339.209374][T15655] caif0: entered allmulticast mode [ 339.214866][T15655] batadv0: entered promiscuous mode [ 339.220234][T15655] batadv0: entered allmulticast mode [ 339.225870][T15655] vxcan0: entered promiscuous mode [ 339.231061][T15655] vxcan0: entered allmulticast mode [ 339.236809][T15655] vxcan1: entered promiscuous mode [ 339.242060][T15655] vxcan1: entered allmulticast mode [ 339.247634][T15655] veth0: entered promiscuous mode [ 339.252978][T15655] veth0: entered allmulticast mode [ 339.258436][T15655] veth1: entered promiscuous mode [ 339.263558][T15655] veth1: entered allmulticast mode [ 339.268923][T15655] wg0: entered promiscuous mode [ 339.273950][T15655] wg0: entered allmulticast mode [ 339.279128][T15655] wg1: entered promiscuous mode [ 339.284294][T15655] wg1: entered allmulticast mode [ 339.289811][T15655] wg2: entered promiscuous mode [ 339.294874][T15655] wg2: entered allmulticast mode [ 339.300215][T15655] veth0_to_bridge: entered promiscuous mode [ 339.306190][T15655] veth0_to_bridge: entered allmulticast mode [ 339.312713][T15655] veth1_to_bridge: entered promiscuous mode [ 339.318657][T15655] veth1_to_bridge: entered allmulticast mode [ 339.325350][T15655] veth0_to_bond: entered promiscuous mode [ 339.331296][T15655] veth0_to_bond: entered allmulticast mode [ 339.339241][T15655] veth1_to_bond: entered promiscuous mode [ 339.345575][T15655] veth1_to_bond: entered allmulticast mode [ 339.355171][T15655] veth1_to_team: entered promiscuous mode [ 339.361192][T15655] veth1_to_team: entered allmulticast mode [ 339.367853][T15655] veth0_to_batadv: entered promiscuous mode [ 339.373931][T15655] veth0_to_batadv: entered allmulticast mode [ 339.380513][T15655] batadv_slave_0: entered promiscuous mode [ 339.386487][T15655] batadv_slave_0: entered allmulticast mode [ 339.387105][T15666] loop9: detected capacity change from 0 to 512 [ 339.393211][T15655] veth1_to_batadv: entered promiscuous mode [ 339.404885][T15655] veth1_to_batadv: entered allmulticast mode [ 339.411482][T15655] batadv_slave_1: entered promiscuous mode [ 339.417658][T15655] batadv_slave_1: entered allmulticast mode [ 339.424555][T15655] xfrm0: entered promiscuous mode [ 339.429737][T15655] xfrm0: entered allmulticast mode [ 339.436151][T15655] veth0_to_hsr: entered promiscuous mode [ 339.441880][T15655] veth0_to_hsr: entered allmulticast mode [ 339.453279][T15655] hsr_slave_0: entered promiscuous mode [ 339.459248][T15655] hsr_slave_0: entered allmulticast mode [ 339.465320][T15655] veth1_to_hsr: entered promiscuous mode [ 339.471086][T15655] veth1_to_hsr: entered allmulticast mode [ 339.477810][T15655] hsr_slave_1: entered promiscuous mode [ 339.483656][T15655] hsr_slave_1: entered allmulticast mode [ 339.493352][T15655] veth1_virt_wifi: entered promiscuous mode [ 339.499356][T15655] veth1_virt_wifi: entered allmulticast mode [ 339.509223][T15655] veth0_virt_wifi: entered promiscuous mode [ 339.515440][T15655] veth0_virt_wifi: entered allmulticast mode [ 339.524296][T15655] veth1_vlan: entered allmulticast mode [ 339.531538][T15655] veth0_vlan: entered allmulticast mode [ 339.537637][T15655] vlan0: entered promiscuous mode [ 339.543620][T15655] vlan0: entered allmulticast mode [ 339.549806][T15655] vlan1: entered promiscuous mode [ 339.555070][T15655] vlan1: entered allmulticast mode [ 339.560911][T15655] macvlan0: entered promiscuous mode [ 339.566608][T15655] macvlan0: entered allmulticast mode [ 339.572686][T15655] macvlan1: entered promiscuous mode [ 339.578117][T15655] macvlan1: entered allmulticast mode [ 339.583832][T15655] ipvlan0: entered promiscuous mode [ 339.589200][T15655] ipvlan0: entered allmulticast mode [ 339.594977][T15655] ipvlan1: entered promiscuous mode [ 339.600235][T15655] ipvlan1: entered allmulticast mode [ 339.605981][T15655] veth1_macvtap: entered allmulticast mode [ 339.612065][T15655] veth0_macvtap: entered allmulticast mode [ 339.618284][T15655] macvtap0: entered promiscuous mode [ 339.623739][T15655] macvtap0: entered allmulticast mode [ 339.635175][T15655] macsec0: entered promiscuous mode [ 339.640683][T15655] macsec0: entered allmulticast mode [ 339.646488][T15655] geneve0: entered promiscuous mode [ 339.651852][T15655] geneve0: entered allmulticast mode [ 339.658175][T15655] geneve1: entered promiscuous mode [ 339.664098][T15655] geneve1: entered allmulticast mode [ 339.670213][T15655] tun,0: entered promiscuous mode [ 339.675783][T15655] tun,0: entered allmulticast mode [ 339.681668][T15655] veth2: entered promiscuous mode [ 339.686993][T15655] veth2: entered allmulticast mode [ 339.693228][T15655] veth3: entered promiscuous mode [ 339.698333][T15655] veth3: entered allmulticast mode [ 339.703884][T15655] gtp0: entered promiscuous mode [ 339.709099][T15655] gtp0: entered allmulticast mode [ 339.714581][T15655] sit1: entered promiscuous mode [ 339.720251][T15655] sit1: entered allmulticast mode [ 339.725636][T15655] veth4: entered promiscuous mode [ 339.730852][T15655] veth4: entered allmulticast mode [ 339.736383][T15655] veth5: entered promiscuous mode [ 339.741595][T15655] veth5: entered allmulticast mode [ 339.746988][T15655] ipvlan2: entered promiscuous mode [ 339.752913][T15655] ipvlan2: entered allmulticast mode [ 339.758706][T15655] veth6: entered promiscuous mode [ 339.763830][T15655] veth6: entered allmulticast mode [ 339.769587][T15655] veth7: entered promiscuous mode [ 339.774888][T15655] veth7: entered allmulticast mode [ 339.781347][T15655] netdevsim netdevsim8 eth0: entered promiscuous mode [ 339.788404][T15655] netdevsim netdevsim8 eth0: entered allmulticast mode [ 339.795772][T15655] netdevsim netdevsim8 eth1: entered promiscuous mode [ 339.802761][T15655] netdevsim netdevsim8 eth1: entered allmulticast mode [ 339.810890][T15655] netdevsim netdevsim8 eth2: entered promiscuous mode [ 339.817956][T15655] netdevsim netdevsim8 eth2: entered allmulticast mode [ 339.825277][T15655] netdevsim netdevsim8 eth3: entered promiscuous mode [ 339.832197][T15655] netdevsim netdevsim8 eth3: entered allmulticast mode [ 339.840150][T15655] syztnl1: entered promiscuous mode [ 339.845640][T15655] syztnl1: entered allmulticast mode [ 339.851717][T15655] ipvlan3: entered promiscuous mode [ 339.857176][T15655] ipvlan3: entered allmulticast mode [ 339.864533][T15655] syztnl2: entered promiscuous mode [ 339.869865][T15655] syztnl2: entered allmulticast mode [ 339.923407][T15672] loop9: detected capacity change from 0 to 1024 [ 339.950386][T15672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.049134][T15672] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 340.067129][T15672] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 340.079973][T15672] EXT4-fs (loop9): This should not happen!! Data will be lost [ 340.079973][T15672] [ 340.089698][T15672] EXT4-fs (loop9): Total free blocks count 0 [ 340.096160][T15672] EXT4-fs (loop9): Free/Dirty block details [ 340.102280][T15672] EXT4-fs (loop9): free_blocks=68451041280 [ 340.108207][T15672] EXT4-fs (loop9): dirty_blocks=2304 [ 340.113792][T15672] EXT4-fs (loop9): Block reservation details [ 340.119877][T15672] EXT4-fs (loop9): i_reserved_data_blocks=144 [ 340.128174][T15683] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 340.136777][T15674] netlink: 'syz.4.3444': attribute type 142 has an invalid length. [ 340.149715][T15674] __nla_validate_parse: 1 callbacks suppressed [ 340.149799][T15674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3444'. [ 340.680292][ T29] kauditd_printk_skb: 815 callbacks suppressed [ 340.680312][ T29] audit: type=1400 audit(5310125964.347:8222): avc: denied { getopt } for pid=15708 comm="syz.9.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.770870][ T29] audit: type=1400 audit(5310125964.442:8223): avc: denied { connect } for pid=15702 comm="syz.8.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.791486][ T29] audit: type=1400 audit(5310125964.442:8224): avc: denied { name_connect } for pid=15702 comm="syz.8.3453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 340.812114][ T29] audit: type=1400 audit(5310125964.452:8225): avc: denied { listen } for pid=15702 comm="syz.8.3453" lport=36623 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.813090][T15717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15717 comm=syz.4.3457 [ 340.837133][ T29] audit: type=1400 audit(5310125964.452:8226): avc: denied { accept } for pid=15702 comm="syz.8.3453" lport=36623 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.872211][ T29] audit: type=1400 audit(5310125964.452:8227): avc: denied { getopt } for pid=15702 comm="syz.8.3453" lport=36623 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 340.896387][ T29] audit: type=1400 audit(5310125964.452:8228): avc: denied { name_connect } for pid=15702 comm="syz.8.3453" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 340.977921][ T29] audit: type=1400 audit(5310125964.536:8229): avc: denied { write } for pid=15715 comm="syz.3.