last executing test programs: 7m26.704587203s ago: executing program 4 (id=35): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0800000000000000060000000000000000000000080000000800000000000000030000000000000004000000000000000900000000000000000000000000000000000000000000000400000000000000000000000000000001800000000000000c00000000000000050000000000000000000000000000000000000000000000000400000000000000000000000000000d00000000000000b96e0000000000000400000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000500000000000000060000000000000000000000000000000002000000000000020000000000000000000000000000000300000000000000008000000000000000000000000000800000000000000000000000000000000081140000000000000000000000000000ffffffff0000000044000000000000000300000000000000000000000000000000000000000000000206000000000000000000000000000006000000000000000200000000000000990a000000000000000000000000000000000000100000008009000000000000000000000000000002000000000000000100000000000000050000000000000000000000000000000000000000000000800000000000000000000000000000005cbc6ff67e118002dcc9e8f52a29f3351f37c91a72d6db582f"]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x4bc, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000000)="064bd118c73472d271adcf9595bbb4ac34bf4dfea387e7047b558135d81715c68d306a0fd14fac94086eafdba35ac640b728b9006d20bb9d7be43664d61e88e3d1aea99ee80d2864ea28ec92a7134829507d36717bd4269d83e89c3f3381220a2f45c7f72f74919a5ae81d39b234f41821bffbe628961a321f60b9bfd908ef38401a1bb9014082877e413c05b7d93f064be7659ad3d999fa46bff3c6613a273f52394bcebb68f13b0ecf70bc", 0xac}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 7m25.820983092s ago: executing program 4 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x20}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd41, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 7m25.462418267s ago: executing program 4 (id=40): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080)) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x4}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0xc0c1) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0xfffffffe, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x400, 0x8810}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_VALIDATION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2, 0x18, 0x0, 0x0, 0x32, 0x0, 0x0, 0x3b2a, [@sadb_ident={0x2, 0x0, 0x69, 0x0, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x36, 0x0, 0x0, 0x70bd2b, 0x3504}, @sadb_sa={0x2, 0x1, 0x4d5, 0x1, 0x0, 0x8f, 0x2, 0x80000000}, @sadb_x_sec_ctx={0x1d, 0x18, 0x3, 0x2, 0xde, "4f62026ceaf0da845ed91341fab0aee7e224aaf43a7a83af2dd2792928e2c6edbc73fb68393ccfea94f6d24afa16bfc04aa537bc80424ca41ec6295cae29c390fb1b933416cf87c44c097ed222850a280be8b44ac5b1dd5c78a5e0374cdb0f708f396e50779a778e62799c117c1da678b8548d2b20373381c131c2e669ca427bad4925400e767f3e73dce3d2ddeb4682130e7942d20dcff2ddec5ca3c52e18e9465292e735da0ceb1d46efbefbdbe7b12efb43c9eab4e4e47653de794c9338e70f81f6f1fdbea3bcbfa322e054057733c8814efa39c7b5887e8c172e4dc7"}, @sadb_sa={0x2, 0x1, 0x4d4, 0x7, 0x46, 0x8d, 0x4, 0x40000000}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bbb, 0x0, {0x6, 0x3c, 0xf, 0x2, 0x0, 0x5, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x43}, @in6=@empty}}, @sadb_address={0x3, 0x7, 0x6c, 0x80, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x190}}, 0x0) 7m23.676900206s ago: executing program 4 (id=46): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000340)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xe467}}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@errors_continue}, {@shortname_mixed}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_mixed}]}, 0x1, 0x373, &(0x7f00000006c0)="$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") r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) iopl(0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m23.19113028s ago: executing program 4 (id=50): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'syztnl0\x00', r2, 0x7, 0x8000, 0x3, 0x5, {{0x15, 0x4, 0x2, 0x1, 0x54, 0x65, 0x0, 0x4a, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x1c, 0x71, 0x1, 0xf, [{@multicast1, 0x6}, {@broadcast, 0x8000ff}, {@broadcast, 0x2}]}, @generic={0x7, 0x11, "0172418e5c2fc4ad60d6f8bb6425c9"}, @end, @rr={0x7, 0x7, 0x8b, [@remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 7m22.941261203s ago: executing program 4 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) 7m22.940564203s ago: executing program 32 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) 2m3.996504516s ago: executing program 3 (id=2027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32], 0x24}}, 0x4000) 2m3.62645055s ago: executing program 3 (id=2029): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x2, 0x0, 0x0, 0x0, 0x3, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x1}, 0x108001, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8042, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x8200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5411, &(0x7f0000000080)) 2m3.051746156s ago: executing program 3 (id=2037): r0 = io_uring_setup(0x6d3e, &(0x7f0000000280)={0x0, 0x8058b2, 0x0, 0x1, 0x180}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x7c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x10000}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x54) 2m2.877099508s ago: executing program 3 (id=2040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x2a0c1, 0x1f3) r2 = open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x1100) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0x7f) getresuid(0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x8, 0x1, {{0x8, 0x4, 0x1, 0x2, 0x20, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end, @noop]}}}}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@test_dummy_encryption}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x44}}, {@nouid32}, {@grpjquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@nomblk_io_submit}, {@mb_optimize_scan}], [{@fowner_gt={'fowner>', r3}}, {@subj_type={'subj_type', 0x3d, 'GPL\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'init_itable'}}, {@measure}, {@uid_gt={'uid>', r4}}]}, 0x0, 0x488, &(0x7f0000000b00)="$eJzs3MtvVNUfAPDvvaUFfjzaH+IDRK0Sk8ZHSwsqCzcaTVxgNNEFLms7kIaBGloTIUSKMbgxMSS6Ni5N/AvcGROjrkzc6t6QEGUDuqq5d+5tp0OnUDqdGZzPJxl6ztwzc853zn2ce84MAfSs4eyfJGJnRPwWEYO17MoCw7U/N69fmPr7+oWpJBYX3/ozycvduH5hqixavm5HkRlJI9KPk6KSlebOnT81Wa1Wzhb5sfnT743NnTv/7MzpyZOVk5UzE0ePHjk8/sLzE8+1JM4srhv7P5w9sO+1d668PnX8yrs/fZO1d2exvT6OVhnOAv9rMde47clWV9Zhu+rSyZYONoR16YuIrLv68+N/MPpiufMG49WPOto4YFNl16atzTcvLAL/YUl0ugVAZ5QX+uz+t3y0aejRFa69VLsByuK+WTzKu6K0KNPfcH/bSsMRcXzhny+zR2zSPAQAQL1Pp744Fs+sNv5L44G6cruLNZShiPh/ROyJiPsiYm9E3B+Rl30wIh5aZ/2NS0O3jn/Sq3cV2B3Kxn8vFmtby+O/vN6yyFBfkduVx9+fnJipVg4Vn8lI9G/N8uNr1PHdK79+1mxb/fgve2T1l2PBoh1XtzRM0E1Pzk/mg9IWuHYpYv+WWHq75fiTpZWAJCL2RcT+9b317jIx89TXB5oVun38a2jBOtPiV1l4C1ncC7Gi/5dXQZO11yfHtkW1cmis3Ctu9fMvl99sVv+G4m+Ba5Xa37r9v7HIUFK/Xju3/jou//5J03uaO93/6w+B6cn5dCB5O++XgeK5Dybn58+ORwwkx/L8iucnll9b5svy2f4/cnD1439P8ZqsnocjItuJH4mIRyPisaLtj0fEExFxcI34f3y5+bYy/kg71P+XIqZXPf8t7f8N/b/+RN+pH75tVv+d9f+RPDVSPJOf/25jteZkp4vGBm7kswMAAIB7RZp/Bz5JR5fSaTo6WvsO/974X1qdnZt/+sTs+2ema9+VH4r+tJzpGizmQ6sz1cp4slC8Y21+dKKYKy7nSw8X88af923P86NTs9XpDscOvW5Hk+M/80dfp1sHbLLtqz47MdD2hgAd0LiOnq7MXnyjnY0B2srvtaF3NT/+83uDtJ1tAdrL9R9612rH/8W69Br/QQhwj3P9h97l+IcelX7f6RYAHeT6Dz1pI7/r38TEtnbVlX0G3RHycqJbOyVPRJSJtCvac7eJck67W9rTdYnOnpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa5d8AAAD//+ef4KE=") getuid() mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r5, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 2m1.822338829s ago: executing program 3 (id=2044): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 2m1.120707587s ago: executing program 3 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000']) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRES16, @ANYRES64=r0], 0x15) (async) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={r7, 0x91}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r7}, 0xc) 1m45.844276011s ago: executing program 33 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000']) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRES16, @ANYRES64=r0], 0x15) (async) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={r7, 0x91}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r7}, 0xc) 1m35.7255576s ago: executing program 6 (id=2224): syz_emit_ethernet(0x9a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x64, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x7, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "fee9fffffff5000000000000"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) 1m35.71246047s ago: executing program 6 (id=2225): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0800000000000000060000000000000000000000080000000800000000000000030000000000000004000000000000000900000000000000000000000000000000000000000000000400000000000000000000000000000001800000000000000c00000000000000050000000000000000000000000000000000000000000000000400000000000000000000000000000d00000000000000b96e0000000000000400000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000500000000000000060000000000000000000000000000000002000000000000020000000000000000000000000000000300000000000000008000000000000000000000000000800000000000000000000000000000000081140000000000000000000000000000ffffffff0000000044000000000000000300000000000000000000000000000000000000000000000206000000000000000000000000000006000000000000000200000000000000990a000000000000000000000000000000000000100000008009000000000000000000000000000002000000000000000100000000000000050000000000000000000000000000000000000000000000800000000000000000000000000000005cbc6ff67e118002dcc9e8f52a29f3351f37"]) pipe2$9p(&(0x7f0000000100), 0x80) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x4bc, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000000)="064bd118c73472d271adcf9595bbb4ac34bf4dfea387e7047b558135d81715c68d306a0fd14fac94086eafdba35ac640b728b9006d20bb9d7be43664d61e88e3d1aea99ee80d2864ea28ec92a7134829507d36717bd4269d83e89c3f3381220a2f45c7f72f74919a5ae81d39b234f41821bffbe628961a321f60b9bfd908ef38401a1bb9014082877e413c05b7d93f064be7659ad3d999fa46bff3c6613a273f52394bcebb68f13b0ecf70bc", 0xac}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r4 = gettid() sendmsg$nl_route_sched_retired(r1, &(0x7f0000000c80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f00000007c0)=@newtclass={0x47c, 0x28, 0x502, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8331c785386a9cbf}, {0xf, 0x1}, {0xfff1, 0xd}}, [@c_cbq={{0x8}, {0x450, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xc, 0x5, 0xc, 0xf7, 0x401, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xdbe7, 0x3, 0xef94, 0xffffffff, 0x80000001, 0x2, 0x9, 0xffff, 0x8f6d, 0x3ff, 0x8001, 0x7fffffff, 0xff, 0x81, 0x1000, 0xb5, 0x483f, 0x9, 0xfffff902, 0xdc, 0xf3, 0x0, 0x6e469a27, 0x1, 0x7, 0x0, 0x4, 0x6, 0x8000, 0x9, 0xb590, 0x80000000, 0x2, 0x5, 0x7, 0x38000000, 0xfffffeff, 0xfffffff7, 0x6, 0x6, 0x400, 0x800, 0x10001, 0x3, 0x9, 0x7, 0x4, 0x8, 0x0, 0x0, 0xb, 0xac, 0x3ff, 0x1e920000, 0x3, 0x5, 0x10, 0x2, 0x8, 0x7fffffff, 0x3, 0x40, 0x5, 0x5, 0x7, 0x4, 0x7, 0x1, 0x5, 0x7, 0x0, 0x9, 0x8, 0x698, 0xafd, 0x3, 0x1000, 0x5, 0x200, 0x81, 0x7fffffff, 0x1000, 0x5b1e, 0xb5, 0x30d7, 0x2, 0x7, 0x80, 0xfffffffb, 0x42, 0x638, 0x4, 0x200, 0x4, 0x1, 0x7ff, 0x80000000, 0x80, 0x5, 0xfff, 0x8, 0x1000, 0x8a, 0x3c3f7354, 0x7, 0x6, 0x3, 0x7, 0x0, 0x7, 0xfbd, 0xfe42, 0x80000000, 0x1, 0x400, 0x8, 0xc0, 0x8, 0x6, 0x200, 0x3, 0x401, 0x7, 0x1, 0x1d8, 0x6, 0x3, 0xb4, 0x104, 0xc59, 0x0, 0x6, 0x8, 0x200, 0x2, 0x4, 0x4, 0x50, 0x7f, 0x6, 0x1, 0x2, 0x72, 0xd32, 0x99, 0x8f7, 0x3, 0x4, 0x100, 0x9, 0x1b926462, 0x81, 0x3, 0x60, 0x1, 0x6, 0x4, 0x1, 0x8, 0x7, 0x0, 0x1, 0x0, 0x80000001, 0x2, 0x29f0, 0x1, 0x6, 0xfffffffb, 0x1, 0xc3, 0x8, 0x4, 0xd, 0x400, 0x10005, 0x80, 0x81, 0xbb7, 0x7fffffff, 0x3e, 0x4, 0x9, 0xbeb, 0x2, 0x4, 0x5, 0xde6, 0x7fffffff, 0xfffffff6, 0x1, 0x3, 0xc9, 0x909c, 0x2, 0x621ba44f, 0x0, 0x7, 0x6, 0x0, 0x0, 0x7, 0x0, 0x9, 0x10001, 0x2, 0x0, 0x8, 0x101, 0xe, 0x871, 0x4, 0x3, 0xb13, 0x8, 0x7, 0x2, 0x2, 0x7, 0xa5d, 0x7, 0x0, 0x10001, 0x6, 0x6, 0xcd5, 0xfffffff7, 0x8, 0xb994, 0xa, 0xcdc, 0xa, 0x7f, 0x10, 0x81, 0x3, 0x4, 0x5, 0x1, 0x9, 0x2, 0x5f, 0x7, 0x8, 0x9, 0x7, 0x7, 0x166a, 0x3ff, 0xfffffffa, 0x8, 0x9, 0x52b, 0x8, 0x2, 0x401]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x1, 0xa, 0x1, 0x8, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x8, 0xc0, 0x6, 0xc, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x19, 0x2, 0xe, 0xfb, 0xac, 0x400, 0x94, 0x3ff8}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) tkill(r4, 0x4000024) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004e0c0}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000200)) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a000000003f00"], 0x3c}}, 0x0) 1m34.090789867s ago: executing program 6 (id=2234): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xffffff6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)=0x0) r3 = getuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="526eb0e8e5a6d40845f9274dc1a04ea38a5639c06493366c9fc060a5e12f546883f6adffb903c14ae0eb37764d58074cce68e38358544e7c0e86c48ed9ba66a1799e506d7f9b6f51c9be7dac207b6c4652d7e5ba4cff4309764ebbf93efe1d9b27f88b2469efcd2e6c1a40c349165002cfbcd7f1925867bd99a7655828a7ff1fff60", 0x82}, {&(0x7f0000000780)="88501bff8e324fb47c73390b6337", 0xe}, {&(0x7f00000007c0)="c209cf9c24b24026b0775dc315061ca5d7b7e6697d34a2163229f81795f036b015120b344700c33dc7c2", 0x2a}, {&(0x7f0000000800)="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", 0xfa}, {&(0x7f0000000900)="086d7685e9a4253704d9041ba5e9bb444eb4a4a49ded2921c95c56cd040dbf611fdbaa6e4eb8c683ab46225feb1757388c3572af2412c591e661f1adfda31dbcfb325e77360de5c1d59e86beed6075e5a4aaf2e0e24b19916a7ca999adf9a749b8e71a6498dd27731545462cac2b37da6de2ddb7a07233ebe55985ef60502fff876a68aa21a9ab8e036107d0248867812a333a37f28ce6ab607316958a17be40cb60dfc33aa5b602d1d4f1114e47a6b04e12eacf6430ca5a42c665b2bd22e38a54bf825c4fa71834fdb9a9d75a10a99ae1f6085bb870df96", 0xd8}, {&(0x7f0000000a00)="1878db13736745b0a39e5c46461d7a12e0a7c237dcb0f83d03a3eb4cfa12e6e3d6789e4158609e711d74f0de3406cd6ba47d964b3095e05e09dd5062bede69312cc3a509bba54110b32cee0829affbac0b497746cac55675", 0x58}, {&(0x7f0000000a80)="c1961fd0f962869b8eb5fba13b8e54fbc9", 0x11}], 0x7, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x88}}, {{&(0x7f0000000ec0)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000000f40)="473fa9dbd356f5adf46aba62bc6113293f98", 0x12}, {&(0x7f0000000f80)="0a11cecbeb4d1f96313aa7e92edfe78b8cfae50c59351f4f6f5fd7a9a9c30ac3cc15b2b5ff3037d36a1d2c4afebff2ac91b5de1d43a7b104138fbbc58050aa9d7947440b4f2e954a3821b79af1e15a5956dfd281d1208074be2d3b5593fb456ebb8165275bf245a8368eed6b3954876628bf76babcfbc8348e6d37529ddce342b3e924618979ff0cbadae7d45381e5af1701403458bdce5dd0ca36b7e77139c28a1bd9c5b5351b3738f579", 0xab}, {&(0x7f0000001340)="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", 0x1000}], 0x3, &(0x7f0000002380)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r0]}}], 0x80, 0x80}}], 0x2, 0x88c1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b40)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000003d00)=ANY=[@ANYBLOB="1400000000000000290000000b00006bb69107000000ac4a7300000000ff000000001400000022000000290000000b00000000000000000000001800040000000000290000003900"], 0x48}}], 0x1, 0x20008840) set_mempolicy(0x8006, 0x0, 0x5) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0xd, 0x3c4e, 0x4f9c, 0x8, 0x8, 0x200}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="08000600a7"], 0x24}}, 0x4000) perf_event_open(&(0x7f0000000000)={0x5, 0xfffffffffffffe85, 0x0, 0x0, 0x40, 0xe, 0x0, 0x4, 0x2133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x300000, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x901, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r11 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x100000009, r0, 'id1\x00'}) 1m33.240072306s ago: executing program 6 (id=2241): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0xffffffffffffff4d}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000340)=0x8) sendto$inet6(r3, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) recvfrom$l2tp6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f0c000000000000fcffff0da28f07a6ff712ff8"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0xa01f, 0x100000110) memfd_create(0x0, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @private}, &(0x7f00000003c0)=0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x6, '\x00', r5, r1, 0x3}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x4, 0x4, 0x80000000}, {0x80, 0x3, 0x4}, {0x0, 0xff}, {0x4, 0x9, 0x2, 0x87ea}, {0x1, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) flock(0xffffffffffffffff, 0x1) preadv2(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/56, 0x38}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000740)=""/153, 0x99}, {&(0x7f0000000800)=""/142, 0x8e}], 0x4, 0x4a27e7c4, 0x4, 0x3) r6 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {0xfff2, 0xffff}, {0xffe0, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x400, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x9}, {}, {0x5, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0xb}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ff50}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x240068c4) 1m33.147834868s ago: executing program 6 (id=2243): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000300)) io_uring_enter(r0, 0x401, 0x7720, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc01000000020000000200"/158], 0xe0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) socket$inet(0x2, 0x80001, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101000, 0x20) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f0000000200)) getrusage(0x1, &(0x7f0000000080)) 1m32.994696569s ago: executing program 6 (id=2247): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r7, &(0x7f0000001600)=[{&(0x7f0000000100)=""/201, 0xc9}], 0x1, 0x9, 0x8) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1m32.979726649s ago: executing program 34 (id=2247): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r7, &(0x7f0000001600)=[{&(0x7f0000000100)=""/201, 0xc9}], 0x1, 0x9, 0x8) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 5.197276664s ago: executing program 7 (id=2878): syz_clone(0x82828080, &(0x7f0000000400)="542dfa261b0b8ddd3269079a8a7ef67a502587730abb71e2921649febe70748148b5f789be3b7c8dcca9721f1239e4a762713093780420442f1ef32866f32fc2643f525f92bf9c5da5f4b15de836f132b3c843553f", 0x55, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000d80)="b538e04a40b26ba5f9b55a4a506a76c85ae17d349868812e880be0042367c5f09f42b41b5199a1758ee6755ff983be719a3b4f4b5851c04e7cd0bafcb324b7c7f69f5144fd760f249f73be8910451903ba382dabc85713becfbdbe805a57a8b2bf21b320521f195a464df59e64c1075876908d00a3dd50b76bd2f08a695223") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xff, 0x7be, &(0x7f00000005c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') pread64(r2, &(0x7f0000000140)=""/25, 0x19, 0x4) (fail_nth: 2) 4.820593588s ago: executing program 7 (id=2885): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xfffffedb) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x6, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x2, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file2\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$eJzs3W9v09YewPGfS6vm5koI3XuFUG+Bs8KkInXFSSAo4pHnnKQeiR3ZDmqfDFW0RRUBJNgk6BPUB2P/tdewp3sR017F3gXaO1gnHzuQtvnT9V8q9v1EYMc+Pud3HMu/uo2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOVWbbtgScPz28tqMLcaBs0h67v13dg1GdKuiJX8k1xOLqWLLv3v/eqLyX9zMpu+m5VcMsnJ1r8vXrj738mJ7vZDAjoVL15tPV7tdNafjzuQManrexIFXtOpa+VFgaqUy/bNpVqkal5DRytRrJvKDbUTB6Gad2+oQqVSUnpxJWj79arT0N2Fdz4p2nZZfZVPP2//5meLkbvkNRqeXzdlktVJmTvJgXjPi1WsnaZSG5ud9dKg4LazwyMpVBjVk6RQcVShol0sFgrFYqF8u3L7jm1P7ltg7yH7Soz/oMV4HefpGziSiSz/S0M88aUty6L6vlypSiiBNAesz3Tz/8c39dB2e/N/N8tfer96Rkz+v5K+uzIo/w+I5W+/ppPqs/k/d3Z2DrDN+f+nsb2SLXksq9KRjqzL8+OK6BhfXSdRd120+OJJJIF40hTHLFHZEiUVKUtZbHkgS1KTSJTUxJOGaIlkRSKJRZsjypVQtDjyvQQSipJ5ceWGKClIRSpSEiVaFmVFAmmLL3WpimNq2ZBNs99Lw/rfLVQ4SKHikELkfxzdcZ26gSPb6eZ/AAAAAADwwbLMb9+T6/8puWzmctLQ9rjDAgAAAAAAx8j85X82mUwlc5fFqnlc/wMAAAAA8GGxzD12lojk5Wo6170Til8CAAAAAADwgTB//7+STMzYa1fFOtD1/9SpBQgAAAAAAI7sm0Fj7P9mllqWRK1p69c/JAynrO3W8nXriZOscJ6cS7c7t7fGuDZjnc8qMZPyZPbO1bNWNvrlu0Ew32aTjZ44rH5j/Vp7Avi8W0OfAH6S/gHID/JR2q1u2bXumrSVf2WLG3cL4jjnJ2K9HH/5dPOlmO5/6zcnswIPn3XWTCzbybvtJ1mF+8ZRHLwz5Asz3oK556Lv6MZT5kaMrN28JRubnXW79wOYSDefGNqmXEgXpm2+kbn07Vw20n5+d/9zSZuFxUG9r5sopkXE9Nw6ZM/fyLW0zLX5a+mkTxTFvlFMJTGn+6LYWr6+k+7/CTnQvjhEFKWB+yKLotR7FBwiCgAYl43BWei7nXTN3sR/iLPcxqgn+ezN7of58ULeyHxaZn7GnFgnZ/qc0e1RZ3T7iHn9l33PQBqUY5N2f3zXbsG0+3MStwxsN2oULclJ7uXv75etPlp/tP60WCyV7Vu2fbsoU6Yb2YTcAwDoY/QzdkaWsG6Zq+pk5Vpacs9V9X/efaVgUR7KM+nImiyYuw3MNw761prv+RrCwoir1nzPE14WRlzV5Xse9HLwsqXT+TAAADglcyPy8EHy/8KI6+7duXz41XFvLgcAACdDh2+tfPy1FYZe60GhUik48ZJWYeDeU6FXrWvl+bEO3SXHr2vVCoM4cINGMnPfq+pIRe1WKwhjVQtC1Qoib9k8+V1lj36PdNPxY8+NWg3tRFq5gR87bqyqXuSqVvvThhct6dBsHLW069U814m9wFdR0A5dvahUpHVPQa+q/direcmsr1qh13TCFXU/aLSbWlV15IZeKw7SCrtteX4tCJum2sVx72wAAM6IF6+2Hq92OuvPT3Bm3H0EAAC7kaUBAAAAAAAAAAAAAAAAAAAAADj7hty359SO90bAaTmFew2PKdSzEcY/dea1iGRLdl5L72HTHXT6xFo/N+6+n5mZMZ+YAJy4vwIAAP//NVpGnw==") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x5, 0x8}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'S'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1002, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}]}, 0x60}, 0x1, 0x7}, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) 3.936880487s ago: executing program 2 (id=2892): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x9, @private1, 0x7177}]}, &(0x7f00000004c0)=0x10) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x417a, 0xb322ec9cfab5e303, 0x2, 0x1fe}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x43, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x10}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x26e8, @empty, 0x400000}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="a7", 0x1, 0x2400c040, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0xfffffe01) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x568, 0xe0, 0xe0, 0x280, 0xe0, 0x280, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xfffc, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xb, 0x6, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x498}}, {{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x6, 0x2, 0xa22db0f404b6e738}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}], ['\x00']}) sendto$inet6(r4, &(0x7f0000000c80)="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", 0x303, 0xbcff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001e40)={r3, 0x80, 0x2}, 0x0) 3.843511268s ago: executing program 7 (id=2895): prctl$PR_SET_MM_EXE_FILE(0x13, 0xd, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0xdb, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000641100fc010000000000000000000000000000ff020000000000000000000000000001dffebd72794a5fec1514fffc0ef9ca80c9e2e4a9b38ff355bb2200649078020000000000000000000000676e19d8ff667305eb6922a1cc7960acf1e7de0bc37bc4a0c887b6128c7a238b2a4968a145b9bd2042d08b1e6d1bf376fc15f6d380fdbdae8ffc726884b12a6d860361d3cc0637b3"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="000004bbbba6bb81003800000c00000040050400009ebc4ceca189c72d"], &(0x7f0000000400)={0x1, 0x3, [0xcbc, 0x429, 0x6b8, 0xcdd]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r8 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) 3.794273079s ago: executing program 5 (id=2897): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b9fd1bf1b9e7835e5bc3c3d9ab54cc2d16ef0d42a7fb75eb3f1a9dd19067bdf499e02fd4457541d3311e", @ANYBLOB="fb7fa670bdee", @ANYBLOB="0096d7bee69605fbbd656c7b6f1d42351e3c7d1ce6d6d95720566ec6565f64e99afdacb99666f2851764cc7d7cf72e975ff5bd40b7b97cd4709b78223a69764ad2242a3351a3095f5661d303b8038e92317c75b9ff537674f2c3d457f5fd0aac50398c45eea3a6ce78397f46ae3274b8d9f61c1e0a6adff0ac5ddfe1d93e759ec783a182cb43f642583023a2b47a23c049bfacd1bae4bb02d405476ebed12c58a058afe270779ffe991a17d407b1021d29c6c0c4af7248fa79563558f30070f33626f2ecc28747b0839f6fe13fef7e1fdff15da09c52f1ff330c6525811ab6aa5fd160eb13e3e0d5", @ANYBLOB="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", @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES64, @ANYRES16, @ANYBLOB="e308bcef0cf706767687d83f1bf4cbfe71a6e02e6e756303dc1ed91a0e4795097a8d3560e966334d80f2c4c776e0d50c75146f24c8c94536ff2cd2a2c452a255296fbbf00cdbdc8d63afb212"], &(0x7f00000001c0)='syzkaller\x00', 0x5536, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000c3b587191f1278100410088caa5f3e9f449b54d5e69b3c6b9b2697724"], &(0x7f0000000480)={0x0, 0x3, [0x7ee, 0xda, 0x365, 0x261]}) poll(&(0x7f0000000100)=[{r2, 0x84}], 0x1, 0x3ff) syz_emit_ethernet(0xae, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "fee9fffffff5000000000000"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x6a040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendto$inet(r2, &(0x7f0000000140)='^', 0x1, 0x2080, &(0x7f0000004ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r2, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) accept4(r2, 0x0, 0x0, 0x0) 3.299166425s ago: executing program 1 (id=2901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) signalfd4(r4, &(0x7f00000004c0)={[0x83]}, 0x8, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x8, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x20044045) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), 0x0, 0x42, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x3, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000008ba0d001040000102030109026e0003010ca000080b0202010130060904000000010130000a24010c0a004d8c00000904010000010230000904010101010230000905010900020706020a2525770000000204000904020000010230000904020101010230000905820920020701080a25250000000008010060f11201164940e2fd427a8761d611776236dd8f"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40045506, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4000040) socket(0x11, 0xa, 0x0) 3.031085277s ago: executing program 2 (id=2904): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x2a0c1, 0x1f3) r2 = open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x1100) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000280)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x8, 0x1, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @rand_addr=0x64010102}}}}) getuid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2201081, &(0x7f0000000300)={[], [{@euid_gt}, {@uid_lt}]}, 0x2, 0x56a, &(0x7f00000015c0)="$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") r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 2.735128951s ago: executing program 2 (id=2906): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xfffffedb) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x6, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x2, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file2\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x5, 0x8}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'S'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1002, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}]}, 0x60}, 0x1, 0x7}, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) 2.390248504s ago: executing program 1 (id=2907): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r2}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x48, r4, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x83}, &(0x7f0000000100)=0x8) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18040000feffffff00000000000000001801000020696c250000000000202020db1af8ff41000000bda100000000000007010000f80000ffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0x493b, 0x5}}], 0x18, 0x4008000}, 0x28008841) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) futex(0x0, 0x5, 0x82, 0x0, 0x0, 0x5000002) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x44, 0x0, &(0x7f00000007c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5810011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803c474", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) statfs(0x0, 0x0) 2.333637104s ago: executing program 1 (id=2908): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x4c000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000004000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000600)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\xa1h\xf52\xe4\xc7\xcc!\xe5\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xc5.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96p~\xde\xe0\xc9e\xa2\x96\xa8SW\xfb-3\xafM\xd7\x98\xbdN\x1d\xdc\xf98\xda\xe6\x04\xa0\xac\x1a\xa8\xa1\x12Q\xc0\xbb\xbe\xf1\xdd') sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 2.317966365s ago: executing program 5 (id=2909): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000040), 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x7f, r1}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) io_setup(0x400, 0x0) io_destroy(0x0) 2.304086925s ago: executing program 1 (id=2910): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000040), 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x7f, r1}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) io_setup(0x400, 0x0) io_destroy(0x0) 2.121639137s ago: executing program 0 (id=2911): socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x1c000) shutdown(r0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) 2.086787498s ago: executing program 5 (id=2912): socket$netlink(0x10, 0x3, 0x0) socket(0x23, 0x80805, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003f9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x10c89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0xfff0}, {0x0, 0xffff}}}, 0x24}}, 0x20000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") 2.085253107s ago: executing program 0 (id=2913): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000000000000000000000004c00088048000080200004000a004e2300000002fe880000000000000000000000000001d70d000023e20100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = mq_open(0x0, 0x80, 0x30, 0x0) mq_getsetattr(r4, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x16000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x922, 0x12) sendmsg$kcm(r6, 0x0, 0x4000010) syz_clone(0x0, &(0x7f0000001340)="ea9f9fef7008be9caa4230658e0f0cccad32ec921e770d152cc2110df2169e3f25afb722e56fc5ec6da59d8a746aab9d94111fc0922b33d6e4618df4ad9f45e1e4c5a419429893f709f3bc337b874c1bcc63053bc96584e0f5d7ced9c410a50fa8648b5f96a943684c3ef11f33f0006b9cb80473a9e006c174b8963c5ba53d748df42a95a704fe", 0x87, 0x0, 0x0, 0x0) r8 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r8, 0x4008240b, &(0x7f00000013c0)) socket$netlink(0x10, 0x3, 0x10) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}, @cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0xa0, 0x8004}, 0x0) 2.041933727s ago: executing program 1 (id=2914): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x9, @private1, 0x7177}]}, &(0x7f00000004c0)=0x10) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x417a, 0xb322ec9cfab5e303, 0x2, 0x1fe}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x43, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x10}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x26e8, @empty, 0x400000}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="a7", 0x1, 0x2400c040, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0xfffffe01) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x568, 0xe0, 0xe0, 0x280, 0xe0, 0x280, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xfffc, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xb, 0x6, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x498}}, {{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x6, 0x2, 0xa22db0f404b6e738}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}], ['\x00']}) sendto$inet6(r4, &(0x7f0000000c80)="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", 0x303, 0xbcff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001e40)={r3, 0x80, 0x2}, 0x0) 1.939205399s ago: executing program 0 (id=2915): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xffffff6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)=0x0) r3 = getuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="526eb0e8e5a6d40845f9274dc1a04ea38a5639c06493366c9fc060a5e12f546883f6adffb903c14ae0eb37764d58074cce68e38358544e7c0e86c48ed9ba66a1799e506d7f9b6f51c9be7dac207b6c4652d7e5ba4cff4309764ebbf93efe1d9b27f88b2469efcd2e6c1a40c349165002cfbcd7f1925867bd99a7655828a7ff1fff60", 0x82}, {&(0x7f0000000780)="88501bff8e324fb47c73390b6337", 0xe}, {&(0x7f00000007c0)="c209cf9c24b24026b0775dc315061ca5d7b7e6697d34a2163229f81795f036b015120b344700c33dc7c2", 0x2a}, {&(0x7f0000000800)="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", 0xfa}, {&(0x7f0000000900)="086d7685e9a4253704d9041ba5e9bb444eb4a4a49ded2921c95c56cd040dbf611fdbaa6e4eb8c683ab46225feb1757388c3572af2412c591e661f1adfda31dbcfb325e77360de5c1d59e86beed6075e5a4aaf2e0e24b19916a7ca999adf9a749b8e71a6498dd27731545462cac2b37da6de2ddb7a07233ebe55985ef60502fff876a68aa21a9ab8e036107d0248867812a333a37f28ce6ab607316958a17be40cb60dfc33aa5b602d1d4f1114e47a6b04e12eacf6430ca5a42c665b2bd22e38a54bf825c4fa71834fdb9a9d75a10a99ae1f6085bb870df96", 0xd8}, {&(0x7f0000000a00)="1878db13736745b0a39e5c46461d7a12e0a7c237dcb0f83d03a3eb4cfa12e6e3d6789e4158609e711d74f0de3406cd6ba47d964b3095e05e09dd5062bede69312cc3a509bba54110b32cee0829affbac0b497746cac55675", 0x58}, {&(0x7f0000000a80)="c1961fd0f962869b8eb5fba13b8e54fbc9", 0x11}], 0x7, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x88}}, {{&(0x7f0000000ec0)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000000f40)="473fa9dbd356f5adf46aba62bc6113293f98", 0x12}, {&(0x7f0000000f80)="0a11cecbeb4d1f96313aa7e92edfe78b8cfae50c59351f4f6f5fd7a9a9c30ac3cc15b2b5ff3037d36a1d2c4afebff2ac91b5de1d43a7b104138fbbc58050aa9d7947440b4f2e954a3821b79af1e15a5956dfd281d1208074be2d3b5593fb456ebb8165275bf245a8368eed6b3954876628bf76babcfbc8348e6d37529ddce342b3", 0x81}, {0x0}], 0x3, &(0x7f0000002380)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r0]}}], 0x80, 0x80}}], 0x2, 0x88c1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b40)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000003d00)=ANY=[@ANYBLOB="1400000000000000290000000b00006bb69107000000ac4a7300000000ff000000001400000022000000290000000b00000000000000000000001800040000000000290000003900"], 0x48}}], 0x1, 0x20008840) set_mempolicy(0x8006, 0x0, 0x5) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0xd, 0x3c4e, 0x4f9c, 0x8, 0x8, 0x200}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="08000600a7"], 0x24}}, 0x4000) perf_event_open(&(0x7f0000000000)={0x5, 0xfffffffffffffe85, 0x0, 0x0, 0x40, 0xe, 0x0, 0x4, 0x2133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x300000, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x901, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r11 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x100000009, r0, 'id1\x00'}) 1.717170001s ago: executing program 5 (id=2916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x2a0c1, 0x1f3) r2 = open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x1100) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000280)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x8, 0x1, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @rand_addr=0x64010102}}}}) getuid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2201081, &(0x7f0000000300)={[], [{@euid_gt}, {@uid_lt}]}, 0x2, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.715961902s ago: executing program 0 (id=2917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) signalfd4(r4, &(0x7f00000004c0)={[0x83]}, 0x8, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x8, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x20044045) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), 0x0, 0x42, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x3, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000008ba0d001040000102030109026e0003010ca000080b0202010130060904000000010130000a24010c0a004d8c00000904010000010230000904010101010230000905010900020706020a2525770000000204000904020000010230000904020101010230000905820920020701080a25250000000008010060f11201164940e2fd427a8761d611776236dd8f"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40045506, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4000040) socket(0x11, 0xa, 0x0) 1.485273234s ago: executing program 2 (id=2918): socket$unix(0x1, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b40)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000003d00)=ANY=[@ANYBLOB="1400000000000000290000000b00006bb69107000000ac4a7300000000ff000000001400000022000000290000000b00000000000000000000001800040000000000290000003900"], 0x48}}], 0x1, 0x20008840) set_mempolicy(0x8006, 0x0, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0xd, 0x3c4e, 0x4f9c, 0x8, 0x8, 0x200}) perf_event_open(&(0x7f0000000000)={0x5, 0xfffffffffffffe85, 0x0, 0x0, 0x40, 0xe, 0x0, 0x4, 0x2133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x300000, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x901, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x4000, 0x0, 0x0) 1.484528194s ago: executing program 7 (id=2919): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r2}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x48, r4, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x83}, &(0x7f0000000100)=0x8) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18040000feffffff00000000000000001801000020696c250000000000202020db1af8ff41000000bda100000000000007010000f80000ffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0x493b, 0x5}}], 0x18, 0x4008000}, 0x28008841) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) futex(0x0, 0x5, 0x82, 0x0, 0x0, 0x5000002) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x44, 0x0, &(0x7f00000007c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5810011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803c474", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) statfs(0x0, 0x0) 1.379485815s ago: executing program 5 (id=2920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10c, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000001440)=ANY=[@ANYBLOB='nodots,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nodots,nfs=stale_rw,nocase,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',,nodots,\x00'/23], 0x1, 0x25f, &(0x7f0000000140)="$eJzs3cFqE0EYB/AvTZqsBbVn8bDgxZOobxCkghAQqrkbaL20Imwv0VMeQ/ANfByPPkZPvUXaXVy7LSIl6WS7vx+E/dj/DjuTQCaHmeyHx5+ODj6ffFz++hZZlscgYhFnEbuxFf0o9arj1kU9jGHUFgEAtM3+/mycug+sUO/qqaIYz7YjYnQlm/64pV4BAAAAAAAAAACwYjdZ//836/8BoH2s/7/7imI826l+v11m/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQztly+XD5j1fq/gEAq2f+B4DuMf8DQPeY/wGge949qIo8zyJOF/PpfFoey9Ov30z2nucXdutWp/P5dLuqJ3svyjxv5jtV+5fX5sN4+qTMz7NXbyeNfBQH6xw4AAAAAAAAAAAAAAAAAAAAbJBn+R+N/f39Mj+/YBTX5FnE90v/D9DYvz+IR4PbHAkAAAAAAAAAAAAAAAAAAAC018mXr0ez4+PDorPFz35EsrtHr/wYUr8JjeJe3KBVtmmjaFHRj4jDUQxivfd6f///L079zQQAAAAAAAAAAAAAAAAAAN1Tb/pN3RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASKd+/v/6itRjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhdwAAAP//UhGHcQ==") syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) statfs(&(0x7f0000000040)='./file2\x00', 0x0) 1.344256855s ago: executing program 7 (id=2921): syz_open_procfs(0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff0000"], 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc00", 0x23) r6 = socket$kcm(0x2, 0x3, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4c000) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000004000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000600)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\xa1h\xf52\xe4\xc7\xcc!\xe5\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xc5.