last executing test programs: 7m55.358381007s ago: executing program 32 (id=26): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x41500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x200088, 0x5, 0x100000000008, 0x9, 0x0, 0x0, 0x2, 0x0, 0x200000101ffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYRES8=r5], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000300), &(0x7f0000000700)=r6}, 0x20) write(r1, &(0x7f0000000d00)='nf \\27.0.0.1 2000000000 localhos\\\n', 0x24) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a030400050000000000000a0000050900010073797a310000000078000480200001800a00010071756f7461000000100002800c00014000000000000000052c000180080001006c6f670020000280080003400000000106000140000800000b0002406c6f6f6b75700000140001800b0001006c6f6f6b7570000004000280140001800a0001007265646972000000040002800900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f00000000c0)={0xfffffffc, 0x0, 0x9, 0x1}, 0x10) 7m37.008523517s ago: executing program 33 (id=50): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m10.286402567s ago: executing program 34 (id=267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@local}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000900)={0x28, 0x13, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x28}}, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000100)="11020002", 0x4}, {&(0x7f00000002c0)="a4920700", 0x4}], 0x3) 6m46.921307486s ago: executing program 35 (id=567): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10040000}, 0x44880) close(0x3) 6m40.10052479s ago: executing program 36 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x48) open_by_handle_at(r2, &(0x7f00000006c0)=@ceph_nfs_fh={0x8, 0xfe, {0x42}}, 0x553c00) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb1}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {{@in=@local, 0x0, 0x32}, 0x2, @in6=@private2, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x23c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0xc}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x10}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000040)='\x00\x00', 0x2}], 0x1) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) 3m14.273878536s ago: executing program 37 (id=2345): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') lseek(r2, 0x2, 0x2) getdents64(r2, 0xffffffffffffffff, 0x43) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{}, 0x1, 0x29f, 0x6}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in6=@empty, 0x0, 0x56, 0x5, 0x4, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x5, 0x1, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x2000000000000007, 0x0, 0x4, 0x1}, 0x4000006, 0x20000, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x40, 0x1}}, 0xe8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7f, 0x6, "2ab4ff9ba7420c1113bf4e00ebff0000001000"}) r6 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0xff85, 0x6, 0x2001, 0x3, 0x12, "db2d016fbe8ee2df35ee090000000800"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x9) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x5501, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m10.341589938s ago: executing program 5 (id=2373): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, 0x0, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x9000001d}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0xd54, &(0x7f0000000180)=0x0) io_pgetevents(r5, 0x3, 0x6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000001f00000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c000980080001400001"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000440)) close(0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3m9.233730094s ago: executing program 5 (id=2376): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x85, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket(0x1d, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES8=r2], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa00000069000000180000000000000010"], 0x30}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 3m9.169855596s ago: executing program 9 (id=2377): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES8=r2], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r5, 0x2, {0x2, 0x0, 0x1}, 0xfe}, 0x18) write$cgroup_subtree(r1, 0x0, 0xfe33) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0, 0xfffffffffffffea2}, {0x0}, {0x0}, {0x0, 0xfffffe73}], 0x5, &(0x7f0000000040), 0xffffffffffffff63, 0x4040}, 0x40) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="380100", @ANYRES16, @ANYBLOB="000229bd7000ffdbdf25270000000800", @ANYRES32=0x0, @ANYBLOB="06003600020000000600360008000000fc002a00710701ffff00ff1201ffa8e31fa2b5034720501946cbae9c65b11186af041db71d64dd9792a3693c41e66054d05357634a8a836b542711977627c39a29d3d64f35e1d6c19e97dfe0e72ee4ec79016047933fefe77d3deff0b90b1e7062cfe70e18f007219ed68a18028a5c404e1e16f48cb9a6204745466da0d08f188d9992b849edcbfe23c51721d5f42c0c535b5da4e7e69d857728a2c4621fae661f37403b7d2ba9e94d36b68d63a1040e00db7fdf52ce0276060803070003000301ad842f040340ffffffffffff070000000802110000012700000802110000010600000018"], 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c101) 3m7.610009212s ago: executing program 0 (id=2378): r0 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x0, 0x0, 0x0, 0x87f1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x17f, 0x101}, 0x104a8, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x200000, 0x9) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x6a}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000640)={r4, @in={{0x2, 0x4e23, @remote}}, [0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x0, 0xa2a0, 0x9, 0x5, 0x38, 0x1, 0x400, 0x8000000000000001]}, &(0x7f0000000740)=0x100) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x6020400) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) 3m7.334137579s ago: executing program 5 (id=2380): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x85, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket(0x1d, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES8=r3], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r6, 0x2, {0x2, 0x0, 0x1}, 0xfe}, 0x18) write$cgroup_subtree(r2, 0x0, 0xfe33) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0, 0xfffffffffffffea2}, {0x0}, {0x0}, {0x0, 0xfffffe73}], 0x5, &(0x7f0000000040), 0xffffffffffffff63, 0x4040}, 0x40) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="380100", @ANYRES16, @ANYBLOB="000229bd7000ffdbdf25270000000800", @ANYRES32=0x0, @ANYBLOB="06003600020000000600360008000000fc002a00710701ffff00ff1201ffa8e31fa2b5034720501946cbae9c65b11186af041db71d64dd9792a3693c41e66054d05357634a8a836b542711977627c39a29d3d64f35e1d6c19e97dfe0e72ee4ec79016047933fefe77d3deff0b90b1e7062cfe70e18f007219ed68a18028a5c404e1e16f48cb9a6204745466da0d08f188d9992b849edcbfe23c51721d5f42c0c535b5da4e7e69d857728a2c4621fae661f37403b7d2ba9e94d36b68d63a1040e00db7fdf52ce0276060803070003000301ad842f040340ffffffffffff070000000802110000012700000802110000010600000018"], 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c101) 3m7.073310105s ago: executing program 0 (id=2381): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x2c43) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000c40), 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}, 0xf5}], 0x1, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa0040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x12, &(0x7f0000000100)={0x8, &(0x7f00000003c0)=[{0x2457, 0x9, 0x10, 0x98000000}, {0x2, 0xea, 0x40, 0x7}, {0x2, 0x1, 0x3, 0x1}, {0xbb, 0x5, 0xd4, 0xb4}, {0x14, 0x6, 0x5, 0x17}, {0x1, 0xd0, 0xf7, 0x1}, {0x2158, 0x7f, 0x9, 0x1}, {0x0, 0x0, 0xe, 0x1}]}) getitimer(0x2, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) futex_waitv(&(0x7f0000000400)=[{0x2eb, &(0x7f0000000200)=0xfffffffffffffffe, 0x86}], 0x1, 0x0, 0x0, 0x1) getpid() r1 = socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x85, 0xc}, {0x0, 0x88, 0xc, 0x6}]}) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1008da00, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 3m6.86326291s ago: executing program 9 (id=2382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x2c, r2, 0x1, 0x70bf2c, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xaa, 0x16}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getdents64(r4, 0xfffffffffffffffe, 0x29) read$char_usb(r4, &(0x7f0000000480)=""/141, 0x8d) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x14, r7, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40091) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x86, 0x2, 0x2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0xa2, &(0x7f0000000680)={0x0, 0xf519, 0x2, 0x1, 0xfffffffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) fchmodat(r9, &(0x7f0000000140)='./file0\x00', 