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.997485][ T29] audit: type=1400 audit(5310125964.536:8230): avc: denied { ioctl } for pid=15715 comm="syz.3.3456" path="socket:[49908]" dev="sockfs" ino=49908 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 341.023287][ T29] audit: type=1400 audit(5310125964.641:8231): avc: denied { setopt } for pid=15715 comm="syz.3.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 341.050680][T15725] bridge2: entered promiscuous mode [ 341.056145][T15725] bridge2: entered allmulticast mode [ 341.136884][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3459'. [ 341.674247][T15748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3465'. [ 341.697387][T15748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3465'. [ 341.865010][T15752] netlink: 'syz.4.3467': attribute type 21 has an invalid length. [ 341.873794][T15752] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3467'. [ 342.006239][T15752] netlink: 'syz.4.3467': attribute type 5 has an invalid length. [ 342.014232][T15752] netlink: 'syz.4.3467': attribute type 6 has an invalid length. [ 342.022120][T15752] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3467'. [ 342.051009][T15756] loop8: detected capacity change from 0 to 128 [ 342.071312][T15756] FAT-fs (loop8): bogus number of reserved sectors [ 342.077893][T15756] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 342.087503][T15756] FAT-fs (loop8): Can't find a valid FAT filesystem [ 342.139353][T15756] loop8: detected capacity change from 0 to 128 [ 342.147190][T15756] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 342.185692][T15756] vfat filesystem being mounted at /213/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 342.205853][ T1853] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8) [ 342.214129][ T1853] FAT-fs (loop8): Filesystem has been set read-only [ 342.224346][ T1853] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 342.360944][ T1853] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 342.368575][ T1853] FAT-fs (loop8): Filesystem has been set read-only [ 342.430353][T15779] loop4: detected capacity change from 0 to 512 [ 342.441385][T15779] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 342.454896][T15781] loop9: detected capacity change from 0 to 512 [ 342.478705][T15779] EXT4-fs (loop4): 1 truncate cleaned up [ 342.493569][T15781] msdos filesystem being mounted at /91/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 342.504451][T15779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.522685][T15779] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3476'. [ 342.550576][T13629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.670881][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3483'. [ 342.811086][T15815] bridge0: port 3(macsec1) entered blocking state [ 342.817661][T15815] bridge0: port 3(macsec1) entered disabled state [ 342.824438][T15815] macsec1: entered allmulticast mode [ 342.829739][T15815] bridge0: entered allmulticast mode [ 342.835838][T15815] macsec1: left allmulticast mode [ 342.841178][T15815] bridge0: left allmulticast mode [ 343.526342][T15807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.589118][T15833] netlink: 'syz.8.3493': attribute type 8 has an invalid length. [ 343.651542][T15841] loop8: detected capacity change from 0 to 1024 [ 343.651847][T15840] program syz.9.3498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.660847][T15841] EXT4-fs: Ignoring removed i_version option [ 343.700004][T15841] EXT4-fs: dax option not supported [ 343.752295][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3501'. [ 343.874574][T15860] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3506'. [ 343.924084][T15863] loop8: detected capacity change from 0 to 512 [ 343.932821][T15863] msdos filesystem being mounted at /222/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 343.951142][T15865] loop9: detected capacity change from 0 to 512 [ 343.979393][T15865] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.003032][T15865] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.032609][T13732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.080041][T15855] loop4: detected capacity change from 0 to 512 [ 344.268118][T15878] bridge3: entered promiscuous mode [ 344.273608][T15878] bridge3: entered allmulticast mode [ 344.283594][T15880] bridge5: entered promiscuous mode [ 344.288865][T15880] bridge5: entered allmulticast mode [ 344.334929][T15880] loop8: detected capacity change from 0 to 1024 [ 344.351664][T15880] EXT4-fs: Ignoring removed bh option [ 344.357257][T15880] EXT4-fs: Ignoring removed nobh option [ 344.363833][T15880] EXT4-fs: inline encryption not supported [ 344.384344][T15890] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 344.393060][T15890] ..0ªî{X¹¦: entered allmulticast mode [ 344.402455][T15890] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 344.423760][T15880] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.520612][T12256] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.835294][T15922] loop9: detected capacity change from 0 to 1024 [ 344.842635][T15922] EXT4-fs: Ignoring removed oldalloc option [ 344.849033][T15922] EXT4-fs: Ignoring removed bh option [ 344.864203][T15922] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.360207][T15910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.392017][T15925] ================================================================== [ 345.400163][T15925] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 345.408372][T15925] [ 345.410737][T15925] write to 0xffff8881090b5cfc of 4 bytes by task 15922 on cpu 0: [ 345.418656][T15925] xas_set_mark+0x12b/0x140 [ 345.423212][T15925] __folio_start_writeback+0x17b/0x370 [ 345.428707][T15925] ext4_bio_write_folio+0x5ad/0x9f0 [ 345.433972][T15925] mpage_process_page_bufs+0x4a1/0x620 [ 345.439645][T15925] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 345.445747][T15925] ext4_do_writepages+0x9f6/0x2800 [ 345.452670][T15925] ext4_writepages+0x18f/0x320 [ 345.457759][T15925] do_writepages+0x1c6/0x310 [ 345.462416][T15925] file_write_and_wait_range+0x178/0x2f0 [ 345.468269][T15925] generic_buffers_fsync_noflush+0x45/0x130 [ 345.474287][T15925] ext4_sync_file+0x1aa/0x680 [ 345.479087][T15925] vfs_fsync_range+0x10d/0x130 [ 345.483886][T15925] ext4_buffered_write_iter+0x34f/0x3c0 [ 345.489475][T15925] ext4_file_write_iter+0x380/0xf70 [ 345.494928][T15925] iter_file_splice_write+0x6bc/0xa80 [ 345.500358][T15925] direct_splice_actor+0x156/0x2a0 [ 345.505592][T15925] splice_direct_to_actor+0x311/0x670 [ 345.511084][T15925] do_splice_direct+0x119/0x1a0 [ 345.516159][T15925] do_sendfile+0x382/0x650 [ 345.520623][T15925] __x64_sys_sendfile64+0x105/0x150 [ 345.525864][T15925] x64_sys_call+0x2db1/0x3000 [ 345.530602][T15925] do_syscall_64+0xc0/0x2a0 [ 345.535260][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.541459][T15925] [ 345.543808][T15925] read to 0xffff8881090b5cfc of 4 bytes by task 15925 on cpu 1: [ 345.552044][T15925] __writeback_single_inode+0x201/0x7b0 [ 345.557676][T15925] writeback_single_inode+0x16d/0x3f0 [ 345.563119][T15925] sync_inode_metadata+0x6e/0xa0 [ 345.568127][T15925] generic_buffers_fsync_noflush+0xee/0x130 [ 345.574072][T15925] ext4_sync_file+0x1aa/0x680 [ 345.578800][T15925] vfs_fsync_range+0x10d/0x130 [ 345.583685][T15925] ext4_buffered_write_iter+0x34f/0x3c0 [ 345.589365][T15925] ext4_file_write_iter+0x380/0xf70 [ 345.595590][T15925] iter_file_splice_write+0x6bc/0xa80 [ 345.601123][T15925] direct_splice_actor+0x156/0x2a0 [ 345.606289][T15925] splice_direct_to_actor+0x311/0x670 [ 345.611789][T15925] do_splice_direct+0x119/0x1a0 [ 345.616696][T15925] do_sendfile+0x382/0x650 [ 345.621152][T15925] __x64_sys_sendfile64+0x105/0x150 [ 345.627430][T15925] x64_sys_call+0x2db1/0x3000 [ 345.632174][T15925] do_syscall_64+0xc0/0x2a0 [ 345.636719][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.642817][T15925] [ 345.647149][T15925] value changed: 0x0a000021 -> 0x04000021 [ 345.652895][T15925] [ 345.655244][T15925] Reported by Kernel Concurrency Sanitizer on: [ 345.661415][T15925] CPU: 1 UID: 0 PID: 15925 Comm: syz.9.3524 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 345.673049][T15925] Tainted: [W]=WARN [ 345.676909][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.687699][T15925] ================================================================== [ 345.865091][T13732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.