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96p~\xde\xe0\xc9e\xa2\x96\xa8SW\xfb-3\xafM\xd7\x98\xbdN\x1d\xdc\xf98\xda\xe6\x04\xa0\xac\x1a\xa8\xa1\x12Q\xc0\xbb\xbe\xf1\xdd') sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0x34}], 0x1}, 0x0) 1.261223086s ago: executing program 2 (id=2922): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000040), 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x7f, r1}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) io_setup(0x400, 0x0) io_destroy(0x0) 1.086817388s ago: executing program 1 (id=2923): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x301880, 0x20d) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)='keyring\x00', r5) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$read(0xb, r5, &(0x7f00000001c0)=""/4, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D', @ANYRES16=0x0, @ANYBLOB="1f0028bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180002000000000000007a5f74756e000000000000000000"], 0x44}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) 472.663195ms ago: executing program 2 (id=2924): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000004c9210000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="040000246579ffec21e77377503ee46a1eeb5300", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) close(r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x43, 0x7b1, &(0x7f0000000c80)="$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") r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x6, 0x6, 0x101, 0xc, 0x401}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000006c0)={r6, 0x6}, &(0x7f0000000700)=0x8) futex(&(0x7f00000002c0)=0x33b, 0x8, 0x2, 0x0, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x9, 0x9, 0x1, 0x3}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x30, 0x0, 0x5, 0x1, 0x0, [{0x1, 0x5}]}]}}, &(0x7f0000001f40)=""/4092, 0x3e, 0xffc, 0x1}, 0x28) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x800, 0x0, 0xff, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x2, 0xff, 0x9, 0x8, 0x100}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$netlink(0x10, 0x3, 0x0) 462.550535ms ago: executing program 0 (id=2925): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000000000000000000000004c00088048000080200004000a004e2300000002fe880000000000000000000000000001d70d000023e20100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = mq_open(0x0, 0x80, 0x30, 0x0) mq_getsetattr(r4, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x16000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x922, 0x12) sendmsg$kcm(r6, 0x0, 0x4000010) syz_clone(0x0, &(0x7f0000001340)="ea9f9fef7008be9caa4230658e0f0cccad32ec921e770d152cc2110df2169e3f25afb722e56fc5ec6da59d8a746aab9d94111fc0922b33d6e4618df4ad9f45e1e4c5a419429893f709f3bc337b874c1bcc63053bc96584e0f5d7ced9c410a50fa8648b5f96a943684c3ef11f33f0006b9cb80473a9e006c174b8963c5ba53d748df42a95a704fe", 0x87, 0x0, 0x0, 0x0) r8 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r8, 0x4008240b, &(0x7f00000013c0)) socket$netlink(0x10, 0x3, 0x10) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}, @cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0xa0, 0x8004}, 0x0) 48.409469ms ago: executing program 7 (id=2926): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x301880, 0x20d) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x1000000, &(0x7f0000000300)={[{@block={'block', 0x3d, 0x800}}, {@overriderock}, {@cruft}, {@map_off}, {@showassoc}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@unhide}]}, 0x1, 0x3ec, &(0x7f0000000440)="$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") prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) sendmsg$nl_route(r5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D', @ANYRES16=0x0, @ANYBLOB="1f0028bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180002000000000000007a5f74756e000000000000000000"], 0x44}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) 18.81261ms ago: executing program 0 (id=2927): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080)) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x4}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0xc0c1) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0xfffffffe, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x400, 0x8810}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_VALIDATION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2, 0x18, 0x0, 0x0, 0x32, 0x0, 0x0, 0x3b2a, [@sadb_ident={0x2, 0x0, 0x69, 0x0, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x36, 0x0, 0x0, 0x70bd2b, 0x3504}, @sadb_sa={0x2, 0x1, 0x4d5, 0x1, 0x0, 0x8f, 0x2, 0x80000000}, @sadb_x_sec_ctx={0x1d, 0x18, 0x3, 0x2, 0xde, "4f62026ceaf0da845ed91341fab0aee7e224aaf43a7a83af2dd2792928e2c6edbc73fb68393ccfea94f6d24afa16bfc04aa537bc80424ca41ec6295cae29c390fb1b933416cf87c44c097ed222850a280be8b44ac5b1dd5c78a5e0374cdb0f708f396e50779a778e62799c117c1da678b8548d2b20373381c131c2e669ca427bad4925400e767f3e73dce3d2ddeb4682130e7942d20dcff2ddec5ca3c52e18e9465292e735da0ceb1d46efbefbdbe7b12efb43c9eab4e4e47653de794c9338e70f81f6f1fdbea3bcbfa322e054057733c8814efa39c7b5887e8c172e4dc7"}, @sadb_sa={0x2, 0x1, 0x4d4, 0x7, 0x46, 0x8d, 0x4, 0x40000000}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bbb, 0x0, {0x6, 0x3c, 0xf, 0x2, 0x0, 0x5, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x43}, @in6=@empty}}, @sadb_address={0x3, 0x7, 0x6c, 0x80, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x190}}, 0x0) 0s ago: executing program 5 (id=2928): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000caa000/0x3000)=nil, 0x4000) syz_io_uring_setup(0x4b6, &(0x7f0000000240)={0x0, 0x7e7, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000100), &(0x7f0000000180)) r1 = socket$inet(0x2, 0x5, 0x41a1) sendmsg(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="06b1a47770746322182beabee6087bc544a9867b0e1958253878d09d308c3d3f869130cf6c676ca5e428c2daac2a213135a898d5f075a05b6fc32118f4afb58448dea9acd9e6d0d69ad50545e918bd5a951003398c823b9aa32f4271fa2ea96d35eeb630dc9da72f25dec48aa064d124e7d61cab59436dfb02123a1b13293250d140ec373b7e44f3be74de1d85c9f69b539bb262bdaabde0709e675c76c79e5e1179decb1d3353bce9e07847be28fbbb9c59786f1130969376d18ca28914", 0xbe}, {&(0x7f0000001840)="de36ea7195c6d046b4791b86e53b1f15ebfe7634afb6d08d50c2c178ef1fdcd3f4211ee7c29252c5600db7094e9fe2c38dd0eb46cb7c2fe240ae9f7d84aa5da050454984f8aed136", 0x48}, {&(0x7f00000018c0)="7c0184c95c1ee01eeab35cab407a82520ce513b95e67576f9c80b875750dddf2248f19a8b094e1157a6986a41d4deb8ccb61d435ff7038d76f896193f2c99c7352e5c96866a3c83eb0b833af1da284af894cd682aa00e53ccb32f597e22dfbf4974643c0d65a50abd762d362035d8d8009245d82903bf419fc8e983c9d8a4431644e6f12cb36fe180ae5ff948ab53cab4e", 0x91}, {&(0x7f0000001980)="44a47fff9b89b8df4fddb03284fcf031679847b48e67f2", 0x17}], 0x5, &(0x7f0000001a40)=[{0x100, 0x0, 0x7f, "13630cbe7a718d36e8fc5e3362e364fb800f5511a84cb54c426af3fff6fad46cc5a374fbb25ca12615f6b942ba13605354f73569d20d2b9c14f5d3699d29c25e4b5248c2ac8aa3be7f7241b84579da3ed242ac6e948862dd8bc55f093f2bd7afa36be59b595c7dfc1764d3ec543ce85c8f02b800d703eb2508d81a739a486fd34ced3e86ac549f133146b5680c56cbcd0a03658ac598f169a3d01a0a1a39b314da4bdb07616bb805111b2b317bf35523572e10b2ca2c81d586c952072abc134407b88ac63739aa2b56922b2910e48f9cea0700bea238e01ad2b7f174e2d8fedabc99698ffa25c40b26e027"}], 0x100}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x4000, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000005000000000000009500007b0000000085000000ad0000009500000000000000a905e16edb7af50b4d83e695dcb6133fdd391e0e5f23638df23bbcbb67d7c46939ae"], &(0x7f0000000000)='GPL\x00', 0x3, 0x92, &(0x7f0000000240)=""/146}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) fcntl$setlease(r6, 0x400, 0x1) kernel console output (not intermixed with test programs): acquire_dquot:7034 [ 423.337484][T12427] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.356842][T12424] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 423.395801][T12424] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2461: Failed to acquire dquot type 1 [ 423.415703][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 423.432146][T12424] loop7: lost filesystem error report for type 5 error -117 [ 423.432470][T12424] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2461: bg 0: block 248: padding at end of block bitmap is not set [ 423.458362][T12424] loop7: lost filesystem error report for type 5 error -117 [ 423.458552][T12424] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 423.476997][T12424] loop7: lost filesystem error report for type 5 error -117 [ 423.492669][T12430] tipc: Failed to remove unknown binding: 66,1,1/0:1491235198/1491235200 [ 423.500529][T12424] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 423.515635][T12430] FAULT_INJECTION: forcing a failure. [ 423.515635][T12430] name failslab, interval 1, probability 0, space 0, times 0 [ 423.519238][T12424] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 423.531461][T12430] CPU: 1 UID: 0 PID: 12430 Comm: syz.1.2464 Tainted: G W syzkaller #0 PREEMPT(full) [ 423.531495][T12430] Tainted: [W]=WARN [ 423.531501][T12430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.531515][T12430] Call Trace: [ 423.531593][T12430] [ 423.531603][T12430] __dump_stack+0x1d/0x30 [ 423.531628][T12430] dump_stack_lvl+0x95/0xd0 [ 423.531650][T12430] dump_stack+0x15/0x1b [ 423.531671][T12430] should_fail_ex+0x263/0x280 [ 423.531786][T12430] ? tipc_topsrv_queue_evt+0xda/0x200 [ 423.531822][T12430] should_failslab+0x8c/0xb0 [ 423.531924][T12430] __kmalloc_cache_noprof+0x5f/0x400 [ 423.531957][T12430] ? tipc_conn_lookup+0x156/0x1b0 [ 423.532006][T12430] tipc_topsrv_queue_evt+0xda/0x200 [ 423.532070][T12430] tipc_sub_report_overlap+0x2ef/0x310 [ 423.532096][T12430] tipc_nametbl_remove_publ+0x792/0xe40 [ 423.532126][T12430] tipc_nametbl_withdraw+0xe1/0x200 [ 423.532212][T12430] tipc_sk_withdraw+0x1fc/0x310 [ 423.532283][T12430] tipc_sk_bind+0x1de/0x390 [ 423.532308][T12430] tipc_bind+0x5e/0x190 [ 423.532336][T12430] __sys_bind+0x1d0/0x290 [ 423.532372][T12430] __x64_sys_bind+0x3f/0x50 [ 423.532430][T12430] x64_sys_call+0x2b30/0x3020 [ 423.532456][T12430] do_syscall_64+0x12c/0x3b0 [ 423.532486][T12430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.532510][T12430] RIP: 0033:0x7f71149acdd9 [ 423.532562][T12430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.532582][T12430] RSP: 002b:00007f7113407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 423.532603][T12430] RAX: ffffffffffffffda RBX: 00007f7114c25fa0 RCX: 00007f71149acdd9 [ 423.532619][T12430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 423.532713][T12430] RBP: 00007f7113407090 R08: 0000000000000000 R09: 0000000000000000 [ 423.532727][T12430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.532740][T12430] R13: 00007f7114c26038 R14: 00007f7114c25fa0 R15: 00007ffc5cbc0508 [ 423.532824][T12430] [ 423.535915][ T3606] Bluetooth: hci0: command 0x1003 tx timeout [ 423.753250][T12436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2463'. [ 423.764352][T12436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2463'. [ 423.775648][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 423.786731][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.797029][T12424] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2461: Failed to acquire dquot type 1 [ 423.931445][T12424] loop7: lost filesystem error report for type 5 error -117 [ 423.939196][T12424] EXT4-fs (loop7): 1 orphan inode deleted [ 423.970948][T12424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.350279][T12448] rdma_op ffff8881234d8d80 conn xmit_rdma 0000000000000000 [ 424.547322][T11465] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.800455][ T28] audit: type=1400 audit(1778310370.733:8673): avc: denied { listen } for pid=12459 comm="syz.7.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 425.703858][T12469] random: crng reseeded on system resumption [ 425.774962][ T28] audit: type=1400 audit(1778310371.443:8674): avc: denied { read } for pid=12459 comm="syz.7.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 425.919833][T12472] loop2: detected capacity change from 0 to 128 [ 425.963421][T12472] FAT-fs (loop2): bogus number of reserved sectors [ 425.971128][T12472] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 425.982068][T12472] FAT-fs (loop2): Can't find a valid FAT filesystem [ 426.048514][T12453] loop0: detected capacity change from 0 to 512 [ 426.081983][ T295] Bluetooth: hci0: Frame reassembly failed (-84) [ 426.277652][T12486] program syz.1.2479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.570423][T12482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2478'. [ 426.839665][T12501] rdma_op ffff888140cf8d80 conn xmit_rdma 0000000000000000 [ 426.990920][T12507] loop0: detected capacity change from 0 to 512 [ 427.011895][T12507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.028076][T12498] loop5: detected capacity change from 0 to 512 [ 427.045172][T12498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.057945][T12498] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.096528][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.164296][T12520] loop5: detected capacity change from 0 to 128 [ 427.176583][T12520] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 427.190866][T12520] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.216026][ T28] audit: type=1400 audit(1778310373.153:8675): avc: denied { write } for pid=12519 comm="syz.5.2488" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 427.238221][ T28] audit: type=1400 audit(1778310373.153:8676): avc: denied { write } for pid=12519 comm="syz.5.2488" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 427.300966][ T3730] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.327081][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2490'. [ 427.337070][T12527] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2490'. [ 428.132907][ T3606] Bluetooth: hci0: command 0x1003 tx timeout [ 428.139045][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 428.199685][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.466876][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2505'. [ 428.588599][T12545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2497'. [ 428.604921][T12580] loop7: detected capacity change from 0 to 512 [ 428.654187][T12580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.701258][T12587] loop2: detected capacity change from 0 to 512 [ 428.708408][T12587] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 428.720702][T12587] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 428.729371][T12587] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2512: bad orphan inode 4 [ 428.739748][T12587] loop2: lost filesystem error report for type 5 error -117 [ 428.742923][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 428.750817][T12587] EXT4-fs (loop2): 1 orphan inode deleted [ 428.751237][T12587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.757753][ C1] EXT4-fs (loop2): initial error at time 1778310374: ext4_orphan_get:1423 [ 428.786002][ C1] EXT4-fs (loop2): last error at time 1778310374: ext4_orphan_get:1423 [ 429.342026][T12596] FAULT_INJECTION: forcing a failure. [ 429.342026][T12596] name failslab, interval 1, probability 0, space 0, times 0 [ 429.354797][T12596] CPU: 0 UID: 0 PID: 12596 Comm: syz.1.2514 Tainted: G W syzkaller #0 PREEMPT(full) [ 429.354899][T12596] Tainted: [W]=WARN [ 429.354908][T12596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.354923][T12596] Call Trace: [ 429.354930][T12596] [ 429.354995][T12596] __dump_stack+0x1d/0x30 [ 429.355018][T12596] dump_stack_lvl+0x95/0xd0 [ 429.355037][T12596] dump_stack+0x15/0x1b [ 429.355086][T12596] should_fail_ex+0x263/0x280 [ 429.355114][T12596] should_failslab+0x8c/0xb0 [ 429.355142][T12596] __kvmalloc_node_noprof+0x155/0x640 [ 429.355208][T12596] ? __rcu_read_unlock+0x4e/0x70 [ 429.355275][T12596] ? xt_alloc_entry_offsets+0x4d/0x60 [ 429.355307][T12596] ? __account_obj_stock+0x111/0x5f0 [ 429.355333][T12596] xt_alloc_entry_offsets+0x4d/0x60 [ 429.355429][T12596] translate_table+0xa8/0x10d0 [ 429.355456][T12596] ? __memcg_slab_post_alloc_hook+0x34f/0x7d0 [ 429.355511][T12596] ? should_fail_ex+0xd9/0x280 [ 429.355569][T12596] ? _copy_from_user+0x89/0xb0 [ 429.355605][T12596] do_ipt_set_ctl+0x6d0/0x8e0 [ 429.355637][T12596] nf_setsockopt+0x199/0x1b0 [ 429.355657][T12596] ip_setsockopt+0x102/0x110 [ 429.355750][T12596] udp_setsockopt+0x89/0xa0 [ 429.355779][T12596] sock_common_setsockopt+0x69/0x80 [ 429.355905][T12596] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 429.355934][T12596] __sys_setsockopt+0x184/0x200 [ 429.356019][T12596] __x64_sys_setsockopt+0x64/0x80 [ 429.356045][T12596] x64_sys_call+0x2327/0x3020 [ 429.356073][T12596] do_syscall_64+0x12c/0x3b0 [ 429.356101][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.356156][T12596] RIP: 0033:0x7f71149acdd9 [ 429.356212][T12596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.356232][T12596] RSP: 002b:00007f71133c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 429.356256][T12596] RAX: ffffffffffffffda RBX: 00007f7114c26180 RCX: 00007f71149acdd9 [ 429.356368][T12596] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 429.356380][T12596] RBP: 00007f71133c5090 R08: 0000000000000510 R09: 0000000000000000 [ 429.356398][T12596] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.356414][T12596] R13: 00007f7114c26218 R14: 00007f7114c26180 R15: 00007ffc5cbc0508 [ 429.356436][T12596] [ 429.643722][T11465] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.732635][T12605] loop5: detected capacity change from 0 to 512 [ 429.740146][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.754010][T12603] can: request_module (can-proto-4) failed. [ 429.787733][T12605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.826426][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 429.934517][T12605] Invalid option length (57448) for dns_resolver key [ 429.943562][T12625] rdma_op ffff88811ba40180 conn xmit_rdma 0000000000000000 [ 430.114799][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.199403][T12623] loop0: detected capacity change from 0 to 512 [ 430.216352][T12639] loop5: detected capacity change from 0 to 136 [ 430.275893][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2526'. [ 430.285501][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2526'. [ 430.310681][T12639] syz.5.2526 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 430.324836][T12639] CPU: 1 UID: 0 PID: 12639 Comm: syz.5.2526 Tainted: G W syzkaller #0 PREEMPT(full) [ 430.324938][T12639] Tainted: [W]=WARN [ 430.324947][T12639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.324963][T12639] Call Trace: [ 430.324971][T12639] [ 430.324980][T12639] __dump_stack+0x1d/0x30 [ 430.325010][T12639] dump_stack_lvl+0x95/0xd0 [ 430.325032][T12639] dump_stack+0x15/0x1b [ 430.325055][T12639] dump_header+0x80/0x240 [ 430.325123][T12639] oom_kill_process+0x295/0x350 [ 430.325157][T12639] out_of_memory+0x97d/0xb80 [ 430.325211][T12639] try_charge_memcg+0x62f/0xa10 [ 430.325272][T12639] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 430.325309][T12639] __alloc_frozen_pages_noprof+0x18a/0x350 [ 430.325336][T12639] alloc_pages_mpol+0xb3/0x260 [ 430.325361][T12639] alloc_pages_noprof+0x8f/0x140 [ 430.325416][T12639] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 430.325448][T12639] __kvmalloc_node_noprof+0x3d4/0x640 [ 430.325528][T12639] ? futex_hash_allocate+0x190/0x9a0 [ 430.325581][T12639] ? futex_hash_allocate+0x190/0x9a0 [ 430.325678][T12639] futex_hash_allocate+0x190/0x9a0 [ 430.325720][T12639] ? cap_task_prctl+0x13f/0x6b0 [ 430.325829][T12639] futex_hash_prctl+0xd8/0xf0 [ 430.325862][T12639] __se_sys_prctl+0x4f4/0x1400 [ 430.325891][T12639] __x64_sys_prctl+0x67/0x80 [ 430.325924][T12639] x64_sys_call+0x2533/0x3020 [ 430.325977][T12639] do_syscall_64+0x12c/0x3b0 [ 430.326010][T12639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.326039][T12639] RIP: 0033:0x7f2497a0cdd9 [ 430.326117][T12639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.326203][T12639] RSP: 