0x14c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 3m6.407585151s ago: executing program 0 (id=2383): r0 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x0, 0x0, 0x0, 0x87f1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x17f, 0x101}, 0x104a8, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x200000, 0x9) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x6a}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000640)={r4, @in={{0x2, 0x4e23, @remote}}, [0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x0, 0xa2a0, 0x9, 0x5, 0x38, 0x1, 0x400, 0x8000000000000001]}, &(0x7f0000000740)=0x100) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000040), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x6020400) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) 3m6.135540337s ago: executing program 5 (id=2384): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(r0, 0x0) creat(0x0, 0x0) setns(0xc9, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x300, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000480)) 3m5.730304087s ago: executing program 9 (id=2385): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') lseek(r2, 0x2, 0x2) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{}, 0x1, 0x29f, 0x6}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in6=@empty, 0x0, 0x56, 0x5, 0x4, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x5, 0x1, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x2000000000000007, 0x0, 0x4, 0x1}, 0x4000006, 0x20000, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x40, 0x1}}, 0xe8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7f, 0x6, "2ab4ff9ba7420c1113bf4e00ebff0000001000"}) r7 = syz_open_pts(r6, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000140)={0xff85, 0x6, 0x2001, 0x3, 0x12, "db2d016fbe8ee2df35ee090000000800"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x9) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x5501, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m4.929085576s ago: executing program 5 (id=2387): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x85, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket(0x1d, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x30}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) 3m3.296057304s ago: executing program 9 (id=2388): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x2c, r2, 0x1, 0x70bf2c, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xaa, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getdents64(r4, 0xfffffffffffffffe, 0x29) read$char_usb(r4, &(0x7f0000000480)=""/141, 0x8d) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x86, 0x2, 0x2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0xa2, &(0x7f0000000680)={0x0, 0xf519, 0x2, 0x1, 0xfffffffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3m1.405270578s ago: executing program 0 (id=2389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11e8e8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="040000000400000004000000050001", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, 0x0, 0x0}, 0x20) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x400}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 3m1.173941874s ago: executing program 5 (id=2391): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') lseek(r2, 0x2, 0x2) getdents64(r2, 0xffffffffffffffff, 0x43) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{}, 0x1, 0x29f, 0x6}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in6=@empty, 0x0, 0x56, 0x5, 0x4, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x5, 0x1, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x2000000000000007, 0x0, 0x4, 0x1}, 0x4000006, 0x20000, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x40, 0x1}}, 0xe8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7f, 0x6, "2ab4ff9ba7420c1113bf4e00ebff0000001000"}) r6 = syz_open_pts(r5, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0xff85, 0x6, 0x2001, 0x3, 0x12, "db2d016fbe8ee2df35ee090000000800"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x9) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$EVIOCRMFF(r3, 0x5501, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m1.169173064s ago: executing program 9 (id=2392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001240)={'syztnl1\x00', &(0x7f00000011c0)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x7, 0x4, {{0xf, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x80, 0x4, 0x0, @local, @loopback, {[@timestamp={0x44, 0x28, 0x44, 0x0, 0x0, [0x800, 0x1000, 0x7, 0x22f82e6a, 0x1800, 0x81, 0x1, 0x3, 0x1793]}]}}}}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r3}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000004ac0)=[{{&(0x7f0000001080)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5113}, 0x1c, &(0x7f00000012c0)=[{&(0x7f00000010c0)="d2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000540), &(0x7f0000000700)=r1}, 0x3d) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0xfffffffd, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x6, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02683671f26a72b2a800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="00000000010000000400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r7, 0x0, '\x00', 0x0, r6, 0x0, 0x80}, 0x48) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r8 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000700)=""/205, 0xff3f}, {&(0x7f0000000580)=""/194, 0xcb}, {&(0x7f00000000c0)=""/32, 0x1c}], 0x4) io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r8], 0x1) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) 3m0.465923071s ago: executing program 0 (id=2393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004ac0)=[{{&(0x7f0000001080)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5113}, 0x1c, &(0x7f00000012c0)=[{&(0x7f00000010c0)="d2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000540), &(0x7f0000000700)}, 0x3d) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0xfffffffd, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x6, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02683671f26a72b2a800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000010000000400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x80}, 0x48) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r5 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000700)=""/205, 0xff3f}, {&(0x7f0000000580)=""/194, 0xcb}, {&(0x7f00000000c0)=""/32, 0x1c}], 0x4) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) 3m0.177510058s ago: executing program 9 (id=2394): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 2m59.892324604s ago: executing program 0 (id=2395): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x85, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket(0x1d, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000"], 0x30}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) 2m45.754037427s ago: executing program 38 (id=2391): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') lseek(r2, 0x2, 0x2) getdents64(r2, 0xffffffffffffffff, 0x43) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{}, 0x1, 0x29f, 0x6}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in6=@empty, 0x0, 0x56, 0x5, 0x4, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x5, 0x1, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x2000000000000007, 0x0, 0x4, 0x1}, 0x4000006, 0x20000, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x40, 0x1}}, 0xe8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7f, 0x6, "2ab4ff9ba7420c1113bf4e00ebff0000001000"}) r6 = syz_open_pts(r5, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0xff85, 0x6, 0x2001, 0x3, 0x12, "db2d016fbe8ee2df35ee090000000800"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x9) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$EVIOCRMFF(r3, 0x5501, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m44.748515481s ago: executing program 39 (id=2395): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x85, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket(0x1d, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000"], 0x30}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) 2m44.703889922s ago: executing program 40 (id=2394): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 2m39.737994699s ago: executing program 4 (id=2405): sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x100000000) sendmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) getpid() syz_emit_ethernet(0x76, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6c, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x2d, 0x0, [{0x0, 0x9, "789607675ca638"}, {0x6, 0x2}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "73bc2300ad9d19a3"}, {0x6, 