002b:00007f2496446028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 430.326225][T12639] RAX: ffffffffffffffda RBX: 00007f2497c86090 RCX: 00007f2497a0cdd9 [ 430.326243][T12639] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 430.326260][T12639] RBP: 00007f2497aa2d69 R08: 0000000000000000 R09: 0000000000000000 [ 430.326278][T12639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.326364][T12639] R13: 00007f2497c86128 R14: 00007f2497c86090 R15: 00007ffff9620418 [ 430.326387][T12639] [ 430.326441][T12639] memory: usage 307200kB, limit 307200kB, failcnt 879 [ 430.422958][T12630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2523'. [ 430.426854][T12639] memory+swap: usage 365908kB, limit 9007199254740988kB, failcnt 0 [ 430.426874][T12639] kmem: usage 274464kB, limit 9007199254740988kB, failcnt 0 [ 430.426890][T12639] Memory cgroup stats for /syz5: [ 430.578146][T12639] cache 32768000 [ 430.586624][T12639] rss 589824 [ 430.589875][T12639] shmem 32755712 [ 430.593457][T12639] mapped_file 0 [ 430.596909][T12639] dirty 0 [ 430.599840][T12639] writeback 0 [ 430.603193][T12639] workingset_refault_anon 109 [ 430.607869][T12639] workingset_refault_file 879 [ 430.612527][T12639] swap 60116992 [ 430.616013][T12639] swapcached 77180928 [ 430.619993][T12639] pgpgin 588508 [ 430.623567][T12639] pgpgout 580324 [ 430.627137][T12639] pgfault 593237 [ 430.630748][T12639] pgmajfault 57 [ 430.634297][T12639] inactive_anon 9072640 [ 430.638494][T12639] active_anon 24436736 [ 430.642553][T12639] inactive_file 0 [ 430.646318][T12639] active_file 12288 [ 430.650201][T12639] unevictable 0 [ 430.653770][T12639] hierarchical_memory_limit 314572800 [ 430.659195][T12639] hierarchical_memsw_limit 9223372036854771712 [ 430.665478][T12639] total_cache 32768000 [ 430.669628][T12639] total_rss 589824 [ 430.673361][T12639] total_shmem 32755712 [ 430.677460][T12639] total_mapped_file 0 [ 430.681515][T12639] total_dirty 0 [ 430.685014][T12639] total_writeback 0 [ 430.688816][T12639] total_workingset_refault_anon 109 [ 430.694042][T12639] total_workingset_refault_file 879 [ 430.699243][T12639] total_swap 60116992 [ 430.703248][T12639] total_swapcached 77180928 [ 430.707748][T12639] total_pgpgin 588508 [ 430.711798][T12639] total_pgpgout 580324 [ 430.715889][T12639] total_pgfault 593237 [ 430.720030][T12639] total_pgmajfault 57 [ 430.724096][T12639] total_inactive_anon 9072640 [ 430.728812][T12639] total_active_anon 24436736 [ 430.733535][T12639] total_inactive_file 0 [ 430.737684][T12639] total_active_file 12288 [ 430.742077][T12639] total_unevictable 0 [ 430.746107][T12639] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2526,pid=12635,uid=0 [ 430.760917][T12639] Memory cgroup out of memory: Killed process 12635 (syz.5.2526) total-vm:94300kB, anon-rss:1428kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 430.955110][ T7442] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.098760][T12651] loop2: detected capacity change from 0 to 512 [ 431.117842][T12651] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 431.146649][T12651] EXT4-fs (loop2): 1 truncate cleaned up [ 431.159103][T12651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.184897][T12656] loop0: detected capacity change from 0 to 128 [ 431.197834][T12656] FAT-fs (loop0): bogus number of reserved sectors [ 431.208932][T12656] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 431.218409][T12656] FAT-fs (loop0): Can't find a valid FAT filesystem [ 431.225460][ T28] audit: type=1400 audit(1778310377.153:8677): avc: denied { write } for pid=12650 comm="syz.2.2530" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 431.253086][ T28] audit: type=1400 audit(1778310377.163:8678): avc: denied { create } for pid=12650 comm="syz.2.2530" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 431.273906][ T28] audit: type=1400 audit(1778310377.163:8679): avc: denied { read write } for pid=12650 comm="syz.2.2530" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 431.298372][ T28] audit: type=1400 audit(1778310377.163:8680): avc: denied { open } for pid=12650 comm="syz.2.2530" path="/493/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 431.437469][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.505690][ T28] audit: type=1326 audit(1778310377.443:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.1.2534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 431.551032][T12671] rdma_op ffff88811ba51580 conn xmit_rdma 0000000000000000 [ 431.570494][ T28] audit: type=1326 audit(1778310377.463:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.1.2534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 431.622882][ T28] audit: type=1326 audit(1778310377.463:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.1.2534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 431.684920][ T28] audit: type=1326 audit(1778310377.463:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.1.2534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 431.712413][ T28] audit: type=1326 audit(1778310377.463:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.1.2534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 431.745468][ T28] audit: type=1326 audit(1778310377.463:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.1.2534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 432.222443][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2541'. [ 432.234358][T12688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2541'. [ 432.244110][T12688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2541'. [ 432.336949][T12690] loop0: detected capacity change from 0 to 1024 [ 432.411976][T12690] loop0: detected capacity change from 0 to 128 [ 432.424030][T12690] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 432.446001][T12690] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 432.476197][T12690] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.2543: checksumming directory block 0 [ 432.532606][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.741978][T12694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2544'. [ 432.875670][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2546'. [ 432.972958][ T3606] Bluetooth: hci0: command 0x1003 tx timeout [ 432.979045][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 433.069364][T12706] loop5: detected capacity change from 0 to 512 [ 433.088953][T12706] EXT4-fs: journaled quota format not specified [ 433.606225][T12711] FAULT_INJECTION: forcing a failure. [ 433.606225][T12711] name failslab, interval 1, probability 0, space 0, times 0 [ 433.648902][T12711] CPU: 0 UID: 0 PID: 12711 Comm: syz.0.2550 Tainted: G W syzkaller #0 PREEMPT(full) [ 433.649012][T12711] Tainted: [W]=WARN [ 433.649020][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.649103][T12711] Call Trace: [ 433.649112][T12711] [ 433.649121][T12711] __dump_stack+0x1d/0x30 [ 433.649144][T12711] dump_stack_lvl+0x95/0xd0 [ 433.649209][T12711] dump_stack+0x15/0x1b [ 433.649228][T12711] should_fail_ex+0x263/0x280 [ 433.649255][T12711] should_failslab+0x8c/0xb0 [ 433.649371][T12711] kmem_cache_alloc_noprof+0x66/0x3f0 [ 433.649406][T12711] ? audit_log_start+0x34c/0x730 [ 433.649436][T12711] audit_log_start+0x34c/0x730 [ 433.649532][T12711] audit_seccomp+0x47/0x100 [ 433.649580][T12711] ? __seccomp_filter+0x8db/0x1350 [ 433.649613][T12711] __seccomp_filter+0x8ec/0x1350 [ 433.649646][T12711] ? put_event+0x61/0x80 [ 433.649722][T12711] ? perf_pending_task+0x1df/0x210 [ 433.649824][T12711] ? task_work_run+0x169/0x1a0 [ 433.649851][T12711] __secure_computing+0x81/0x150 [ 433.649884][T12711] do_syscall_64+0xce/0x3b0 [ 433.649987][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.650089][T12711] RIP: 0033:0x7f9673c6cdd9 [ 433.650104][T12711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.650157][T12711] RSP: 002b:00007f96726c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 433.650181][T12711] RAX: ffffffffffffffda RBX: 00007f9673ee5fa0 RCX: 00007f9673c6cdd9 [ 433.650198][T12711] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 433.650213][T12711] RBP: 00007f96726c7090 R08: 0000000000000000 R09: 0000000000000000 [ 433.650300][T12711] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 433.650313][T12711] R13: 00007f9673ee6038 R14: 00007f9673ee5fa0 R15: 00007ffcbd4df8c8 [ 433.650334][T12711] [ 433.914599][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2553'. [ 433.957968][T12723] loop7: detected capacity change from 0 to 128 [ 433.997487][T12723] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.181549][T12721] loop0: detected capacity change from 0 to 512 [ 434.399836][T12728] loop7: detected capacity change from 0 to 512 [ 434.916625][T12745] __nla_validate_parse: 4 callbacks suppressed [ 434.916651][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'. [ 434.933610][T12750] loop5: detected capacity change from 0 to 136 [ 435.016623][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2560'. [ 435.026132][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2560'. [ 435.054590][T12750] syz.5.2560 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 435.068839][T12750] CPU: 1 UID: 0 PID: 12750 Comm: syz.5.2560 Tainted: G W syzkaller #0 PREEMPT(full) [ 435.068935][T12750] Tainted: [W]=WARN [ 435.069025][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.069042][T12750] Call Trace: [ 435.069051][T12750] [ 435.069059][T12750] __dump_stack+0x1d/0x30 [ 435.069085][T12750] dump_stack_lvl+0x95/0xd0 [ 435.069112][T12750] dump_stack+0x15/0x1b [ 435.069135][T12750] dump_header+0x80/0x240 [ 435.069198][T12750] oom_kill_process+0x295/0x350 [ 435.069231][T12750] out_of_memory+0x97d/0xb80 [ 435.069270][T12750] try_charge_memcg+0x62f/0xa10 [ 435.069340][T12750] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 435.069366][T12750] __alloc_frozen_pages_noprof+0x18a/0x350 [ 435.069397][T12750] alloc_pages_mpol+0xb3/0x260 [ 435.069427][T12750] alloc_pages_noprof+0x8f/0x140 [ 435.069572][T12750] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 435.069603][T12750] __kvmalloc_node_noprof+0x3d4/0x640 [ 435.069626][T12750] ? futex_hash_allocate+0x190/0x9a0 [ 435.069665][T12750] ? futex_hash_allocate+0x190/0x9a0 [ 435.069781][T12750] futex_hash_allocate+0x190/0x9a0 [ 435.069880][T12750] ? cap_task_prctl+0x13f/0x6b0 [ 435.069919][T12750] futex_hash_prctl+0xd8/0xf0 [ 435.069959][T12750] __se_sys_prctl+0x4f4/0x1400 [ 435.070046][T12750] __x64_sys_prctl+0x67/0x80 [ 435.070078][T12750] x64_sys_call+0x2533/0x3020 [ 435.070106][T12750] do_syscall_64+0x12c/0x3b0 [ 435.070135][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.070164][T12750] RIP: 0033:0x7f2497a0cdd9 [ 435.070231][T12750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.070254][T12750] RSP: 002b:00007f2496446028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 435.070281][T12750] RAX: ffffffffffffffda RBX: 00007f2497c86090 RCX: 00007f2497a0cdd9 [ 435.070300][T12750] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 435.070316][T12750] RBP: 00007f2497aa2d69 R08: 0000000000000000 R09: 0000000000000000 [ 435.070335][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.070349][T12750] R13: 00007f2497c86128 R14: 00007f2497c86090 R15: 00007ffff9620418 [ 435.070430][T12750] [ 435.070437][T12750] memory: usage 307200kB, limit 307200kB, failcnt 964 [ 435.298151][T12750] memory+swap: usage 365908kB, limit 9007199254740988kB, failcnt 0 [ 435.306097][T12750] kmem: usage 274456kB, limit 9007199254740988kB, failcnt 0 [ 435.313433][T12750] Memory cgroup stats for /syz5: [ 435.313669][T12750] cache 32763904 [ 435.322149][T12750] rss 593920 [ 435.325439][T12750] shmem 32755712 [ 435.328984][T12750] mapped_file 0 [ 435.332444][T12750] dirty 0 [ 435.335405][T12750] writeback 0 [ 435.338684][T12750] workingset_refault_anon 109 [ 435.343411][T12750] workingset_refault_file 879 [ 435.348085][T12750] swap 60116992 [ 435.351597][T12750] swapcached 77180928 [ 435.355599][T12750] pgpgin 591700 [ 435.359059][T12750] pgpgout 583516 [ 435.362602][T12750] pgfault 596800 [ 435.366185][T12750] pgmajfault 57 [ 435.369642][T12750] inactive_anon 24678400 [ 435.373928][T12750] active_anon 8835072 [ 435.377919][T12750] inactive_file 0 [ 435.381581][T12750] active_file 8192 [ 435.385359][T12750] unevictable 0 [ 435.388879][T12750] hierarchical_memory_limit 314572800 [ 435.394307][T12750] hierarchical_memsw_limit 9223372036854771712 [ 435.400467][T12750] total_cache 32763904 [ 435.404571][T12750] total_rss 593920 [ 435.408290][T12750] total_shmem 32755712 [ 435.412370][T12750] total_mapped_file 0 [ 435.416460][T12750] total_dirty 0 [ 435.419961][T12750] total_writeback 0 [ 435.423959][T12750] total_workingset_refault_anon 109 [ 435.429199][T12750] total_workingset_refault_file 879 [ 435.434421][T12750] total_swap 60116992 [ 435.438453][T12750] total_swapcached 77180928 [ 435.443045][T12750] total_pgpgin 591700 [ 435.447037][T12750] total_pgpgout 583516 [ 435.451149][T12750] total_pgfault 596800 [ 435.455263][T12750] total_pgmajfault 57 [ 435.459278][T12750] total_inactive_anon 24678400 [ 435.464070][T12750] total_active_anon 8835072 [ 435.468609][T12750] total_inactive_file 0 [ 435.472813][T12750] total_active_file 8192 [ 435.477090][T12750] total_unevictable 0 [ 435.481077][T12750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2560,pid=12747,uid=0 [ 435.495843][T12750] Memory cgroup out of memory: Killed process 12747 (syz.5.2560) total-vm:94300kB, anon-rss:1432kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 435.534528][T12760] loop0: detected capacity change from 0 to 512 [ 435.677261][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2565'. [ 435.704813][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2565'. [ 435.739821][T12771] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2565'. [ 435.855385][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2570'. [ 435.864656][T12776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2567'. [ 436.058092][T12791] EXT4-fs mount: 2 callbacks suppressed [ 436.058108][T12791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.080919][T12791] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2572: bg 0: block 234: padding at end of block bitmap is not set [ 436.096168][T12791] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 436.108586][T12791] EXT4-fs (loop7): This should not happen!! Data will be lost [ 436.108586][T12791] [ 436.118298][T12791] EXT4-fs (loop7): Total free blocks count 0 [ 436.124650][T12791] EXT4-fs (loop7): Free/Dirty block details [ 436.130662][T12791] EXT4-fs (loop7): free_blocks=0 [ 436.135765][T12791] EXT4-fs (loop7): dirty_blocks=16 [ 436.140921][T12791] EXT4-fs (loop7): Block reservation details [ 436.147068][T12791] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 436.172793][T11465] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 436.184691][T11465] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.263640][T12801] set_capacity_and_notify: 1 callbacks suppressed [ 436.263686][T12801] loop7: detected capacity change from 0 to 136 [ 436.332731][T12802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2574'. [ 436.342410][T12802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2574'. [ 436.370567][T12801] syz.7.2574 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 436.384822][T12801] CPU: 1 UID: 0 PID: 12801 Comm: syz.7.2574 Tainted: G W syzkaller #0 PREEMPT(full) [ 436.384860][T12801] Tainted: [W]=WARN [ 436.384867][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.384880][T12801] Call Trace: [ 436.384888][T12801] [ 436.384898][T12801] __dump_stack+0x1d/0x30 [ 436.384989][T12801] dump_stack_lvl+0x95/0xd0 [ 436.385011][T12801] dump_stack+0x15/0x1b [ 436.385031][T12801] dump_header+0x80/0x240 [ 436.385053][T12801] oom_kill_process+0x295/0x350 [ 436.385126][T12801] out_of_memory+0x97d/0xb80 [ 436.385164][T12801] try_charge_memcg+0x62f/0xa10 [ 436.385298][T12801] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 436.385326][T12801] __alloc_frozen_pages_noprof+0x18a/0x350 [ 436.385382][T12801] alloc_pages_mpol+0xb3/0x260 [ 436.385412][T12801] alloc_pages_noprof+0x8f/0x140 [ 436.385442][T12801] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 436.385486][T12801] __kvmalloc_node_noprof+0x3d4/0x640 [ 436.385541][T12801] ? futex_hash_allocate+0x190/0x9a0 [ 436.385575][T12801] ? futex_hash_allocate+0x190/0x9a0 [ 436.385615][T12801] futex_hash_allocate+0x190/0x9a0 [ 436.385717][T12801] ? cap_task_prctl+0x13f/0x6b0 [ 436.385768][T12801] futex_hash_prctl+0xd8/0xf0 [ 436.385788][T12801] __se_sys_prctl+0x4f4/0x1400 [ 436.385854][T12801] __x64_sys_prctl+0x67/0x80 [ 436.385869][T12801] x64_sys_call+0x2533/0x3020 [ 436.385885][T12801] do_syscall_64+0x12c/0x3b0 [ 436.385934][T12801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.385950][T12801] RIP: 0033:0x7fa9795dcdd9 [ 436.385961][T12801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.385986][T12801] RSP: 002b:00007fa978016028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 436.385999][T12801] RAX: ffffffffffffffda RBX: 00007fa979856090 RCX: 00007fa9795dcdd9 [ 436.386009][T12801] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 436.386017][T12801] RBP: 00007fa979672d69 R08: 0000000000000000 R09: 0000000000000000 [ 436.386025][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.386033][T12801] R13: 00007fa979856128 R14: 00007fa979856090 R15: 00007ffe3931a498 [ 436.386072][T12801] [ 436.386076][T12801] memory: usage 307200kB, limit 307200kB, failcnt 90 [ 436.616470][T12801] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 436.624455][T12801] kmem: usage 306904kB, limit 9007199254740988kB, failcnt 0 [ 436.631819][T12801] Memory cgroup stats for /syz7: [ 436.632070][T12801] cache 86016 [ 436.640335][T12801] rss 217088 [ 436.643614][T12801] shmem 73728 [ 436.646921][T12801] mapped_file 0 [ 436.650384][T12801] dirty 0 [ 436.653373][T12801] writeback 0 [ 436.656728][T12801] workingset_refault_anon 0 [ 436.661259][T12801] workingset_refault_file 0 [ 436.665792][T12801] swap 0 [ 436.668738][T12801] swapcached 0 [ 436.672129][T12801] pgpgin 51263 [ 436.675548][T12801] pgpgout 51189 [ 436.679032][T12801] pgfault 58264 [ 436.682507][T12801] pgmajfault 0 [ 436.686039][T12801] inactive_anon 278528 [ 436.690137][T12801] active_anon 12288 [ 436.693959][T12801] inactive_file 0 [ 436.697596][T12801] active_file 12288 [ 436.701398][T12801] unevictable 0 [ 436.704897][T12801] hierarchical_memory_limit 314572800 [ 436.710275][T12801] hierarchical_memsw_limit 9223372036854771712 [ 436.716519][T12801] total_cache 86016 [ 436.720322][T12801] total_rss 217088 [ 436.724075][T12801] total_shmem 73728 [ 436.727952][T12801] total_mapped_file 0 [ 436.731981][T12801] total_dirty 0 [ 436.735472][T12801] total_writeback 0 [ 436.739364][T12801] total_workingset_refault_anon 0 [ 436.744438][T12801] total_workingset_refault_file 0 [ 436.749474][T12801] total_swap 0 [ 436.752879][T12801] total_swapcached 0 [ 436.756887][T12801] total_pgpgin 51263 [ 436.756900][T12801] total_pgpgout 51189 [ 436.756909][T12801] total_pgfault 58264 [ 436.756952][T12801] total_pgmajfault 0 [ 436.756967][T12801] total_inactive_anon 278528 [ 436.756977][T12801] total_active_anon 12288 [ 436.756987][T12801] total_inactive_file 0 [ 436.757000][T12801] total_active_file 12288 [ 436.757009][T12801] total_unevictable 0 [ 436.757019][T12801] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2574,pid=12799,uid=0 [ 436.757324][T12801] Memory cgroup out of memory: Killed process 12799 (syz.7.2574) total-vm:94300kB, anon-rss:1436kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 436.855853][T12815] loop5: detected capacity change from 0 to 128 [ 436.866537][T12815] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.866741][T12815] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.876712][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 436.876729][ T28] audit: type=1400 audit(1778310382.813:8710): avc: denied { write } for pid=12813 comm="syz.5.2579" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.024030][ T3730] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 437.080196][T12820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.148950][T12820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.355268][T12804] loop0: detected capacity change from 0 to 512 [ 437.383881][T12804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.396979][T12804] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.432389][T12820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.465449][T12812] loop7: detected capacity change from 0 to 512 [ 437.497506][T12820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.506153][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.644359][T12833] loop0: detected capacity change from 0 to 1024 [ 437.737470][T12833] loop0: detected capacity change from 0 to 128 [ 437.766847][T12833] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 437.809630][T12833] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 437.822523][T12823] loop5: detected capacity change from 0 to 512 [ 437.826748][T12833] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.2584: checksumming directory block 0 [ 437.862236][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 437.883972][T12823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.914410][T12823] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.964807][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.069138][T12846] loop7: detected capacity change from 0 to 512 [ 438.124106][ T28] audit: type=1326 audit(1778310384.063:8711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.2586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9673c6cdd9 code=0x7ffc0000 [ 438.168988][ T28] audit: type=1326 audit(1778310384.063:8712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.2586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9673c6cdd9 code=0x7ffc0000 [ 438.230588][ T28] audit: type=1326 audit(1778310384.063:8713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.2586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9673c6cdd9 code=0x7ffc0000 [ 438.282772][ T28] audit: type=1326 audit(1778310384.063:8714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.2586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9673c6cdd9 code=0x7ffc0000 [ 438.327104][ T28] audit: type=1326 audit(1778310384.063:8715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.2586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9673c6cdd9 code=0x7ffc0000 [ 438.353081][ T28] audit: type=1326 audit(1778310384.063:8716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.2586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9673c6cdd9 code=0x7ffc0000 [ 438.378934][ T28] audit: type=1326 audit(1778310384.063:8717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.2586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9673c6cdd9 code=0x7ffc0000 [ 438.406188][ T28] audit: type=1326 audit(1778310384.063:8718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.2586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9673c6cdd9 code=0x7ffc0000 [ 438.432406][ T28] audit: type=1326 audit(1778310384.063:8719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.0.2586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9673c6cdd9 code=0x7ffc0000 [ 439.078061][T12872] loop2: detected capacity change from 0 to 512 [ 439.150008][T12872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.546200][T12878] loop5: detected capacity change from 0 to 512 [ 439.599272][T12878] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2596: corrupted inode contents [ 439.623251][T12878] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 439.624151][T12878] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.2596: mark_inode_dirty error [ 439.633442][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 439.633491][ C1] EXT4-fs (loop5): initial error at time 1778310385: ext4_do_update_inode:5690: inode 16 [ 439.633555][ C1] EXT4-fs (loop5): last error at time 1778310385: ext4_do_update_inode:5690: inode 16 [ 439.675732][T12878] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 439.676169][T12878] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2596: corrupted inode contents [ 439.697637][T12878] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 439.726853][T12878] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2596: mark_inode_dirty error [ 439.793138][T12878] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 439.793566][T12878] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2596: corrupted inode contents [ 439.851172][T12878] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 439.851474][T12878] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 439.911598][T12878] loop5: lost filesystem error report for type 5 error -117 [ 439.911989][T12878] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2596: corrupted inode contents [ 439.968138][T12878] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 439.968486][T12878] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.2596: mark_inode_dirty error [ 439.991866][T12872] Invalid option length (57448) for dns_resolver key [ 440.031450][T12878] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 440.032905][T12878] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 440.066252][T12882] __nla_validate_parse: 4 callbacks suppressed [ 440.066293][T12882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2597'. [ 440.094117][T12878] loop5: lost filesystem error report for type 5 error -117 [ 440.094905][T12878] EXT4-fs (loop5): 1 truncate cleaned up [ 440.113988][ T54] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 440.136912][T12878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.151647][ T54] loop5: lost filesystem error report for type 5 error -117 [ 440.162560][T12878] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.191235][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2596'. [ 440.434239][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.463897][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.577154][T12898] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2600'. [ 440.644529][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2600'. [ 441.031473][T12895] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 441.056462][T12895] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.091562][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.111975][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.135101][ T3730] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 441.327504][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.364668][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.412737][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.430208][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.622440][T12918] set_capacity_and_notify: 2 callbacks suppressed [ 441.622484][T12918] loop2: detected capacity change from 0 to 512 [ 441.646832][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.655930][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.166685][T12927] loop5: detected capacity change from 0 to 512 [ 442.186076][T12927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.216222][T12927] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.273491][T12929] loop0: detected capacity change from 0 to 512 [ 442.327601][T12937] loop2: detected capacity change from 0 to 128 [ 442.349268][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.367174][T12937] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.399119][T12942] loop5: detected capacity change from 0 to 1024 [ 442.407101][T12937] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.457934][ T28] kauditd_printk_skb: 286 callbacks suppressed [ 442.457950][ T28] audit: type=1400 audit(1778310388.393:9005): avc: denied { write } for pid=12936 comm="syz.2.2613" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.552756][T12935] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2612'. [ 442.580618][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 442.605371][T12942] loop5: detected capacity change from 0 to 128 [ 442.645571][T12942] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 442.679499][T12942] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 442.744814][T12942] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.2615: checksumming directory block 0 [ 442.759417][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2616'. [ 442.787835][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2616'. [ 442.956416][ T3730] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 443.327430][T12964] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2619'. [ 443.926326][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2618'. [ 443.935821][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2618'. [ 444.341029][ T28] audit: type=1400 audit(1778310390.273:9006): avc: denied { map } for pid=12985 comm="syz.2.2626" path="socket:[40314]" dev="sockfs" ino=40314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 444.400238][ T28] audit: type=1400 audit(1778310390.303:9007): avc: denied { read } for pid=12985 comm="syz.2.2626" path="socket:[40314]" dev="sockfs" ino=40314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 444.638377][T12989] loop7: detected capacity change from 0 to 512 [ 445.519984][T13024] __nla_validate_parse: 2 callbacks suppressed [ 445.519997][T13024] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2637'. [ 445.540573][T13028] loop5: detected capacity change from 0 to 512 [ 445.564731][T13028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.778871][T13041] loop2: detected capacity change from 0 to 512 [ 445.804715][T13041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.365625][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.422065][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2643'. [ 446.456371][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2643'. [ 446.940652][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.100906][ T28] audit: type=1326 audit(1778310393.033:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13071 comm="syz.1.2649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 447.150368][ T28] audit: type=1326 audit(1778310393.033:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13071 comm="syz.1.2649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 447.176340][ T28] audit: type=1326 audit(1778310393.033:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13071 comm="syz.1.2649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 447.254203][ T28] audit: type=1326 audit(1778310393.063:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13071 comm="syz.1.2649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 447.282250][T13068] loop7: detected capacity change from 0 to 512 [ 447.314120][ T28] audit: type=1326 audit(1778310393.063:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13071 comm="syz.1.2649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 447.341919][ T28] audit: type=1326 audit(1778310393.063:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13071 comm="syz.1.2649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 447.381510][T13068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.394467][T13068] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.408397][ T28] audit: type=1326 audit(1778310393.063:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13071 comm="syz.1.2649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71149acdd9 code=0x7ffc0000 [ 447.615039][T11465] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.628194][T13087] loop5: detected capacity change from 0 to 512 [ 447.641491][T13087] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 447.681107][T13081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2652'. [ 447.692436][T13087] netlink: 'syz.5.2653': attribute type 12 has an invalid length. [ 447.704738][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 447.704755][ T28] audit: type=1400 audit(1778310393.643:9019): avc: denied { ioctl } for pid=13086 comm="syz.5.2653" path="socket:[40545]" dev="sockfs" ino=40545 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 447.849054][T13100] FAULT_INJECTION: forcing a failure. [ 447.849054][T13100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.873026][T13100] CPU: 1 UID: 0 PID: 13100 Comm: syz.7.2657 Tainted: G W syzkaller #0 PREEMPT(full) [ 447.873063][T13100] Tainted: [W]=WARN [ 447.873071][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.873085][T13100] Call Trace: [ 447.873093][T13100] [ 447.873103][T13100] __dump_stack+0x1d/0x30 [ 447.873148][T13100] dump_stack_lvl+0x95/0xd0 [ 447.873168][T13100] dump_stack+0x15/0x1b [ 447.873188][T13100] should_fail_ex+0x263/0x280 [ 447.873221][T13100] should_fail+0xb/0x20 [ 447.873316][T13100] should_fail_usercopy+0x1a/0x20 [ 447.873343][T13100] _copy_from_user+0x1c/0xb0 [ 447.873374][T13100] ___sys_sendmsg+0xc1/0x1e0 [ 447.873443][T13100] ? __send_signal_locked+0x665/0x760 [ 447.873482][T13100] __x64_sys_sendmsg+0xd4/0x160 [ 447.873509][T13100] x64_sys_call+0x194c/0x3020 [ 447.873575][T13100] do_syscall_64+0x12c/0x3b0 [ 447.873607][T13100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.873671][T13100] RIP: 0033:0x7fa9795dcdd9 [ 447.873689][T13100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.873705][T13100] RSP: 002b:00007fa978037028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.873774][T13100] RAX: ffffffffffffffda RBX: 00007fa979855fa0 RCX: 00007fa9795dcdd9 [ 447.873795][T13100] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000004 [ 447.873811][T13100] RBP: 00007fa978037090 R08: 0000000000000000 R09: 0000000000000000 [ 447.873826][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.873917][T13100] R13: 00007fa979856038 R14: 00007fa979855fa0 R15: 00007ffe3931a498 [ 447.873938][T13100] [ 448.062674][T13102] loop2: detected capacity change from 0 to 1024 [ 448.096383][T13102] loop2: detected capacity change from 0 to 128 [ 448.143860][T13102] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 448.192374][T13102] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 448.201128][T13110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.213717][T13110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.221459][T13102] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2658: checksumming directory block 0 [ 448.243899][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.467161][T13107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.495397][T13107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.521732][T13116] loop2: detected capacity change from 0 to 2048 [ 448.607921][T13116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.709004][T13121] loop5: detected capacity change from 0 to 512 [ 448.729521][T13121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.742701][T13113] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2661: bg 0: block 234: padding at end of block bitmap is not set [ 448.747640][ T28] audit: type=1400 audit(1778310394.673:9020): avc: denied { write } for pid=13112 comm="syz.2.2661" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.779454][T13113] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 448.795269][T13113] EXT4-fs (loop2): This should not happen!! Data will be lost [ 448.795269][T13113] [ 448.809477][T13113] EXT4-fs (loop2): Total free blocks count 0 [ 448.815575][T13113] EXT4-fs (loop2): Free/Dirty block details [ 448.821745][T13113] EXT4-fs (loop2): free_blocks=0 [ 448.826843][T13113] EXT4-fs (loop2): dirty_blocks=16 [ 448.832166][T13113] EXT4-fs (loop2): Block reservation details [ 448.838653][T13113] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 448.855543][ T3298] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 448.868092][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.911035][T13121] Invalid option length (57448) for dns_resolver key [ 448.981202][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.320298][T13155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2670'. [ 449.626044][T13161] loop0: detected capacity change from 0 to 512 [ 449.634822][T13161] EXT4-fs (loop0): orphan cleanup on readonly fs [ 449.643253][T13161] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 449.653463][T13161] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 449.663900][T13161] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2672: Failed to acquire dquot type 1 [ 449.675242][T13161] loop0: lost filesystem error report for type 5 error -117 [ 449.675507][T13161] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 449.682938][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 449.682958][ C0] EXT4-fs (loop0): last error at time 1778310395: ext4_acquire_dquot:7034 [ 449.709133][T13161] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 449.719078][T13161] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2672: Failed to acquire dquot type 1 [ 449.730424][T13161] loop0: lost filesystem error report for type 5 error -117 [ 449.730818][T13161] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2672: bg 0: block 248: padding at end of block bitmap is not set [ 449.759357][T13161] loop0: lost filesystem error report for type 5 error -117 [ 449.759595][T13161] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 449.793098][T13161] loop0: lost filesystem error report for type 5 error -117 [ 449.794124][T13161] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 449.812635][T13161] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 449.824245][T13161] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2672: Failed to acquire dquot type 1 [ 449.843216][T13161] loop0: lost filesystem error report for type 5 error -117 [ 449.843456][T13161] EXT4-fs (loop0): 1 orphan inode deleted [ 449.892697][T13161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.981360][T13174] rdma_op ffff888129456180 conn xmit_rdma 0000000000000000 [ 450.286991][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.497600][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.656030][T13166] loop2: detected capacity change from 0 to 512 [ 450.666777][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.702990][T13166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.727427][T13189] loop0: detected capacity change from 0 to 128 [ 450.739095][T13166] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.778438][T13189] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 450.783597][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.799642][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.823165][T13189] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.848770][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.941965][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.128511][ T28] audit: type=1400 audit(1778310397.063:9021): avc: denied { getopt } for pid=13204 comm="syz.1.