0x2}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "7f36"}]}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x23, 0x1, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x80000041, 0x0, 0x52, 0xfc0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1b8, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x2, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xa}}, @common=@unspec=@connmark={{0x30}, {0x1, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xb0}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r2 = socket(0x40000000015, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000004}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000001200)="80006466d3805699", 0x8, 0x200040d0, &(0x7f0000000000)={0xa, 0x4e22, 0x805, @mcast2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x40044591, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000be08f0ff000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m38.751613032s ago: executing program 4 (id=2406): sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x100000000) sendmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) getpid() syz_emit_ethernet(0x76, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6c, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x2d, 0x0, [{0x0, 0x9, "789607675ca638"}, {0x6, 0x2}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "73bc2300ad9d19a3"}, {0x6, 0x2}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "7f36"}]}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x23, 0x1, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x80000041, 0x0, 0x52, 0xfc0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1b8, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x2, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xa}}, @common=@unspec=@connmark={{0x30}, {0x1, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xb0}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r2 = socket(0x40000000015, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000004}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000be08f0ff000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.844042493s ago: executing program 4 (id=2407): mkdir(0x0, 0x1ff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002e0000042cbd70000072005c5b00"/32], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80d0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r4, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) close(r2) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'ip6_vti0\x00'}) 2m33.165810253s ago: executing program 4 (id=2408): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x85, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket(0x1d, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES8=r3], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r6, 0x2, {0x2, 0x0, 0x1}, 0xfe}, 0x18) write$cgroup_subtree(r2, 0x0, 0xfe33) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0, 0xfffffffffffffea2}, {0x0}, {0x0}, {0x0, 0xfffffe73}], 0x5, &(0x7f0000000040), 0xffffffffffffff63, 0x4040}, 0x40) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="380100", @ANYRES16, @ANYBLOB="000229bd7000ffdbdf25270000000800", @ANYRES32=0x0, @ANYBLOB="06003600020000000600360008000000fc002a00710701ffff00ff1201ffa8e31fa2b5034720501946cbae9c65b11186af041db71d64dd9792a3693c41e66054d05357634a8a836b542711977627c39a29d3d64f35e1d6c19e97dfe0e72ee4ec79016047933fefe77d3deff0b90b1e7062cfe70e18f007219ed68a18028a5c404e1e16f48cb9a6204745466da0d08f188d9992b849edcbfe23c51721d5f42c0c535b5da4e7e69d857728a2c4621fae661f37403b7d2ba9e94d36b68d63a1040e00db7fdf52ce0276060803070003000301ad842f040340ffffffffffff070000000802110000012700000802110000010600000018"], 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c101) 2m25.452099055s ago: executing program 4 (id=2409): r0 = fsopen(&(0x7f00000005c0)='devpts\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4a) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) rmdir(&(0x7f0000000000)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x78) sendfile(r3, r4, &(0x7f00000001c0), 0x8) fcntl$addseals(r4, 0x409, 0x8) fallocate(r4, 0x3, 0x29c00000000000, 0x20000) recvmsg$unix(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/209, 0xd1}], 0x1}, 0x0) mkdir(&(0x7f0000000700)='./bus\x00', 0x40) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a04f5a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x2000002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000003800)=""/4107, 0x100b}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000c00)=""/101, 0x65}, {&(0x7f0000000340)=""/274, 0x112}], 0x5}, 0x20001008}], 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) setns(0xc9, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf25010000000800010003000000040008802c000480050003000100000005000300060000e60400030005000000050800000000000005000300000000000800020001"], 0x54}, 0x1, 0x0, 0x0, 0x45bf3c16e682a60b}, 0x3000c804) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 2m25.076163334s ago: executing program 4 (id=2410): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf250b00000008fe13df2059798022ce530001007063690011000200303030303a30303a31302e300000000008000b00410e0000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)="d29e6b047d", 0x5) write(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x3) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x240448c1) epoll_create(0x6) mmap(&(0x7f00000aa000/0x2000)=nil, 0x2000, 0xf, 0x4008032, 0xffffffffffffffff, 0x82f1d000) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x0, 0x233, &(0x7f0000000540)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000076e79e6100000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000100)='L', &(0x7f0000000000)=""/6, 0x2}, 0x20) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x10}, @nl=@unspec, @vsock={0x28, 0x0, 0xffffd8ef, @my=0x0}, 0xe2b, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)='veth0_virt_wifi\x00', 0x0, 0x6, 0x3}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@noblock_validity}, {@sysvgroups}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a2, &(0x7f0000001400)="$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") setns(0xc9, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000040046900200260000000300010000f40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bbf6f0a0e8f0f24d"]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200004, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000100000000000000040007000000000000000700000000002000050000000000"], 0x24, 0x0) 2m9.704025386s ago: executing program 41 (id=2410): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf250b00000008fe13df2059798022ce530001007063690011000200303030303a30303a31302e300000000008000b00410e0000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)="d29e6b047d", 0x5) write(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x3) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x240448c1) epoll_create(0x6) mmap(&(0x7f00000aa000/0x2000)=nil, 0x2000, 0xf, 0x4008032, 0xffffffffffffffff, 0x82f1d000) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x0, 0x233, &(0x7f0000000540)="$eJzs3T9oFFkcB/Df7J/LJVmO3F1zcHAniIgGQuwEm9goBCSIiKBCRMRKEiUmbWJlY6G1SiqbaGu0FJtgExGsgqaIjaBBxGChxcrsJBLNiuLGHXE+H5jdmd335veGme/bbYYJoLB6ImIgIsoR0RsR1YhI1jfYki09q5vTnXPDEfX6oVdJo122nVnr1x0RUxGx+2Y9U4mYmD229HZh//ZL49VtN2aPdrb1IFctLy0eWLk+dPH24K6Jh49fDCUxELVPjmvzJU0+qyQRf/2IYj+JpJL3CPgW5+aHXqe5/zsitjbyX41SZCfv8thv96ux89qX+l55+ejfdo4V2Hz1ejX9DZyqA4VTiohaJKW+iMjWS6W+vuw//JNyV+nM6Nj53tOj4yOn8p6pgM1Si1jcd7fjTvdn+X9ezvIP/LrS/B8+OPM0XV8p5z0aoJ3S/PeemNwR8g+FI/9QXPIPxSX/UFzyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzr8w8AFEu9I+87kIG85D3/AAAAAAAAAAAAAAAAAAAAG013zg2vLe2q+eBqxPLeiKg0q19uPI844vfGa9ebJG32UZJ1a8nx/1vcQYtu5Xz39R/P8q0//1++9SdHIqYuRER/pbLx+ktWr7/v9+dXvq+ebLFAi/Ycybf++5l86w8uRNxL55/+ZvNPKf5pvDeff2rp+Wux/tl3Le4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtvkQAAD//4XCc8o=") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000076e79e6100000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000100)='L', &(0x7f0000000000)=""/6, 0x2}, 0x20) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x10}, @nl=@unspec, @vsock={0x28, 0x0, 0xffffd8ef, @my=0x0}, 0xe2b, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)='veth0_virt_wifi\x00', 0x0, 0x6, 0x3}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@noblock_validity}, {@sysvgroups}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a2, &(0x7f0000001400)="$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") setns(0xc9, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000040046900200260000000300010000f40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bbf6f0a0e8f0f24d"]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200004, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000100000000000000040007000000000000000700000000002000050000000000"], 0x24, 0x0) 1m9.744441988s ago: executing program 7 (id=2938): bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@orlov}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) (fail_nth: 3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x9000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = open(&(0x7f0000000140)='./file1\x00', 0x167842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 1m8.157769065s ago: executing program 7 (id=2956): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, @perf_config_ext={0x10000, 0x3b58}, 0x500, 0x20000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4040001) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000000000000007000000830b040a1c01027f00000100000000001c00"/44, @ANYRES64], 0x40}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x59, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x1, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000040)="0400", 0xffec, 0x810, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) (async) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x8) pread64(r5, &(0x7f0000019200)=""/102400, 0xfffffdde, 0xffffffffc) 1m7.97334902s ago: executing program 7 (id=2958): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x1, 0x3}, 0x3003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000240)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,uid=', @ANYRESHEX=0x0, @ANYBLOB='Amap=acorn,iocharset=macgaelic,session=0x0000000000000058,mode=0xffffffffffffffff,map=off,check=strict,uid>', @ANYRESDEC=0x0, @ANYBLOB=',cont%|t=user_u,\b'], 0xfa, 0x6c8, &(0x7f0000000900)="$eJzs3dtv2+YZx/Ef5ZPsbEGwDUEQ5PAmWQEHyxRJbhwYHtBqFGVzk0SBlAcbGFBkjV0EkdMt6YDFN51vdgA6YNe9680udrd/YECvi2H/w+42oNjuNmwXGniSdaJkN86p/X6EVhT58H2fl1T4mLZICQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyLKrxWLJUt1tbm2bbHbV9xoTlsetzelmPHFzar+SFf6nfF4X4lkXvnW0+Hz4v+u6FL+6pHz4lNfBmfPn1r85m0vXn5DQF6GTNvjk6cHDe53O7uNjxM7oxM2/TMpNCVhIdlXguY3KhmPcwDNrq6vF25u1wNTcuhPsBG2nYWzfybU93yzbN01pbW3FOIUdb6u5Ua3UnXTm3e+Wi8VV84OFeEdLKgT2pluvu82NKCZcHMbcNR/9OA5wKg1j9h50dlemjSQMKpnee3RwL+T6gsrTWioXy+VSqVwurd5Zu3O3WJwdmVEMWcUejUSc+psWr5lnPmYDpyUX1v+/WVJdeTW1pW2ZsQ9bVfny1Ihf/zVcuX95Iq3/b9x2JvbbX//TKn9BeitZfFFR/b8Sv7qSVf8zcjUy+eH80ofVP3//L0l/me1kPOaijIye6KkO9FD31FFHu3p84pbGPq6eSisv4LEhR025CuTJVUOVaI5J5hitaVWrKuodbaqmQEY1uarLUaAdBWrLid5Rtnw5qqgtT76MlmXrpoxKWtOaVmTkqKAdedpSUxuqqqJ/d7vdPT2ItvvKhByVBpUyAhb6g8oTWsqq/z/5MH4XJfW/OK7+f13U/y+/+H2Q/Gj82aQY4BXQTc7/p5gfen31+WUEAAAAAABOmxX99t2K/nZ/WVJXNbfuFLNXGP5NAAAAAAAAeOVZ6i7okqzw/F/SZVlTzv8BAAAAAMBrx4qusbMkLUUf6reOroQ6zi8BZl5AigAAAAAA4BlFV/5fmZe60U0rrso60fk/AAAAAAB4Dfym7x77s+k9drvpn/VzkoLWgvXnfy7In7MOW9vftvYr4ZLK/kwuChn5BEC7dtEKfh/fqPfgzPlz//nYryl6ZTuXrKS35CaYvfsOfr437V7/lj+UwPxMfwNDCZxN1rbCnldnk1f6SNfeGoi9f5BTtCTuZanm1p2C7dXXS6pUzubaznb7548e/ELye+Pce9DZLbz7fud+lMthOOtwP8zjwzSdP80nm24wl+ipl8v/ujHp8tgRL6qWdvnbZmPJivotpuOfUWU/d7SPMsc/2Kd+pevxPru+FMcuHfTuuB+OPx+Ov1RYDwcwMHp/zjrKojQ88nE7IiOLfJTFjTjmxvKN+CnNL2wnZ+W/MyOVC6P7YCCLcn8W07eF9a+RbTEpi2RbrIRZfBo2lJHFysmyGNkjAPCy7EV3/Ymu/ItuYj5Sd9PykB7UvlDdmV7d3x6s7h98HFbG+MeL2eRvExN7ySs8oi9bUR2aV3Rgnb04ckRPR1M5m1fGEb34DNUt7OuPR9+BlKQ9ksV/u93ueinq93dDVfWTcIVPMvsN6vFmv/3B/k+jG+CH3tt9b/dRubyyWnyzWLxT1lw0jORpRtQeAMCI6d+xMzXCelPX4ohr9//xRjw1UPG+0ftIQUHv6n11dF9z6VcIXB3f6lLfxxBuxWet6jtrNefPrS9Kw7El3co8q4tqaV9suRc7p3SVwUp9FLvynPcCAAAv1vUpdXh8/c8P1P9bWo4jluNzyuHz7sFanpwd907ps2JL05N/+5Q3BgAAXxGO/7m11P615ftu653S2lqp0t50jO/ZPzS+W91wjNtsO769WWluOKble23P9uqm5WvBrTqBCbZaLc9vm5rnm5YXuNvRN7+b5KvfA6dRabZdO2jVnUrgGNtrtit221TdwDatre/X3WDT8aOVg5ZjuzXXrrRdr2kCb8u3nYIxgeP0BbpVp9l2a2442TQt321U/B3zI6++1XBM1Qls3221vbjBtC+3WfP8RtRsQd2pX3QIAMBXwZOnBw/vdTq7j4cnFsNT83jOoTJiRifmxzTIPYIAAHjFHJXrE6yU70192n0uWQEAAAAAAAAAAAAAAAAAAAAAgH7TL+k74cTcuIsFpd6cn51N5uiXOrrEcKQdS6ed2EkmciddK70k4uDhZxOCF3tz0s3fH3P4XIaTXqvRv+jvX5PORDGK58yOWz2f3bI1vffFCTv3mBMz4QY6bvD39uJxZsYMb4TexEJvX8ye/j+HcOLRHzIWdbvd7uTVFwa34fykAQ5OzEp6PD+8C9Kbdh8j+Rd3DALwcvw/AAD//xawNjM=") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000000c0)=@file={0x1, '.\x02\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x2008000}}], 0x2, 0x4000880) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, [0x5, 0xd, 0x5, 0x9, 0x9, 0x8, 0x5b9d, 0x1, 0xfffffffffffffffe, 0x3, 0xfff0000000000000, 0x8, 0x1, 0x8, 0x6]}, &(0x7f0000000480)=0x100) 1m7.669362907s ago: executing program 7 (id=2959): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe, &(0x7f0000006680)) mmap(&(0x7f00003f3000/0x2000)=nil, 0x2000, 0x2, 0x18032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() read$qrtrtun(0xffffffffffffffff, &(0x7f0000000180)=""/244, 0xf4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getpid() getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40}]}, &(0x7f0000000180)=0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x6}, 0x100800, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x10, "1fe473a8cb3169d4d5b7259627b5cf5b"}, &(0x7f0000000700)=0x18) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x5}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd1, 0x1, 0x0, 0x0, 0x0, 0x85, 0x800d4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xc18, 0xfffffffffffffffc, 0x7, 0x0, 0x1, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x50e, &(0x7f00000007c0)="$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") fallocate(r3, 0x3f, 0x0, 0x8800000) shutdown(0xffffffffffffffff, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x7, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0x2, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0xfff2, 0xfff3}, {0x5, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x34}}, 0x80) 1m6.67522227s ago: executing program 7 (id=2964): capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1m6.193434071s ago: executing program 7 (id=2966): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x141e00) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) read$qrtrtun(r0, &(0x7f0000000180)=""/244, 0xf4) 1m6.193317491s ago: executing program 42 (id=2966): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x141e00) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) read$qrtrtun(r0, &(0x7f0000000180)=""/244, 0xf4) 10.077963773s ago: executing program 1 (id=3594): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf66e}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (fail_nth: 13) 9.605327934s ago: executing program 1 (id=3598): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x2, 0x2) getdents64(r2, 0xffffffffffffffff, 0x43) bind$vsock_stream(r2, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r4) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7f, 0x6, "2ab4ff9ba7420c1113bf4e00ebff0000001000"}) r7 = syz_open_pts(r6, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000140)={0xff85, 0x6, 0x2001, 0x3, 0x12, "db2d016fbe8ee2df35ee090000000800"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x9) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x5501, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.724534546s ago: executing program 1 (id=3625): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000004ac0), 0x0, 0x0) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000540), &(0x7f0000000700)=r1}, 0x3d) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0xfffffffd, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x6, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02683671f26a72b2a800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000010000000400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r6, 0x0, '\x00', 0x0, r5, 0x0, 0x80}, 0x48) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r7 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000700)=""/205, 0xff3f}, {&(0x7f0000000580)=""/194, 0xcb}, {&(0x7f00000000c0)=""/32, 0x1c}], 0x4) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r7], 0x1) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) 4.500830344s ago: executing program 1 (id=3636): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x2, 0x2) getdents64(r2, 0xffffffffffffffff, 0x43) bind$vsock_stream(r2, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r4) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7f, 0x6, "2ab4ff9ba7420c1113bf4e00ebff0000001000"}) r7 = syz_open_pts(r6, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000140)={0xff85, 0x6, 0x2001, 0x3, 0x12, "db2d016fbe8ee2df35ee090000000800"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x9) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x5501, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.617169388s ago: executing program 3 (id=3644): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2.499863841s ago: executing program 3 (id=3647): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 2.380357954s ago: executing program 6 (id=3650): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x85, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket(0x1d, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES8=r3], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) sendmsg$inet(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r6, 0x2, {0x2, 0x0, 0x1}, 0xfe}, 0x18) write$cgroup_subtree(r2, 0x0, 0xfe33) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x4}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000", 0x24) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2.345600575s ago: executing program 3 (id=3651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000010c0)="d2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000540), &(0x7f0000000700)=r1}, 0x3d) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0xfffffffd, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x6, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02683671f26a72b2a800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000010000000400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r6, 0x0, '\x00', 0x0, r5, 0x0, 0x80}, 0x48) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r7 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000700)=""/205, 0xff3f}, {&(0x7f0000000580)=""/194, 0xcb}, {&(0x7f00000000c0)=""/32, 0x1c}], 0x4) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r7], 0x1) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) 1.674534691s ago: executing program 2 (id=3654): r0 = socket(0x18, 0x800, 0x38) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@nomblk_io_submit}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@data_journal}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x57) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x10001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='\"', 0x1, 0xe7c) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.523480705s ago: executing program 2 (id=3656): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x77f, &(0x7f0000000840)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(0x0, 0xe6c42, 0x20) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000001140)="da6c8c08f4dad8d83fdff81b94b54ad8e4bb332b6a54d8dbd0bbe2990ba4172ff7535bdf5e5208a631d08381", 0x2c, 0x2200}]) 1.418025977s ago: executing program 3 (id=3657): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x208245, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@lazytime}]}, 0x81, 0x63d, &(0x7f0000000600)="$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") perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x1, 0x4, 0x2, 0x8, 0x0, 0x4, 0x22800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x20004a, 0x7, 0x3a1c00, 0x4, 0x9, 0x7, 0xb99a, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0x800000000000e, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, r1, 0x9) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) unshare(0x62040200) r2 = socket$xdp(0x2c, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x621000, 0x800, 0x9, 0x2}, 0x20) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, &(0x7f0000000000)=0x8, 0x4) 1.382119528s ago: executing program 2 (id=3658): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602feff00b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 1.374765588s ago: executing program 6 (id=3659): r0 = socket$inet6(0xa, 0x1, 0x0) sendto(r0, &(0x7f0000000200)="2e792a99b93e340768828099a99534292e792551e96158804686304ba0b1cb4f683a70500ea233c3cc2dfc888dc5e6a0a5a542298391fca59bd2fa18ddf453b7be301a2af2d9171ce99bdd15f8f22794c28a7ccdb902196a961c1c6243f7cde0b994e7de14df551c28aee66100c11fef6bd3", 0x72, 0x4800, &(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) r1 = openat(0xffffffffffffffff, 0x0, 0x725a02, 0x86) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newpolicy={0x37c, 0x13, 0x200, 0x70bd25, 0x25dfdbfe, {{@in=@multicast1, @in6=@local, 0x4e21, 0x2, 0x4e21, 0x3, 0x2, 0x80, 0x20, 0x0, 0x0, 0xee00}, {0x6, 0x2, 0x8, 0xfb, 0x1, 0x1, 0xffffffff, 0x6bf0}, {0x697bc2db, 0x7, 0x100000000, 0x1}, 0x4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x3}, [@algo_auth_trunc={0x10e, 0x14, {{'xxhash64\x00'}, 0x610, 0x80, "d996977a8a19c8fc3abb2e60fda2ac874046fba84ad3f54658c65840840c7a025221f176d37ce8092a61af6a37a1173ee34b90ee8ff3dd2633fc03666d82d70474745eaf80bafc5aaeb471b771d3bb3629fc5678a3e10263f57d7b6f4c43777f7e3a88399b1af297f97f7de3301739c3911da028e2736608aacc9cbbf3d2b81358370f8eb45494a2e6a1a60590378e2500c261da60c00f7713bd41a3cebc2a3048d8fb552b901d5ae54d9d6d595d53bca53337b57702ce38dc4e99d4edfcfa1e65fc"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0xfffffffffffffffd}, @iptfs_pkt_size={0x8, 0x29, 0x8}, @tmpl={0x184, 0x5, [{{@in=@empty, 0x4d4, 0x33}, 0xa, @in=@local, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2, 0x8}, {{@in6=@local, 0x4d6, 0x2b}, 0xa, @in6=@mcast2, 0x3501, 0x3, 0x1, 0xb9, 0x5, 0x8}, {{@in=@private=0xa010101, 0x4d2, 0xff}, 0xa, @in6=@private1, 0x3502, 0x1, 0x3, 0x3, 0xaa, 0x1000, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x5, 0x1, 0x3, 0x4, 0x1}, {{@in=@multicast1, 0x4d5, 0xff}, 0xa, @in6=@mcast2, 0x3504, 0x1, 0x3, 0x3, 0xea27, 0x53, 0x61}, {{@in6=@remote, 0x4d4, 0x6c}, 0x2, @in=@remote, 0x3506, 0x1, 0x2, 0x8a, 0x4, 0x1, 0x380000}]}, @replay_thresh={0x8}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x37c}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '@'}, {0x20, 'nfc\x00'}, {0x20, ' \x01\x00'}, {0x20, '%'}], 0xa, "8f56779677114eac21d8052c6c787fd7d2a651185a47a4fc8fc4421feee0fbe49796826718433351211dfcbb4a4e091084dc7c83c114e35266d7b8c7692565"}, 0x14a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000200)=ANY=[], 0x361, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 1.162886573s ago: executing program 1 (id=3660): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602feff00b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 1.132117343s ago: executing program 8 (id=3661): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28010000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000de400128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280c3ff01800a000100696e6e65720000000c00018007000100637400007000018011000100666c6f775f6f66666c6f616400000000580000800900010073797a32000000000900010073797a31000000000900010073797a32000000000900010073797a32000000000900010073797a31000000000900010073797a31000000000900010073797a31000000002c0001800a00010072656469720000001c000280080002400000000b0800034000000040080003400000000a0800034000000130"], 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 1.076029305s ago: executing program 8 (id=3662): bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000002e80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x18}, 0x2404c080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113400000000008510000002000000850000006c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 1.020998177s ago: executing program 6 (id=3663): unshare(0x6020400) flock(0xffffffffffffffff, 0x2) (fail_nth: 1) 665.439514ms ago: executing program 6 (id=3664): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x1, 0xe, "f1a88cb18a69806a5bdadb733a59"}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="70020000", @ANYRES16=r5, @ANYBLOB="0f0700000000000000006700000048000e", @ANYBLOB="00004bacfe0ef54796fe5f220bf4dd1b60bcf68a8977b2f16d130474fdfbedea8c5fa5d4c7d3e4"], 0x270}, 0x1, 0x0, 0x0, 0x44890}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040084}, 0xc044800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008014}, 0x40cb5) 661.770614ms ago: executing program 8 (id=3665): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x1, 0x3}, 0x3003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000240)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,uid=', @ANYRESHEX=0x0, @ANYBLOB='Amap=acorn,iocharset=macgaelic,session=0x0000000000000058,mode=0xffffffffffffffff,map=off,check=strict,uid>', @ANYRESDEC=0x0, @ANYBLOB=',cont%|t=user_u,\b'], 0xfa, 0x6c8, &(0x7f0000000900)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000000c0)=@file={0x1, '.