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 451.284707][T13203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2683'. [ 451.477760][T13211] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2686'. [ 452.152594][T13226] loop5: detected capacity change from 0 to 1024 [ 452.193376][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 452.227478][T13226] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 452.249103][T13228] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 452.266752][T13228] ext4 filesystem being mounted at /598/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.286052][ T3287] udevd[3287]: incorrect ext4 checksum on /dev/loop5 [ 452.299570][T13226] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 452.317046][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.385416][T13226] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.2691: checksumming directory block 0 [ 452.461027][ T3730] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.523261][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2695'. [ 452.576656][T13248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2695'. [ 453.005266][T13253] set_capacity_and_notify: 2 callbacks suppressed [ 453.005298][T13253] loop5: detected capacity change from 0 to 136 [ 453.211818][T13253] syz.5.2697 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 453.226179][T13253] CPU: 1 UID: 0 PID: 13253 Comm: syz.5.2697 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.226213][T13253] Tainted: [W]=WARN [ 453.226221][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 453.226304][T13253] Call Trace: [ 453.226313][T13253] [ 453.226324][T13253] __dump_stack+0x1d/0x30 [ 453.226355][T13253] dump_stack_lvl+0x95/0xd0 [ 453.226377][T13253] dump_stack+0x15/0x1b [ 453.226397][T13253] dump_header+0x80/0x240 [ 453.226424][T13253] oom_kill_process+0x295/0x350 [ 453.226537][T13253] out_of_memory+0x97d/0xb80 [ 453.226587][T13253] try_charge_memcg+0x62f/0xa10 [ 453.226647][T13253] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 453.226727][T13253] __alloc_frozen_pages_noprof+0x18a/0x350 [ 453.226754][T13253] alloc_pages_mpol+0xb3/0x260 [ 453.226780][T13253] alloc_pages_noprof+0x8f/0x140 [ 453.226805][T13253] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 453.226872][T13253] __kvmalloc_node_noprof+0x3d4/0x640 [ 453.226903][T13253] ? futex_hash_allocate+0x190/0x9a0 [ 453.226936][T13253] ? futex_hash_allocate+0x190/0x9a0 [ 453.226970][T13253] futex_hash_allocate+0x190/0x9a0 [ 453.227055][T13253] ? preempt_schedule_irq+0x2d/0x50 [ 453.227092][T13253] ? cap_task_prctl+0x13f/0x6b0 [ 453.227147][T13253] futex_hash_prctl+0xd8/0xf0 [ 453.227178][T13253] __se_sys_prctl+0x4f4/0x1400 [ 453.227207][T13253] __x64_sys_prctl+0x67/0x80 [ 453.227293][T13253] x64_sys_call+0x2533/0x3020 [ 453.227368][T13253] do_syscall_64+0x12c/0x3b0 [ 453.227403][T13253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.227427][T13253] RIP: 0033:0x7f2497a0cdd9 [ 453.227445][T13253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.227503][T13253] RSP: 002b:00007f2496425028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 453.227570][T13253] RAX: ffffffffffffffda RBX: 00007f2497c86180 RCX: 00007f2497a0cdd9 [ 453.227589][T13253] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 453.227603][T13253] RBP: 00007f2497aa2d69 R08: 0000000000000000 R09: 0000000000000000 [ 453.227617][T13253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.227640][T13253] R13: 00007f2497c86218 R14: 00007f2497c86180 R15: 00007ffff9620418 [ 453.227660][T13253] [ 453.227681][T13253] memory: usage 307200kB, limit 307200kB, failcnt 1020 [ 453.460787][T13253] memory+swap: usage 365908kB, limit 9007199254740988kB, failcnt 0 [ 453.468867][T13253] kmem: usage 272488kB, limit 9007199254740988kB, failcnt 0 [ 453.476253][T13253] Memory cgroup stats for /syz5: [ 453.476524][T13253] cache 32763904 [ 453.485107][T13253] rss 2605056 [ 453.488414][T13253] shmem 32763904 [ 453.491964][T13253] mapped_file 0 [ 453.495481][T13253] dirty 0 [ 453.498422][T13253] writeback 0 [ 453.501709][T13253] workingset_refault_anon 109 [ 453.506498][T13253] workingset_refault_file 879 [ 453.511231][T13253] swap 60116992 [ 453.514804][T13253] swapcached 77180928 [ 453.518862][T13253] pgpgin 610238 [ 453.522341][T13253] pgpgout 601563 [ 453.525938][T13253] pgfault 621850 [ 453.529485][T13253] pgmajfault 57 [ 453.532977][T13253] inactive_anon 24449024 [ 453.537260][T13253] active_anon 11083776 [ 453.539881][T13234] loop7: detected capacity change from 0 to 512 [ 453.541324][T13253] inactive_file 0 [ 453.541334][T13253] active_file 0 [ 453.541343][T13253] unevictable 0 [ 453.558223][T13253] hierarchical_memory_limit 314572800 [ 453.563640][T13253] hierarchical_memsw_limit 9223372036854771712 [ 453.569841][T13253] total_cache 32763904 [ 453.573947][T13253] total_rss 2605056 [ 453.577811][T13253] total_shmem 32763904 [ 453.581874][T13253] total_mapped_file 0 [ 453.585906][T13253] total_dirty 0 [ 453.589455][T13253] total_writeback 0 [ 453.593299][T13253] total_workingset_refault_anon 109 [ 453.598493][T13253] total_workingset_refault_file 879 [ 453.603830][T13253] total_swap 60116992 [ 453.607816][T13253] total_swapcached 77180928 [ 453.612345][T13253] total_pgpgin 610238 [ 453.616378][T13253] total_pgpgout 601563 [ 453.620444][T13253] total_pgfault 621850 [ 453.624543][T13253] total_pgmajfault 57 [ 453.628556][T13253] total_inactive_anon 24449024 [ 453.633340][T13253] total_active_anon 11083776 [ 453.637973][T13253] total_inactive_file 0 [ 453.642121][T13253] total_active_file 0 [ 453.646139][T13253] total_unevictable 0 [ 453.650131][T13253] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2697,pid=13250,uid=0 [ 453.664927][T13253] Memory cgroup out of memory: Killed process 13250 (syz.5.2697) total-vm:96348kB, anon-rss:3396kB, file-rss:22376kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 454.103899][T13239] loop2: detected capacity change from 0 to 512 [ 454.168139][T13239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.188250][T13268] loop7: detected capacity change from 0 to 128 [ 454.232680][T13239] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.268954][T13268] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.303159][T13268] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.359336][ T28] audit: type=1400 audit(1778310400.293:9022): avc: denied { write } for pid=13265 comm="syz.7.2700" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.403678][ T28] audit: type=1400 audit(1778310400.343:9023): avc: denied { write } for pid=13265 comm="syz.7.2700" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.404869][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.466908][T13258] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2699'. [ 454.515559][T11465] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.531226][T13280] loop2: detected capacity change from 0 to 512 [ 454.550904][T13280] EXT4-fs (loop2): orphan cleanup on readonly fs [ 454.570569][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 454.590179][T13280] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 454.600525][T13280] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 454.610985][T13280] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2701: Failed to acquire dquot type 1 [ 454.621493][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.622567][T13280] loop2: lost filesystem error report for type 5 error -117 [ 454.630392][T13280] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 454.642848][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 454.649370][T13260] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.654273][ C0] EXT4-fs (loop2): last error at time 1778310400: ext4_acquire_dquot:7034 [ 454.662277][T13260] bridge_slave_0: entered allmulticast mode [ 454.675853][T13280] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 454.677803][T13260] bridge_slave_0: entered promiscuous mode [ 454.685988][T13280] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2701: Failed to acquire dquot type 1 [ 454.703135][T13280] loop2: lost filesystem error report for type 5 error -117 [ 454.704912][T13280] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2701: bg 0: block 248: padding at end of block bitmap is not set [ 454.726956][T13280] loop2: lost filesystem error report for type 5 error -117 [ 454.727327][T13280] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 454.734925][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.743520][T13280] loop2: lost filesystem error report for type 5 error -117 [ 454.750834][T13280] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 454.752680][T13260] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.758413][T13280] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 454.769029][T13260] bridge_slave_1: entered allmulticast mode [ 454.775547][T13280] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2701: Failed to acquire dquot type 1 [ 454.788837][T13260] bridge_slave_1: entered promiscuous mode [ 454.791941][T13280] loop2: lost filesystem error report for type 5 error -117 [ 454.817000][T13280] EXT4-fs (loop2): 1 orphan inode deleted [ 454.831033][T13280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.865024][T13260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.885690][T13260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.925043][T13260] team0: Port device team_slave_0 added [ 454.937370][T13260] team0: Port device team_slave_1 added [ 454.963428][T13260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.970642][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.997292][T13260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.009106][T13260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.016301][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.045116][T13260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.074838][T13260] hsr_slave_0: entered promiscuous mode [ 455.093053][T13260] hsr_slave_1: entered promiscuous mode [ 455.099271][T13260] debugfs: 'hsr0' already exists in 'hsr' [ 455.105453][T13260] Cannot create hsr debugfs directory [ 455.127319][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.279678][T13260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.383930][T13260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.520972][T13260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.656888][T13260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.828978][T13260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 455.849822][T13260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.869492][T13260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 455.883206][T13260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 455.896005][T13260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 455.911930][T13260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 455.927419][T13260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.943235][T13260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.083754][T13260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.101861][T13260] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.103845][T13328] loop2: detected capacity change from 0 to 128 [ 456.121666][T12960] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.128803][T12960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.152730][T13328] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 456.174637][T12960] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.181731][T12960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.204629][T13328] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.232953][ T28] audit: type=1400 audit(1778310402.163:9024): avc: denied { write } for pid=13326 comm="syz.2.2711" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.268605][T13260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.315681][ T28] audit: type=1400 audit(1778310402.203:9025): avc: denied { write } for pid=13326 comm="syz.2.2711" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.347456][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.461066][T13260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.570508][T13359] loop7: detected capacity change from 0 to 1024 [ 456.607504][T13359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.626751][T13359] EXT4-fs (loop7): shut down requested (1) [ 456.737562][T13359] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.740808][T13260] veth0_vlan: entered promiscuous mode [ 456.868463][T13354] loop5: detected capacity change from 0 to 512 [ 456.903535][T13260] veth1_vlan: entered promiscuous mode [ 456.911395][T13354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.919014][T13260] veth0_macvtap: entered promiscuous mode [ 456.936113][T13354] ext4 filesystem being mounted at /505/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.956091][T13260] veth1_macvtap: entered promiscuous mode [ 456.977555][T13260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.989428][T13260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.006313][ T3861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.015887][ T3861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.029697][ T3861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.042740][ T3861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.106743][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.220885][T13350] loop2: detected capacity change from 0 to 512 [ 457.262412][T13395] loop5: detected capacity change from 0 to 512 [ 457.306264][T13395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.345608][T13394] rdma_op ffff88811b355580 conn xmit_rdma 0000000000000000 [ 457.539497][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.553337][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.824190][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.852279][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2730'. [ 457.890360][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.233544][T13422] set_capacity_and_notify: 1 callbacks suppressed [ 458.234015][T13422] loop2: detected capacity change from 0 to 128 [ 458.273697][T13422] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 458.275848][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.334359][T13422] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 458.375744][T13422] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2733: checksumming directory block 0 [ 458.409779][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.433047][T13427] loop0: detected capacity change from 0 to 2048 [ 458.445690][T13427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.467720][T13427] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2735: bg 0: block 234: padding at end of block bitmap is not set [ 458.502195][T13427] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 458.551987][T13427] EXT4-fs (loop0): This should not happen!! Data will be lost [ 458.551987][T13427] [ 458.573115][T13427] EXT4-fs (loop0): Total free blocks count 0 [ 458.579521][T13427] EXT4-fs (loop0): Free/Dirty block details [ 458.585730][T13427] EXT4-fs (loop0): free_blocks=0 [ 458.590939][T13427] EXT4-fs (loop0): dirty_blocks=16 [ 458.596432][T13427] EXT4-fs (loop0): Block reservation details [ 458.602635][T13427] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 458.618095][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2738'. [ 458.674490][T13260] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 458.710720][T13260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.909414][T13453] loop0: detected capacity change from 0 to 1024 [ 459.037753][T13453] loop0: detected capacity change from 0 to 128 [ 459.066435][T13430] loop5: detected capacity change from 0 to 512 [ 459.084700][T13453] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 459.195468][T13430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.215837][T13453] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 459.254256][T13453] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.2740: checksumming directory block 0 [ 459.266839][T13430] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.423997][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.443614][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.655629][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.665190][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.176888][T13477] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2747'. [ 460.266869][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2750'. [ 460.639104][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2749'. [ 460.706261][T13486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2749'. [ 461.333566][T13497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2753'. [ 461.343264][T13497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2753'. [ 461.407174][T13499] loop2: detected capacity change from 0 to 1024 [ 461.655058][T13495] syz.1.2753 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 461.664966][T13495] CPU: 0 UID: 0 PID: 13495 Comm: syz.1.2753 Tainted: G W syzkaller #0 PREEMPT(full) [ 461.665039][T13495] Tainted: [W]=WARN [ 461.665046][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.665060][T13495] Call Trace: [ 461.665067][T13495] [ 461.665076][T13495] __dump_stack+0x1d/0x30 [ 461.665102][T13495] dump_stack_lvl+0x95/0xd0 [ 461.665179][T13495] dump_stack+0x15/0x1b [ 461.665201][T13495] dump_header+0x80/0x240 [ 461.665223][T13495] oom_kill_process+0x295/0x350 [ 461.665276][T13495] out_of_memory+0x97d/0xb80 [ 461.665327][T13495] try_charge_memcg+0x62f/0xa10 [ 461.665361][T13495] charge_memcg+0x6d/0x120 [ 461.665387][T13495] __mem_cgroup_charge+0x28/0xb0 [ 461.665414][T13495] do_wp_page+0x732/0x2040 [ 461.665489][T13495] ? __rcu_read_lock+0x36/0x50 [ 461.665513][T13495] handle_mm_fault+0x8b9/0x2e70 [ 461.665547][T13495] do_user_addr_fault+0x3fd/0x1050 [ 461.665717][T13495] ? __unix_dgram_recvmsg+0x798/0x870 [ 461.665750][T13495] exc_page_fault+0x62/0xa0 [ 461.665773][T13495] asm_exc_page_fault+0x26/0x30 [ 461.665805][T13495] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 461.665891][T13495] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 91 a6 01 00 90 90 90 90 90 90 90 90 90 90 [ 461.665911][T13495] RSP: 0018:ffffc9000129bb60 EFLAGS: 00050202 [ 461.665927][T13495] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000003c7030 [ 461.665942][T13495] RDX: ffff888101655500 RSI: 0000000000000002 RDI: 00000000ffffffff [ 461.665956][T13495] RBP: 0000000000000002 R08: 0001c9000129be37 R09: 0000000000000000 [ 461.666024][T13495] R10: 0001c9000129ba10 R11: 0001c9000129ba17 R12: 00002000003c7000 [ 461.666075][T13495] R13: 0000000000000000 R14: ffffc9000129be34 R15: 0000000000000000 [ 461.666094][T13495] ____sys_recvmsg+0x1a1/0x280 [ 461.666191][T13495] ___sys_recvmsg+0x11f/0x3b0 [ 461.666222][T13495] do_recvmmsg+0x1ef/0x560 [ 461.666248][T13495] ? kcov_ioctl+0x1ee/0x620 [ 461.666282][T13495] __x64_sys_recvmmsg+0xe5/0x170 [ 461.666357][T13495] x64_sys_call+0x80f/0x3020 [ 461.666383][T13495] do_syscall_64+0x12c/0x3b0 [ 461.666441][T13495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.666541][T13495] RIP: 0033:0x7f71149acdd9 [ 461.666557][T13495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.666575][T13495] RSP: 002b:00007f71133e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 461.666595][T13495] RAX: ffffffffffffffda RBX: 00007f7114c26090 RCX: 00007f71149acdd9 [ 461.666668][T13495] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 461.666682][T13495] RBP: 00007f7114a42d69 R08: 0000000000000000 R09: 0000000000000000 [ 461.666695][T13495] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 461.666708][T13495] R13: 00007f7114c26128 R14: 00007f7114c26090 R15: 00007ffc5cbc0508 [ 461.666727][T13495] [ 461.666734][T13495] memory: usage 307200kB, limit 307200kB, failcnt 2196 [ 461.965339][T13495] memory+swap: usage 311560kB, limit 9007199254740988kB, failcnt 0 [ 461.973240][T13495] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 461.980611][T13495] Memory cgroup stats for /syz1: [ 461.980870][T13495] cache 4096 [ 461.989096][T13495] rss 0 [ 461.991850][T13495] shmem 0 [ 461.994785][T13495] mapped_file 4096 [ 461.998570][T13495] dirty 0 [ 462.001494][T13495] writeback 4096 [ 462.005062][T13495] workingset_refault_anon 377 [ 462.009735][T13495] workingset_refault_file 2155 [ 462.014522][T13495] swap 4464640 [ 462.017885][T13495] swapcached 22249472 [ 462.021851][T13495] pgpgin 633966 [ 462.025313][T13495] pgpgout 633965 [ 462.028850][T13495] pgfault 678019 [ 462.032409][T13495] pgmajfault 212 [ 462.035955][T13495] inactive_anon 0 [ 462.039575][T13495] active_anon 0 [ 462.043133][T13495] inactive_file 4096 [ 462.047088][T13495] active_file 0 [ 462.050535][T13495] unevictable 0 [ 462.054012][T13495] hierarchical_memory_limit 314572800 [ 462.059383][T13495] hierarchical_memsw_limit 9223372036854771712 [ 462.065546][T13495] total_cache 4096 [ 462.069331][T13495] total_rss 0 [ 462.072602][T13495] total_shmem 0 [ 462.076141][T13495] total_mapped_file 4096 [ 