\x02\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x2008000}}], 0x2, 0x4000880) socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000ec0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@init_itable}, {@dioread_lock}, {@resgid}, {@data_ordered}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c, &(0x7f0000000a00)}}], 0x1, 0x40088d5) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, [0x5, 0xd, 0x5, 0x9, 0x9, 0x8, 0x5b9d, 0x1, 0xfffffffffffffffe, 0x3, 0xfff0000000000000, 0x8, 0x1, 0x8, 0x6]}, &(0x7f0000000480)=0x100) 640.664635ms ago: executing program 3 (id=3666): r0 = socket(0x18, 0x800, 0x38) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@nomblk_io_submit}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@data_journal}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x57) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x10001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='\"', 0x1, 0xe7c) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf3a, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 568.972647ms ago: executing program 6 (id=3667): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) fsopen(0x0, 0x0) setpriority(0x3, 0x0, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x200, @multicast1}, {0x2, 0x0, @loopback}, 0x2a0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x10001, 0x2000000}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x1005e2, 0x2, 0x4, 0x0, 0x2, 0x1ff}, 0xffffffffffffffff, 0x0, r3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0xf) wait4(r4, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) geteuid() ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x80e8662d, &(0x7f0000000000)={0x1, 0x81, 0x4, 0x8f10, 0xfff7ffbe, 0x7}) sched_setscheduler(r4, 0x0, &(0x7f0000000140)=0x87f) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$netlink(0x10, 0x3, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)) 473.143789ms ago: executing program 3 (id=3668): r0 = socket$netlink(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602feff00b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 396.968421ms ago: executing program 2 (id=3669): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x77f, &(0x7f0000000840)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(0x0, 0xe6c42, 0x20) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000001140)="da6c8c08f4dad8d83fdff81b94b54ad8e4bb332b6a54d8dbd0bbe2990ba4172ff7535bdf5e5208a631d08381", 0x2c, 0x2200}]) 304.192333ms ago: executing program 1 (id=3670): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x2, 0x2) getdents64(r2, 0xffffffffffffffff, 0x43) bind$vsock_stream(r2, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r4) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) r7 = syz_open_pts(r6, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000140)={0xff85, 0x6, 0x2001, 0x3, 0x12, "db2d016fbe8ee2df35ee090000000800"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x9) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x5501, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 302.114733ms ago: executing program 8 (id=3680): r0 = socket(0x18, 0x800, 0x38) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@nomblk_io_submit}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@data_journal}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r4 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x57) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x10001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='\"', 0x1, 0xe7c) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf3a, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 161.741576ms ago: executing program 6 (id=3671): bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000002e80), 0x0, &(0x7f0000000580)=ANY=[], 0x18}, 0x2404c080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113400000000008510000002000000850000006c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 115.041318ms ago: executing program 2 (id=3672): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 68.473439ms ago: executing program 8 (id=3673): r0 = socket$inet6(0xa, 0x1, 0x0) sendto(r0, &(0x7f0000000200)="2e792a99b93e340768828099a99534292e792551e96158804686304ba0b1cb4f683a70500ea233c3cc2dfc888dc5e6a0a5a542298391fca59bd2fa18ddf453b7be301a2af2d9171ce99bdd15f8f22794c28a7ccdb902196a961c1c6243f7cde0b994e7de14df551c28aee66100c11fef6bd3", 0x72, 0x4800, &(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) r1 = openat(0xffffffffffffffff, 0x0, 0x725a02, 0x86) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newpolicy={0x37c, 0x13, 0x200, 0x70bd25, 0x25dfdbfe, {{@in=@multicast1, @in6=@local, 0x4e21, 0x2, 0x4e21, 0x3, 0x2, 0x80, 0x20, 0x0, 0x0, 0xee00}, {0x6, 0x2, 0x8, 0xfb, 0x1, 0x1, 0xffffffff, 0x6bf0}, {0x697bc2db, 0x7, 0x100000000, 0x1}, 0x4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x3}, [@algo_auth_trunc={0x10e, 0x14, {{'xxhash64\x00'}, 0x610, 0x80, "d996977a8a19c8fc3abb2e60fda2ac874046fba84ad3f54658c65840840c7a025221f176d37ce8092a61af6a37a1173ee34b90ee8ff3dd2633fc03666d82d70474745eaf80bafc5aaeb471b771d3bb3629fc5678a3e10263f57d7b6f4c43777f7e3a88399b1af297f97f7de3301739c3911da028e2736608aacc9cbbf3d2b81358370f8eb45494a2e6a1a60590378e2500c261da60c00f7713bd41a3cebc2a3048d8fb552b901d5ae54d9d6d595d53bca53337b57702ce38dc4e99d4edfcfa1e65fc"}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0xfffffffffffffffd}, @iptfs_pkt_size={0x8, 0x29, 0x8}, @tmpl={0x184, 0x5, [{{@in=@empty, 0x4d4, 0x33}, 0xa, @in=@local, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2, 0x8}, {{@in6=@local, 0x4d6, 0x2b}, 0xa, @in6=@mcast2, 0x3501, 0x3, 0x1, 0xb9, 0x5, 0x8}, {{@in=@private=0xa010101, 0x4d2, 0xff}, 0xa, @in6=@private1, 0x3502, 0x1, 0x3, 0x3, 0xaa, 0x1000, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x5, 0x1, 0x3, 0x4, 0x1}, {{@in=@multicast1, 0x4d5, 0xff}, 0xa, @in6=@mcast2, 0x3504, 0x1, 0x3, 0x3, 0xea27, 0x53, 0x61}, {{@in6=@remote, 0x4d4, 0x6c}, 0x2, @in=@remote, 0x3506, 0x1, 0x2, 0x8a, 0x4, 0x1, 0x380000}]}, @replay_thresh={0x8}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x37c}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '@'}, {0x20, 'nfc\x00'}, {0x20, ' \x01\x00'}, {0x20, '%'}], 0xa, "8f56779677114eac21d8052c6c787fd7d2a651185a47a4fc8fc4421feee0fbe49796826718433351211dfcbb4a4e091084dc7c83c114e35266d7b8c7692565"}, 0x14a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000200)=ANY=[], 0x361, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 20.3305ms ago: executing program 2 (id=3674): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) rt_sigpending(0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) 0s ago: executing program 8 (id=3675): bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000002e80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x18}, 0x2404c080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113400000000008510000002000000850000006c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): 000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 482.435477][T19464] R13: 00007fb45f7b6128 R14: 00007fb45f7b6090 R15: 00007ffffd0e3bd8 [ 482.435500][T19464] [ 482.448881][T19448] EXT4-fs warning (device loop3): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 482.462721][T19458] lo speed is unknown, defaulting to 1000 [ 482.780927][T19475] netlink: 'syz.3.3400': attribute type 6 has an invalid length. [ 482.791172][T19472] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 482.793428][T19472] EXT4-fs (loop3): 1 truncate cleaned up [ 482.914978][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 482.915006][ T29] audit: type=1400 audit(1788593514.499:4214): avc: denied { write } for pid=19471 comm="syz.3.3400" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.094736][T19479] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.153133][ T29] audit: type=1400 audit(1788593514.789:4215): avc: denied { write } for pid=19478 comm="syz.1.3401" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.186671][ T29] audit: type=1400 audit(1788593514.819:4216): avc: denied { write } for pid=19478 comm="syz.1.3401" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.239139][ T29] audit: type=1400 audit(1788593514.869:4217): avc: denied { read } for pid=19483 comm="syz.6.3403" name="dynamic_events" dev="tracefs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 483.239240][ T29] audit: type=1400 audit(1788593514.869:4218): avc: denied { ioctl } for pid=19483 comm="syz.6.3403" path="/220/tracefs/dynamic_events" dev="tracefs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 483.329288][T19486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3404'. [ 483.369717][T19488] veth0: entered promiscuous mode [ 483.370840][T19488] netlink: 'syz.8.3405': attribute type 1 has an invalid length. [ 483.370856][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3405'. [ 483.383922][T19487] veth0: left promiscuous mode [ 483.521501][ T29] audit: type=1400 audit(1788593515.149:4219): avc: denied { write } for pid=19495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.562470][ T29] audit: type=1400 audit(1788593515.199:4220): avc: denied { write } for pid=19510 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.659450][T19490] set_capacity_and_notify: 6 callbacks suppressed [ 483.659503][T19490] loop6: detected capacity change from 0 to 512 [ 483.685377][T19516] FAULT_INJECTION: forcing a failure. [ 483.685377][T19516] name failslab, interval 1, probability 0, space 0, times 0 [ 483.685422][T19516] CPU: 1 UID: 0 PID: 19516 Comm: syz.2.3410 Not tainted syzkaller #0 PREEMPT(lazy) [ 483.685454][T19516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.685477][T19516] Call Trace: [ 483.685486][T19516] [ 483.685495][T19516] __dump_stack+0x1d/0x30 [ 483.685525][T19516] dump_stack_lvl+0x95/0xd0 [ 483.685551][T19516] dump_stack+0x15/0x1b [ 483.685573][T19516] should_fail_ex+0x262/0x280 [ 483.685608][T19516] ? sctp_add_bind_addr+0x71/0x1e0 [ 483.685633][T19516] should_failslab+0x8c/0xb0 [ 483.685666][T19516] __kmalloc_cache_noprof+0x7a/0x400 [ 483.685701][T19516] ? sctp_add_bind_addr+0x71/0x1e0 [ 483.685834][T19516] sctp_add_bind_addr+0x71/0x1e0 [ 483.685862][T19516] sctp_do_bind+0x420/0x4b0 [ 483.685894][T19516] sctp_connect_new_asoc+0x153/0x3a0 [ 483.686017][T19516] sctp_sendmsg+0x105f/0x1d00 [ 483.686051][T19516] ? __pfx_sctp_sendmsg+0x10/0x10 [ 483.686080][T19516] inet_sendmsg+0xc5/0xd0 [ 483.686103][T19516] ? __pfx_inet_sendmsg+0x10/0x10 [ 483.686184][T19516] ____sys_sendmsg+0x4e8/0x580 [ 483.686220][T19516] ___sys_sendmsg+0x195/0x1e0 [ 483.686264][T19516] __sys_sendmmsg+0x185/0x320 [ 483.686356][T19516] __x64_sys_sendmmsg+0x57/0x70 [ 483.686391][T19516] x64_sys_call+0x1fb4/0x2550 [ 483.686442][T19516] do_syscall_64+0x112/0x360 [ 483.686473][T19516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.686499][T19516] RIP: 0033:0x7f2f5fe5e159 [ 483.686606][T19516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.686629][T19516] RSP: 002b:00007f2f5e8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 483.686653][T19516] RAX: ffffffffffffffda RBX: 00007f2f600e5fa0 RCX: 00007f2f5fe5e159 [ 483.686722][T19516] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 483.686762][T19516] RBP: 00007f2f5fef5024 R08: 0000000000000000 R09: 0000000000000000 [ 483.686777][T19516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.686792][T19516] R13: 00007f2f600e6038 R14: 00007f2f600e5fa0 R15: 00007ffdaa97e528 [ 483.686814][T19516] [ 483.725511][T19490] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 483.726116][T19516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=19516 comm=syz.2.3410 [ 483.776427][T19490] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 483.776507][T19490] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 483.776614][T19490] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.3406: Failed to acquire dquot type 1 [ 483.776657][T19490] loop6: lost filesystem error report for type 5 error -117 [ 483.778831][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 483.778944][ C1] EXT4-fs (loop6): last error at time 1788593515: ext4_acquire_dquot:7069 [ 483.786386][T19490] EXT4-fs (loop6): 1 truncate cleaned up [ 483.951730][ T29] audit: type=1400 audit(1788593515.579:4221): avc: denied { write } for pid=19513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.956599][T19516] loop2: detected capacity change from 0 to 512 [ 484.017595][T19516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 484.080560][T19516] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3410: bad orphan inode 131083 [ 484.080750][T19516] loop2: lost filesystem error report for type 5 error -117 [ 484.095677][T19538] loop8: detected capacity change from 0 to 1024 [ 484.110446][T19538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 484.110552][T19538] EXT4-fs: Ignoring removed bh option [ 484.131992][T19538] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 484.329275][T19516] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 484.342932][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3416'. [ 484.452030][T19577] veth0: entered promiscuous mode [ 484.454229][T19577] netlink: 'syz.6.3418': attribute type 1 has an invalid length. [ 484.454245][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3418'. [ 484.468369][T19576] veth0: left promiscuous mode [ 484.557379][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3419'. [ 484.557437][T19586] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3419'. [ 484.578132][T19580] loop2: detected capacity change from 0 to 2048 [ 484.597418][T19580] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.839365][T19591] loop3: detected capacity change from 0 to 512 [ 484.846517][T19591] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 484.865884][T19591] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.3421: Failed to acquire dquot type 1 [ 484.865984][T19591] loop3: lost filesystem error report for type 5 error -117 [ 484.868861][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 484.868881][ C1] EXT4-fs (loop3): last error at time 1788593516: ext4_acquire_dquot:7069 [ 484.905268][T19591] EXT4-fs (loop3): 1 truncate cleaned up [ 484.947970][T19601] loop8: detected capacity change from 0 to 512 [ 484.952235][T19601] EXT4-fs: Ignoring removed oldalloc option [ 485.013665][T19607] FAULT_INJECTION: forcing a failure. [ 485.013665][T19607] name failslab, interval 1, probability 0, space 0, times 0 [ 485.013705][T19607] CPU: 0 UID: 0 PID: 19607 Comm: syz.2.3427 Not tainted syzkaller #0 PREEMPT(lazy) [ 485.013735][T19607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.013822][T19607] Call Trace: [ 485.013831][T19607] [ 485.013840][T19607] __dump_stack+0x1d/0x30 [ 485.013870][T19607] dump_stack_lvl+0x95/0xd0 [ 485.013894][T19607] dump_stack+0x15/0x1b [ 485.013918][T19607] should_fail_ex+0x262/0x280 [ 485.014022][T19607] ? sctp_add_bind_addr+0x71/0x1e0 [ 485.014078][T19607] should_failslab+0x8c/0xb0 [ 485.014175][T19607] __kmalloc_cache_noprof+0x7a/0x400 [ 485.014248][T19607] ? sctp_add_bind_addr+0x71/0x1e0 [ 485.014276][T19607] sctp_add_bind_addr+0x71/0x1e0 [ 485.014377][T19607] sctp_do_bind+0x420/0x4b0 [ 485.014476][T19607] sctp_connect_new_asoc+0x153/0x3a0 [ 485.014513][T19607] sctp_sendmsg+0x105f/0x1d00 [ 485.014549][T19607] ? __pfx_sctp_sendmsg+0x10/0x10 [ 485.014650][T19607] inet_sendmsg+0xc5/0xd0 [ 485.014672][T19607] ? __pfx_inet_sendmsg+0x10/0x10 [ 485.014696][T19607] ____sys_sendmsg+0x4e8/0x580 [ 485.014765][T19607] ___sys_sendmsg+0x195/0x1e0 [ 485.014818][T19607] __sys_sendmmsg+0x185/0x320 [ 485.014920][T19607] __x64_sys_sendmmsg+0x57/0x70 [ 485.015075][T19607] x64_sys_call+0x1fb4/0x2550 [ 485.015106][T19607] do_syscall_64+0x112/0x360 [ 485.015167][T19607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.015195][T19607] RIP: 0033:0x7f2f5fe5e159 [ 485.015221][T19607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.015244][T19607] RSP: 002b:00007f2f5e8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 485.015269][T19607] RAX: ffffffffffffffda RBX: 00007f2f600e5fa0 RCX: 00007f2f5fe5e159 [ 485.015365][T19607] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 485.015382][T19607] RBP: 00007f2f5fef5024 R08: 0000000000000000 R09: 0000000000000000 [ 485.015399][T19607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.015425][T19607] R13: 00007f2f600e6038 R14: 00007f2f600e5fa0 R15: 00007ffdaa97e528 [ 485.015449][T19607] [ 485.074291][T19610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=19610 comm=syz.2.3427 [ 485.326224][T19616] veth0: entered promiscuous mode [ 485.328294][T19616] netlink: 'syz.8.3429': attribute type 1 has an invalid length. [ 485.328310][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3429'. [ 485.373029][T19615] veth0: left promiscuous mode [ 485.599232][T19610] loop2: detected capacity change from 0 to 512 [ 485.607378][T19620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.637399][T19610] EXT4-fs: Ignoring removed oldalloc option [ 485.638382][T19610] EXT4-fs: Ignoring removed i_version option [ 485.647986][T19610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.729912][T19610] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3427: invalid block [ 485.730372][T19610] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 485.743194][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 485.743214][ C0] EXT4-fs (loop2): initial error at time 1788593517: ext4_get_branch:178: inode 11: block 4294967295 [ 485.743264][ C0] EXT4-fs (loop2): last error at time 1788593517: ext4_get_branch:178: inode 11: block 4294967295 [ 485.781254][T19610] EXT4-fs error (device loop2) in ext4_process_orphan:346: IO failure [ 485.781585][T19610] loop2: lost filesystem error report for type 5 error -5 [ 485.787806][T19609] loop1: detected capacity change from 0 to 1024 [ 485.817771][T19610] EXT4-fs (loop2): 2 truncates cleaned up [ 485.818584][T19609] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 485.818973][T19609] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 485.825905][T19609] JBD2: no valid journal superblock found [ 485.825967][T19609] EXT4-fs (loop1): Could not load journal