462.080371][T13495] total_dirty 0 [ 462.083906][T13495] total_writeback 4096 [ 462.088047][T13495] total_workingset_refault_anon 377 [ 462.093245][T13495] total_workingset_refault_file 2155 [ 462.098625][T13495] total_swap 4464640 [ 462.102504][T13495] total_swapcached 22249472 [ 462.107006][T13495] total_pgpgin 633966 [ 462.111069][T13495] total_pgpgout 633965 [ 462.115138][T13495] total_pgfault 678019 [ 462.119378][T13495] total_pgmajfault 212 [ 462.123498][T13495] total_inactive_anon 0 [ 462.127640][T13495] total_active_anon 0 [ 462.131607][T13495] total_inactive_file 4096 [ 462.136043][T13495] total_active_file 0 [ 462.140197][T13495] total_unevictable 0 [ 462.144248][T13495] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2753,pid=13493,uid=0 [ 462.159146][T13495] Memory cgroup out of memory: Killed process 13493 (syz.1.2753) total-vm:98536kB, anon-rss:1232kB, file-rss:26532kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 462.378833][T13499] loop2: detected capacity change from 0 to 128 [ 462.433533][T13499] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 462.517071][T13499] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2754: checksumming directory block 0 [ 462.555506][T13492] loop0: detected capacity change from 0 to 512 [ 462.614898][T13490] loop5: detected capacity change from 0 to 512 [ 462.758372][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2759'. [ 462.951953][T13533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2762'. [ 463.067809][T13538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2763'. [ 463.404614][T13542] loop5: detected capacity change from 0 to 136 [ 463.959551][T13541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2765'. [ 463.969408][T13541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2765'. [ 464.038329][T13542] syz.5.2765 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 464.052700][T13542] CPU: 1 UID: 0 PID: 13542 Comm: syz.5.2765 Tainted: G W syzkaller #0 PREEMPT(full) [ 464.052784][T13542] Tainted: [W]=WARN [ 464.052792][T13542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 464.052805][T13542] Call Trace: [ 464.052813][T13542] [ 464.052826][T13542] __dump_stack+0x1d/0x30 [ 464.052901][T13542] dump_stack_lvl+0x95/0xd0 [ 464.052922][T13542] dump_stack+0x15/0x1b [ 464.052942][T13542] dump_header+0x80/0x240 [ 464.052965][T13542] oom_kill_process+0x295/0x350 [ 464.053028][T13542] out_of_memory+0x97d/0xb80 [ 464.053088][T13542] try_charge_memcg+0x62f/0xa10 [ 464.053123][T13542] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 464.053191][T13542] __alloc_frozen_pages_noprof+0x18a/0x350 [ 464.053218][T13542] alloc_pages_mpol+0xb3/0x260 [ 464.053267][T13542] alloc_pages_noprof+0x8f/0x140 [ 464.053291][T13542] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 464.053321][T13542] __kvmalloc_node_noprof+0x3d4/0x640 [ 464.053342][T13542] ? futex_hash_allocate+0x190/0x9a0 [ 464.053429][T13542] ? futex_hash_allocate+0x190/0x9a0 [ 464.053530][T13542] futex_hash_allocate+0x190/0x9a0 [ 464.053569][T13542] ? cap_task_prctl+0x13f/0x6b0 [ 464.053594][T13542] futex_hash_prctl+0xd8/0xf0 [ 464.053630][T13542] __se_sys_prctl+0x4f4/0x1400 [ 464.053658][T13542] __x64_sys_prctl+0x67/0x80 [ 464.053748][T13542] x64_sys_call+0x2533/0x3020 [ 464.053773][T13542] do_syscall_64+0x12c/0x3b0 [ 464.053804][T13542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.053874][T13542] RIP: 0033:0x7f2497a0cdd9 [ 464.053892][T13542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.053911][T13542] RSP: 002b:00007f2496425028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 464.054008][T13542] RAX: ffffffffffffffda RBX: 00007f2497c86180 RCX: 00007f2497a0cdd9 [ 464.054023][T13542] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 464.054037][T13542] RBP: 00007f2497aa2d69 R08: 0000000000000000 R09: 0000000000000000 [ 464.054050][T13542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.054138][T13542] R13: 00007f2497c86218 R14: 00007f2497c86180 R15: 00007ffff9620418 [ 464.054156][T13542] [ 464.324055][T13542] memory: usage 233356kB, limit 307200kB, failcnt 1233 [ 464.331116][T13542] memory+swap: usage 310056kB, limit 9007199254740988kB, failcnt 0 [ 464.339074][T13542] kmem: usage 233048kB, limit 9007199254740988kB, failcnt 0 [ 464.346471][T13542] Memory cgroup stats for /syz5: [ 464.346723][T13542] cache 24576 [ 464.354974][T13542] rss 0 [ 464.357744][T13542] shmem 16384 [ 464.361040][T13542] mapped_file 0 [ 464.364639][T13542] dirty 0 [ 464.367579][T13542] writeback 0 [ 464.370868][T13542] workingset_refault_anon 167 [ 464.375636][T13542] workingset_refault_file 879 [ 464.380315][T13542] swap 78540800 [ 464.383807][T13542] swapcached 95690752 [ 464.387797][T13542] pgpgin 622184 [ 464.391258][T13542] pgpgout 622175 [ 464.394872][T13542] pgfault 638426 [ 464.398466][T13542] pgmajfault 80 [ 464.401939][T13542] inactive_anon 4096 [ 464.405894][T13542] active_anon 24576 [ 464.409794][T13542] inactive_file 0 [ 464.413543][T13542] active_file 8192 [ 464.417336][T13542] unevictable 0 [ 464.420814][T13542] hierarchical_memory_limit 314572800 [ 464.426235][T13542] hierarchical_memsw_limit 9223372036854771712 [ 464.432388][T13542] total_cache 24576 [ 464.436314][T13542] total_rss 0 [ 464.439599][T13542] total_shmem 16384 [ 464.443429][T13542] total_mapped_file 0 [ 464.447410][T13542] total_dirty 0 [ 464.450862][T13542] total_writeback 0 [ 464.454722][T13542] total_workingset_refault_anon 167 [ 464.459955][T13542] total_workingset_refault_file 879 [ 464.465208][T13542] total_swap 78540800 [ 464.469361][T13542] total_swapcached 95690752 [ 464.473904][T13542] total_pgpgin 622184 [ 464.477890][T13542] total_pgpgout 622175 [ 464.481967][T13542] total_pgfault 638426 [ 464.486162][T13542] total_pgmajfault 80 [ 464.490959][T13542] total_inactive_anon 4096 [ 464.495782][T13542] total_active_anon 24576 [ 464.500152][T13542] total_inactive_file 0 [ 464.504401][T13542] total_active_file 8192 [ 464.508821][T13542] total_unevictable 0 [ 464.512968][T13542] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2765,pid=13539,uid=0 [ 464.527793][T13542] Memory cgroup out of memory: Killed process 13539 (syz.5.2765) total-vm:94300kB, anon-rss:1228kB, file-rss:22500kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 464.738868][T13561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.769663][T13561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.189928][T13569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.219999][T13569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.411645][T13546] loop7: detected capacity change from 0 to 512 [ 465.474750][T13546] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.942254][T13579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.962022][T13579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.200270][T13579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.209987][T13579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.349369][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2775'. [ 466.406306][T13586] loop7: detected capacity change from 0 to 128 [ 466.434975][T13586] EXT4-fs mount: 6 callbacks suppressed [ 466.434995][T13586] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.517386][T13586] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.586713][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 466.586729][ T28] audit: type=1400 audit(2000000010.309:9038): avc: denied { write } for pid=13585 comm="syz.7.2778" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.657255][ T28] audit: type=1400 audit(2000000010.369:9039): avc: denied { write } for pid=13585 comm="syz.7.2778" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.699995][T13594] loop2: detected capacity change from 0 to 128 [ 466.710476][T11465] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.754244][T13594] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.812354][T13594] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.894529][T13608] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2782'. [ 466.949716][T13609] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2782'. [ 467.051377][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.352620][T13615] loop2: detected capacity change from 0 to 1024 [ 467.427097][T13615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.452401][T13615] EXT4-fs (loop2): shut down requested (1) [ 467.489007][T13615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.508117][T13620] program syz.1.2786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.522268][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2788'. [ 467.547761][T13627] loop5: detected capacity change from 0 to 512 [ 467.580581][T13627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.800978][T13626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2789'. [ 467.895403][T13635] loop2: detected capacity change from 0 to 2048 [ 467.955574][T13635] loop2: p3 < > p4 < > [ 467.959908][T13635] loop2: partition table partially beyond EOD, truncated [ 467.968020][T13635] loop2: p3 start 4284289 is beyond EOD, truncated [ 467.986689][ T2980] loop2: p3 < > p4 < > [ 467.992946][ T2980] loop2: partition table partially beyond EOD, truncated [ 468.000226][ T2980] loop2: p3 start 4284289 is beyond EOD, truncated [ 468.019827][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 468.043446][T13647] loop2: detected capacity change from 0 to 128 [ 468.060407][T13647] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 468.073317][T13647] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.096482][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.233568][T13652] loop2: detected capacity change from 0 to 512 [ 468.257165][T13652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.322495][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.356294][T13656] loop5: detected capacity change from 0 to 512 [ 468.375208][T13656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.493631][T13656] Invalid option length (57448) for dns_resolver key [ 468.528745][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2800'. [ 468.539852][T13671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.550501][T13671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.592286][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.690868][T13680] loop0: detected capacity change from 0 to 1024 [ 468.757112][T13684] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2803'. [ 468.769222][T13671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.802139][T13684] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2803'. [ 468.814740][T13671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.858633][T13680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.892789][T13680] EXT4-fs (loop0): shut down requested (1) [ 468.946323][T13680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.968108][ T295] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.048338][ T295] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.129245][ T295] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.204682][ T295] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.218664][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.266990][T13699] loop2: detected capacity change from 0 to 128 [ 469.291353][T13699] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.317243][T13699] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.328681][ T295] bridge_slave_1: left allmulticast mode [ 469.337898][ T28] audit: type=1400 audit(2000000013.059:9040): avc: denied { write } for pid=13698 comm="syz.2.2807" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.345459][ T295] bridge_slave_1: left promiscuous mode [ 469.369104][ T28] audit: type=1400 audit(2000000013.089:9041): avc: denied { write } for pid=13698 comm="syz.2.2807" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.393146][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.403642][ T295] bridge_slave_0: left allmulticast mode [ 469.409441][ T295] bridge_slave_0: left promiscuous mode [ 469.419920][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.457592][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 469.514026][T13707] loop2: detected capacity change from 0 to 1024 [ 469.697695][T13707] loop2: detected capacity change from 0 to 128 [ 469.737714][T13707] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 469.787274][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.819416][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.839510][T13707] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 469.859708][ T295] bond0 (unregistering): Released all slaves [ 469.877113][ T295] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 469.893821][T13707] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2809: checksumming directory block 0 [ 469.919143][ T295] bond1 (unregistering): (slave vxcan5): Releasing backup interface [ 469.940743][ T295] bond1 (unregistering): Released all slaves [ 469.977042][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.026424][T13720] loop2: detected capacity change from 0 to 512 [ 470.046000][T13704] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2808'. [ 470.072505][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2813'. [ 470.088031][ T295] hsr_slave_0: left promiscuous mode [ 470.103597][ T295] hsr_slave_1: left promiscuous mode [ 470.105020][T13720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.123687][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.131105][ T295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.145539][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.154521][ T295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.164661][ T295] veth1_macvtap: left promiscuous mode [ 470.170197][ T295] veth0_macvtap: left promiscuous mode [ 470.176062][ T295] veth1_vlan: left promiscuous mode [ 470.181312][ T295] veth0_vlan: left promiscuous mode [ 470.256730][ T28] audit: type=1400 audit(2000000013.979:9042): avc: denied { write } for pid=13727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.281884][ T295] team0 (unregistering): Port device team_slave_1 removed [ 470.322427][ T28] audit: type=1400 audit(2000000014.039:9043): avc: denied { write } for pid=13740 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.359266][T13720] Invalid option length (57448) for dns_resolver key [ 470.376434][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 470.384915][T13681] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.394322][T13681] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.401752][T13681] bridge_slave_0: entered allmulticast mode [ 470.408653][T13681] bridge_slave_0: entered promiscuous mode [ 470.423327][T13681] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.430859][T13681] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.438222][T13681] bridge_slave_1: entered allmulticast mode [ 470.444848][T13681] bridge_slave_1: entered promiscuous mode [ 470.468009][T13681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.486246][T13681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.507808][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.525272][T13681] team0: Port device team_slave_0 added [ 470.542136][T13681] team0: Port device team_slave_1 added [ 470.571465][T13681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.582887][T13747] loop2: detected capacity change from 0 to 1024 [ 470.594666][T13681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.627446][T13681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.643432][T13681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.651901][T13681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.691431][T13747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.707253][T13681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.726635][ T295] IPVS: stop unused estimator thread 0... [ 470.743210][T13747] EXT4-fs (loop2): shut down requested (1) [ 470.747776][T13681] hsr_slave_0: entered promiscuous mode [ 470.761432][T13681] hsr_slave_1: entered promiscuous mode [ 470.773181][T13754] loop7: detected capacity change from 0 to 128 [ 470.789597][T13747] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.801319][T13757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.811709][T13757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.839901][T13754] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 470.872516][T13754] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.897321][ T28] audit: type=1400 audit(2000000014.619:9044): avc: denied { write } for pid=13753 comm="syz.7.2818" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.949754][ T28] audit: type=1400 audit(2000000014.659:9045): avc: denied { write } for pid=13753 comm="syz.7.2818" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.981066][ T28] audit: type=1400 audit(2000000014.699:9046): avc: denied { write } for pid=13755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.016411][ T28] audit: type=1400 audit(2000000014.739:9047): avc: denied { write } for pid=13777 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.040255][T13757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.051026][T13757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.074530][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 471.083549][T11465] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.195083][T13780] loop7: detected capacity change from 0 to 128 [ 471.263633][T13780] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 471.285370][T13776] Invalid option length (57448) for dns_resolver key [ 471.286053][T13681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.295168][T13780] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.318816][T13681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.330094][T13681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.358405][T13681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.375247][T11465] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.377044][T13681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.413431][T13681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.431650][T13681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 471.461397][T13681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.526084][T13812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.545792][T13812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.557635][T13681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.575590][T13681] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.606700][ T3890] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.613818][ T3890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.636862][T13822] loop5: detected capacity change from 0 to 512 [ 471.657171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.664360][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.688075][T13822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.724540][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 471.724556][ T28] audit: type=1400 audit(2000000015.439:9050): avc: denied { write } for pid=13814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.756757][T13767] loop2: detected capacity change from 0 to 512 [ 471.767367][T13812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.787317][T13812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.804332][ T28] audit: type=1400 audit(2000000015.529:9051): avc: denied { write } for pid=13834 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.814234][T13767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.848456][T13767] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.937159][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.037493][T13681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.053736][T13844] program syz.2.2826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.073967][T13822] Invalid option length (57448) for dns_resolver key [ 472.180907][T13681] veth0_vlan: entered promiscuous mode [ 472.210002][T13681] veth1_vlan: entered promiscuous mode [ 472.237560][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.239140][T13681] veth0_macvtap: entered promiscuous mode [ 472.263392][T13681] veth1_macvtap: entered promiscuous mode [ 472.276549][T13681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.295560][T13681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.318045][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2831'. [ 472.322030][T12960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.322071][T12960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.322105][T12960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.322193][T12960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.382166][T13870] rdma_op ffff88811ba5c580 conn xmit_rdma 0000000000000000 [ 472.560959][T13887] program syz.2.2837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.807597][T13895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.826019][T13866] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2830'. [ 473.066520][T13876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.084152][T13876] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.178139][T13895] Invalid option length (57448) for dns_resolver key [ 473.218600][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.296051][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.363830][T13916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2844'. [ 473.375145][T13917] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2842'. [ 473.428418][T13919] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2842'. [ 473.834258][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2846'. [ 473.921382][T13922] rdma_op ffff88811ba1ed80 conn xmit_rdma 0000000000000000 [ 473.980481][T13924] team0: Port device team_slave_0 removed [ 474.050454][T13934] program syz.7.2849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.051779][T13928] set_capacity_and_notify: 2 callbacks suppressed [ 474.051824][T13928] loop2: detected capacity change from 0 to 764 [ 474.160193][T13940] loop7: detected capacity change from 0 to 512 [ 474.197626][T13940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.278507][T13951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2852'. [ 474.347762][T13953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2852'. [ 474.998576][T13963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2856'. [ 475.022058][T13940] Invalid option length (57448) for dns_resolver key [ 475.133645][T13974] loop2: detected capacity change from 0 to 128 [ 475.151716][T11465] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.167928][T13974] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 475.184992][T13974] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.250759][T13981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2861'. [ 475.295344][T13981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2861'. [ 475.381029][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2862'. [ 475.434730][ T28] audit: type=1400 audit(2000000019.059:9052): avc: denied { write } for pid=13973 comm="syz.2.2860" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.594154][ T28] audit: type=1400 audit(2000000019.229:9053): avc: denied { write } for pid=13973 comm="syz.2.2860" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.747389][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 475.826938][T13990] program syz.2.2864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.866426][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2868'. [ 475.996901][T13996] loop0: detected capacity change from 0 to 764 [ 476.013632][T14007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2867'. [ 476.105943][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2867'. [ 476.723439][T14026] loop7: detected capacity change from 0 to 1024 [ 476.770388][T14026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.790059][T14026] EXT4-fs (loop7): shut down requested (1) [ 476.815933][T14026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.913768][T14038] loop7: detected capacity change from 0 to 764 [ 476.960815][T14045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.989940][T14045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.996317][T14041] program syz.5.2879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.103949][ T28] audit: type=1400 audit(2000000020.819:9054): avc: denied { mounton } for pid=14037 comm="syz.7.2878" path="/proc/344/task" dev="proc" ino=44995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 477.208058][T14045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.227779][T14045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.300455][T14060] loop0: detected capacity change from 0 to 1024 [ 477.495908][T14066] loop7: detected capacity change from 0 to 764 [ 477.839724][T14073] team0: Port device team_slave_0 removed [ 477.888243][T14060] loop0: detected capacity change from 0 to 128 [ 478.013484][T14060] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 478.057265][T14060] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 478.091313][T14060] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.2887: checksumming directory block 0 [ 478.126591][T13260] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.217846][T14086] program syz.0.2893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.480540][ T295] Bluetooth: hci0: Frame reassembly failed (-84) [ 478.796858][T14108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.817817][T14108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.909659][ T28] audit: type=1400 audit(2000000022.629:9055): avc: denied { create } for pid=14115 comm="syz.0.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 478.910374][T14116] syzkaller0: entered promiscuous mode [ 478.946139][T14116] syzkaller0: entered allmulticast mode [ 478.976451][ T28] audit: type=1400 audit(2000000022.699:9056): avc: denied { accept } for pid=14115 comm="syz.0.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 479.011217][T14119] loop2: detected capacity change from 0 to 1024 [ 479.035825][T14108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.071536][T14108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.090009][T14119] loop2: detected capacity change from 0 to 128 [ 479.106773][T14119] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 479.131973][T14119] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 479.197761][T14125] __nla_validate_parse: 6 callbacks suppressed [ 479.197778][T14125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2905'. [ 479.243040][T14125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2905'. [ 479.260541][T14119] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2904: checksumming directory block 0 [ 479.309743][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.692559][T14130] program syz.1.2907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.727787][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2908'. [ 479.779075][T14135] loop5: detected capacity change from 0 to 128 [ 479.792608][T14131] loop2: detected capacity change from 0 to 764 [ 479.857398][T14135] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.880123][T14135] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.937319][T12960] bridge_slave_1: left allmulticast mode [ 479.948495][T12960] bridge_slave_1: left promiscuous mode [ 479.954950][T12960] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.972996][ T3730] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.986877][T12960] bridge_slave_0: left allmulticast mode [ 479.992711][T12960] bridge_slave_0: left promiscuous mode [ 479.998750][T12960] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.072609][T14149] loop5: detected capacity change from 0 to 2048 [ 480.090487][T14151] rdma_op ffff88812bfcf980 conn xmit_rdma 0000000000000000 [ 480.123277][T14149] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 480.133491][T14149] loop5: partition table partially beyond EOD, truncated [ 480.163076][T14149] loop5: p1 size 393216 extends beyond EOD, truncated [ 480.193751][T14149] loop5: p3 start 4225 is beyond EOD, truncated [ 480.206974][T14149] loop5: p5 size 393216 extends beyond EOD, truncated [ 480.259420][T12960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.301070][T12960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.319797][T12960] bond0 (unregistering): Released all slaves [ 480.354443][ T3863] udevd[3863]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 480.369506][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 480.381189][T14159] loop5: detected capacity change from 0 to 1024 [ 480.396418][T12960] hsr_slave_0: left promiscuous mode [ 480.402370][T14161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.414571][T12960] hsr_slave_1: left promiscuous mode [ 480.418817][T14159] loop5: detected capacity change from 0 to 128 [ 480.420083][T14161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.432986][T12960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.442191][T12960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.444744][T14159] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 480.460163][T12960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.470528][T12960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.471311][T14159] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 480.493053][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 480.499208][ T3606] Bluetooth: hci0: command 0x1003 tx timeout [ 480.499541][T14159] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.2916: checksumming directory block 0 [ 480.588741][T12960] veth1_macvtap: left promiscuous mode [ 480.603674][T12960] veth0_macvtap: left promiscuous mode [ 480.619083][T12960] veth1_vlan: left promiscuous mode [ 480.629634][T14166] program syz.7.2919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.639837][T12960] veth0_vlan: left promiscuous mode [ 480.654262][T14161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.678093][ T3730] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.692601][T14161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.871507][T14173] loop2: detected capacity change from 0 to 128 [ 480.926107][T14173] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 480.989631][T14173] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.227484][T12960] team_slave_1 (unregistering): left allmulticast mode [ 481.243880][T12960] team0 (unregistering): Port device team_slave_1 removed [ 481.347483][T14183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2923'. [ 481.409334][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2923'. [ 481.564864][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.631848][T14171] loop5: detected capacity change from 0 to 512 [ 481.890051][T14191] rdma_op ffff88811ad99980 conn xmit_rdma 0000000000000000 [ 482.136493][T14203] loop7: detected capacity change from 0 to 136 [ 482.597676][T14202] loop5: detected capacity change from 0 to 128 [ 482.616190][T14201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15649 sclass=netlink_route_socket pid=14201 comm=syz.7.2926 [ 482.646596][T14194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.662919][T14203] ================================================================== [ 482.671055][T14203] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 482.671468][T14202] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 482.680918][T14203] [ 482.680928][T14203] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 482.680948][T14203] tick_do_update_jiffies64+0x113/0x1c0 [ 482.680988][T14203] tick_nohz_handler+0x8d/0x3d0 [ 482.713664][T14203] __hrtimer_run_queues+0x276/0x4f0 [ 482.718887][T14203] hrtimer_interrupt+0x261/0x850 [ 482.723854][T14203] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 482.729768][T14203] sysvec_apic_timer_interrupt+0x6f/0x80 [ 482.735066][T14194] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2924: bg 0: block 234: padding at end of block bitmap is not set [ 482.735418][T14203] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.755627][T14203] __tsan_read8+0xbe/0x190 [ 482.760070][T14203] mnt_want_write+0x6d/0x2f0 [ 482.760125][T14202] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.764671][T14203] filename_create+0xcc/0x220 [ 482.764706][T14203] filename_symlinkat+0x94/0x2b0 [ 482.783156][T14194] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 482.784723][T14203] __se_sys_symlink+0x42/0x1b0 [ 482.800008][ T28] audit: type=1400 audit(2000000026.459:9057): avc: denied { write } for pid=14193 comm="syz.2.2924" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.801623][T14203] __x64_sys_symlink+0x31/0x40 [ 482.828063][T14203] x64_sys_call+0x2465/0x3020 [ 482.832766][T14203] do_syscall_64+0x12c/0x3b0 [ 482.837377][T14203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.843284][T14203] [ 482.845610][T14203] read to 0xffffffff86c07a00 of 8 bytes by task 14203 on cpu 1: [ 482.853256][T14203] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 482.859529][T14203] count_shadow_nodes+0x6a/0x250 [ 482.864476][T14203] do_shrink_slab+0x63/0x660 [ 482.869083][T14203] shrink_slab+0x545/0x8f0 [ 482.873505][T14203] shrink_node+0x6d4/0x20a0 [ 482.878014][T14203] do_try_to_free_pages+0x408/0xc90 [ 482.883215][T14203] try_to_free_mem_cgroup_pages+0x201/0x420 [ 482.889114][T14203] try_charge_memcg+0x373/0xa10 [ 482.893972][T14203] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 482.899520][T14203] __alloc_frozen_pages_noprof+0x18a/0x350 [ 482.905336][T14203] alloc_pages_mpol+0xb3/0x260 [ 482.910102][T14203] alloc_pages_noprof+0x8f/0x140 [ 482.915049][T14203] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 482.920950][T14203] __kvmalloc_node_noprof+0x3d4/0x640 [ 482.926347][T14203] futex_hash_allocate+0x190/0x9a0 [ 482.931471][T14203] futex_hash_prctl+0xd8/0xf0 [ 482.936310][T14203] __se_sys_prctl+0x4f4/0x1400 [ 482.941089][T14203] __x64_sys_prctl+0x67/0x80 [ 482.945685][T14203] x64_sys_call+0x2533/0x3020 [ 482.950367][T14203] do_syscall_64+0x12c/0x3b0 [ 482.954968][T14203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.960871][T14203] [ 482.963202][T14203] value changed: 0x0000000100004729 -> 0x000000010000472a [ 482.970306][T14203] [ 482.972623][T14203] Reported by Kernel Concurrency Sanitizer on: [ 482.978767][T14203] CPU: 1 UID: 0 PID: 14203 Comm: syz.7.2926 Tainted: G W syzkaller #0 PREEMPT(full) [ 482.989707][T14203] Tainted: [W]=WARN [ 482.993501][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.003556][T14203] ================================================================== [ 483.012764][T14194] EXT4-fs (loop2): This should not happen!! Data will be lost [ 483.012764][T14194] [ 483.043568][T14194] EXT4-fs (loop2): Total free blocks count 0 [ 483.062899][T14194] EXT4-fs (loop2): Free/Dirty block details [ 483.083554][T14194] EXT4-fs (loop2): free_blocks=0 [ 483.092879][T14194] EXT4-fs (loop2): dirty_blocks=16 [ 483.100728][T14194] EXT4-fs (loop2): Block reservation details [ 483.108713][T14194] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 483.162712][T14203] syz.7.2926 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 483.176937][T14203] CPU: 1 UID: 0 PID: 14203 Comm: syz.7.2926 Tainted: G W syzkaller #0 PREEMPT(full) [ 483.177026][T14203] Tainted: [W]=WARN [ 483.177033][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.177049][T14203] Call Trace: [ 483.177057][T14203] [ 483.177068][T14203] __dump_stack+0x1d/0x30 [ 483.177095][T14203] dump_stack_lvl+0x95/0xd0 [ 483.177122][T14203] dump_stack+0x15/0x1b [ 483.177210][T14203] dump_header+0x80/0x240 [ 483.177238][T14203] oom_kill_process+0x295/0x350 [ 483.177275][T14203] out_of_memory+0x97d/0xb80 [ 483.177307][T14203] try_charge_memcg+0x62f/0xa10 [ 483.177413][T14203] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 483.177442][T14203] __alloc_frozen_pages_noprof+0x18a/0x350 [ 483.177470][T14203] alloc_pages_mpol+0xb3/0x260 [ 483.177564][T14203] alloc_pages_noprof+0x8f/0x140 [ 483.177636][T14203] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 483.177667][T14203] __kvmalloc_node_noprof+0x3d4/0x640 [ 483.177716][T14203] ? futex_hash_allocate+0x190/0x9a0 [ 483.177807][T14203] ? futex_hash_allocate+0x190/0x9a0 [ 483.177849][T14203] futex_hash_allocate+0x190/0x9a0 [ 483.177890][T14203] ? cap_task_prctl+0x13f/0x6b0 [ 483.178008][T14203] futex_hash_prctl+0xd8/0xf0 [ 483.178039][T14203] __se_sys_prctl+0x4f4/0x1400 [ 483.178118][T14203] __x64_sys_prctl+0x67/0x80 [ 483.178144][T14203] x64_sys_call+0x2533/0x3020 [ 483.178171][T14203] do_syscall_64+0x12c/0x3b0 [ 483.178209][T14203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.178252][T14203] RIP: 0033:0x7fa9795dcdd9 [ 483.178283][T14203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.178364][T14203] RSP: 002b:00007fa977ff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 483.178428][T14203] RAX: ffffffffffffffda RBX: 00007fa979856180 RCX: 00007fa9795dcdd9 [ 483.178461][T14203] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 483.178478][T14203] RBP: 00007fa979672d69 R08: 0000000000000000 R09: 0000000000000000 [ 483.178495][T14203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.178511][T14203] R13: 00007fa979856218 R14: 00007fa979856180 R15: 00007ffe3931a498 [ 483.178535][T14203] [ 483.178600][T14203] memory: usage 307200kB, limit 307200kB, failcnt 289 [ 483.298058][ T28] audit: type=1400 audit(2000000027.019:9058): avc: denied { write } for pid=14200 comm="syz.5.2928" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.302966][T14203] memory+swap: usage 311600kB, limit 9007199254740988kB, failcnt 0 [ 483.310975][ T28] audit: type=1400 audit(2000000027.039:9059): avc: denied { write } for pid=14200 comm="syz.5.2928" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.318400][T14203] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 483.469335][T14203] Memory cgroup stats for /syz7: [ 483.469562][T14203] cache 0 [ 483.477511][T14203] rss 0 [ 483.480267][T14203] shmem 0 [ 483.483233][T14203] mapped_file 0 [ 483.486761][T14203] dirty 0 [ 483.486772][T14203] writeback 0 [ 483.486781][T14203] workingset_refault_anon 154 [ 483.486791][T14203] workingset_refault_file 0 [ 483.502196][T14203] swap 4505600 [ 483.505573][T14203] swapcached 5144576 [ 483.509470][T14203] pgpgin 123023 [ 483.512942][T14203] pgpgout 123023 [ 483.516505][T14203] pgfault 114081 [ 483.520101][T14203] pgmajfault 52 [ 483.524250][T14203] inactive_anon 0 [ 483.529243][T14203] active_anon 0 [ 484.065928][ T3298] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 484.086836][T14203] inactive_file 0 [ 484.090738][T14203] active_file 0 [ 484.094301][T14203] unevictable 0 [ 484.097751][T14203] hierarchical_memory_limit 314572800 [ 484.103128][T14203] hierarchical_memsw_limit 9223372036854771712 [ 484.109333][T14203] total_cache 0 [ 484.112791][T14203] total_rss 0 [ 484.116099][T14203] total_shmem 0 [ 484.119597][T14203] total_mapped_file 0 [ 484.123609][T14203] total_dirty 0 [ 484.127166][T14203] total_writeback 0 [ 484.131181][T14203] total_workingset_refault_anon 154 [ 484.136396][T14203] total_workingset_refault_file 0 [ 484.141532][T14203] total_swap 4505600 [ 484.145443][T14203] total_swapcached 5144576 [ 484.149902][T14203] total_pgpgin 123023 [ 484.153881][T14203] total_pgpgout 123023 [ 484.157986][T14203] total_pgfault 114081 [ 484.162154][T14203] total_pgmajfault 52 [ 484.168745][T14203] total_inactive_anon 0 [ 484.172950][T14203] total_active_anon 0 [ 484.177021][T14203] total_inactive_file 0 [ 484.181180][T14203] total_active_file 0 [ 484.185264][T14203] total_unevictable 0 [ 484.189256][T14203] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2926,pid=14195,uid=0 [ 484.203992][T14203] Memory cgroup out of memory: Killed process 14203 (syz.7.2926) total-vm:94300kB, anon-rss:1260kB, file-rss:22516kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 484.233325][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.279111][ T3730] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.