inode [ 486.169409][T19627] loop2: detected capacity change from 0 to 2048 [ 486.197117][T19627] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.338566][T19609] loop1: detected capacity change from 0 to 1024 [ 486.346447][T19609] EXT4-fs: Ignoring removed bh option [ 486.354932][T19632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 486.355036][T19632] EXT4-fs: Ignoring removed bh option [ 486.394202][T19632] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 486.548236][T19643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=19643 comm=syz.2.3437 [ 486.630526][T19609] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #12: block 7: comm syz.1.3428: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 486.654649][T19609] EXT4-fs (loop1): Remounting filesystem read-only [ 486.703527][T19645] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.763772][T19653] veth0: entered promiscuous mode [ 486.772316][T19653] netlink: 'syz.1.3440': attribute type 1 has an invalid length. [ 486.772338][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3440'. [ 486.795921][T19640] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 486.796236][T19652] veth0: left promiscuous mode [ 486.899388][T19659] FAULT_INJECTION: forcing a failure. [ 486.899388][T19659] name failslab, interval 1, probability 0, space 0, times 0 [ 486.899456][T19659] CPU: 1 UID: 0 PID: 19659 Comm: syz.2.3442 Not tainted syzkaller #0 PREEMPT(lazy) [ 486.899488][T19659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.899504][T19659] Call Trace: [ 486.899512][T19659] [ 486.899519][T19659] __dump_stack+0x1d/0x30 [ 486.899549][T19659] dump_stack_lvl+0x95/0xd0 [ 486.899577][T19659] dump_stack+0x15/0x1b [ 486.899653][T19659] should_fail_ex+0x262/0x280 [ 486.899676][T19659] ? sctp_add_bind_addr+0x71/0x1e0 [ 486.899703][T19659] should_failslab+0x8c/0xb0 [ 486.899825][T19659] __kmalloc_cache_noprof+0x7a/0x400 [ 486.899861][T19659] ? sctp_add_bind_addr+0x71/0x1e0 [ 486.899890][T19659] sctp_add_bind_addr+0x71/0x1e0 [ 486.900066][T19659] sctp_do_bind+0x420/0x4b0 [ 486.900100][T19659] sctp_connect_new_asoc+0x153/0x3a0 [ 486.900134][T19659] sctp_sendmsg+0x105f/0x1d00 [ 486.900171][T19659] ? __pfx_sctp_sendmsg+0x10/0x10 [ 486.900313][T19659] inet_sendmsg+0xc5/0xd0 [ 486.900337][T19659] ? __pfx_inet_sendmsg+0x10/0x10 [ 486.900361][T19659] ____sys_sendmsg+0x4e8/0x580 [ 486.900402][T19659] ___sys_sendmsg+0x195/0x1e0 [ 486.900499][T19659] __sys_sendmmsg+0x185/0x320 [ 486.900542][T19659] __x64_sys_sendmmsg+0x57/0x70 [ 486.900613][T19659] x64_sys_call+0x1fb4/0x2550 [ 486.900642][T19659] do_syscall_64+0x112/0x360 [ 486.900674][T19659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.900700][T19659] RIP: 0033:0x7f2f5fe5e159 [ 486.900717][T19659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.900819][T19659] RSP: 002b:00007f2f5e8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 486.900905][T19659] RAX: ffffffffffffffda RBX: 00007f2f600e5fa0 RCX: 00007f2f5fe5e159 [ 486.900922][T19659] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 486.900937][T19659] RBP: 00007f2f5fef5024 R08: 0000000000000000 R09: 0000000000000000 [ 486.900953][T19659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.901043][T19659] R13: 00007f2f600e6038 R14: 00007f2f600e5fa0 R15: 00007ffdaa97e528 [ 486.901065][T19659] [ 486.904868][T19640] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.3436: Failed to acquire dquot type 1 [ 486.904989][T19640] loop3: lost filesystem error report for type 5 error -117 [ 486.908822][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 486.908840][ C1] EXT4-fs (loop3): last error at time 1788593518: ext4_acquire_dquot:7069 [ 486.912727][T19640] EXT4-fs (loop3): 1 truncate cleaned up [ 486.917277][T19659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=19659 comm=syz.2.3442 [ 487.429926][T19665] FAULT_INJECTION: forcing a failure. [ 487.429926][T19665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.429963][T19665] CPU: 0 UID: 0 PID: 19665 Comm: syz.3.3444 Not tainted syzkaller #0 PREEMPT(lazy) [ 487.430018][T19665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.430034][T19665] Call Trace: [ 487.430042][T19665] [ 487.430051][T19665] __dump_stack+0x1d/0x30 [ 487.430091][T19665] dump_stack_lvl+0x95/0xd0 [ 487.430153][T19665] dump_stack+0x15/0x1b [ 487.430175][T19665] should_fail_ex+0x262/0x280 [ 487.430202][T19665] should_fail+0xb/0x20 [ 487.430224][T19665] should_fail_usercopy+0x1a/0x20 [ 487.430309][T19665] _copy_from_user+0x1c/0xb0 [ 487.430336][T19665] xsk_setsockopt+0x302/0x640 [ 487.430372][T19665] ? __pfx_xsk_setsockopt+0x10/0x10 [ 487.430406][T19665] __sys_setsockopt+0x184/0x200 [ 487.430512][T19665] __x64_sys_setsockopt+0x64/0x80 [ 487.430548][T19665] x64_sys_call+0x248f/0x2550 [ 487.430580][T19665] do_syscall_64+0x112/0x360 [ 487.430626][T19665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.430654][T19665] RIP: 0033:0x7f49b410e159 [ 487.430672][T19665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.430694][T19665] RSP: 002b:00007f49b2b46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 487.430724][T19665] RAX: ffffffffffffffda RBX: 00007f49b4396090 RCX: 00007f49b410e159 [ 487.430741][T19665] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000007 [ 487.430794][T19665] RBP: 00007f49b41a5024 R08: 0000000000000020 R09: 0000000000000000 [ 487.430824][T19665] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 487.430841][T19665] R13: 00007f49b4396128 R14: 00007f49b4396090 R15: 00007ffeb8ac79a8 [ 487.430864][T19665] [ 487.432839][T19663] lo speed is unknown, defaulting to 1000 [ 487.695693][T19659] EXT4-fs: Ignoring removed oldalloc option [ 487.695936][T19659] EXT4-fs: Ignoring removed i_version option [ 487.712074][T19659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.753996][T19659] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3442: invalid block [ 487.754425][T19659] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 487.766652][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 487.766676][ C0] EXT4-fs (loop2): initial error at time 1788593519: ext4_get_branch:178: inode 11: block 4294967295 [ 487.766733][ C0] EXT4-fs (loop2): last error at time 1788593519: ext4_get_branch:178: inode 11: block 4294967295 [ 487.804744][T19659] EXT4-fs error (device loop2) in ext4_process_orphan:346: IO failure [ 487.804932][T19659] loop2: lost filesystem error report for type 5 error -5 [ 487.813954][T19659] EXT4-fs (loop2): 2 truncates cleaned up [ 487.849260][T19659] EXT4-fs warning (device loop2): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 487.881370][T19667] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.930228][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 487.930309][ T29] audit: type=1400 audit(1788593519.569:4255): avc: denied { create } for pid=19679 comm="syz.6.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 488.005168][ T29] audit: type=1400 audit(1788593519.639:4256): avc: denied { connect } for pid=19679 comm="syz.6.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 488.046075][T19690] xt_CONNSECMARK: invalid mode: 66 [ 488.082609][T19692] veth0: entered promiscuous mode [ 488.099252][T19692] netlink: 'syz.8.3451': attribute type 1 has an invalid length. [ 488.099282][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3451'. [ 488.110016][T19691] veth0: left promiscuous mode [ 488.205312][T19696] netlink: 168864 bytes leftover after parsing attributes in process `syz.8.3453'. [ 488.205356][T19696] netlink: zone id is out of range [ 488.209902][T19696] netlink: del zone limit has 4 unknown bytes [ 488.428320][T19706] lo: Caught tx_queue_len zero misconfig [ 488.443397][T19706] FAULT_INJECTION: forcing a failure. [ 488.443397][T19706] name fail_futex, interval 1, probability 0, space 0, times 1 [ 488.443502][T19706] CPU: 0 UID: 0 PID: 19706 Comm: syz.6.3457 Not tainted syzkaller #0 PREEMPT(lazy) [ 488.443532][T19706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.443547][T19706] Call Trace: [ 488.443555][T19706] [ 488.443634][T19706] __dump_stack+0x1d/0x30 [ 488.443667][T19706] dump_stack_lvl+0x95/0xd0 [ 488.443689][T19706] dump_stack+0x15/0x1b [ 488.443713][T19706] should_fail_ex+0x262/0x280 [ 488.443760][T19706] should_fail+0xb/0x20 [ 488.443782][T19706] get_futex_key+0x12d/0xb10 [ 488.443812][T19706] ? hrtimer_start_range_ns+0xfd/0x120 [ 488.443854][T19706] futex_wait_setup+0x49/0x3e0 [ 488.443955][T19706] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 488.444019][T19706] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 488.444061][T19706] __futex_wait+0xa9/0x260 [ 488.444080][T19706] ? __pfx_futex_wake_mark+0x10/0x10 [ 488.444133][T19706] futex_wait+0x98/0x1c0 [ 488.444158][T19706] do_futex+0x391/0x460 [ 488.444192][T19706] __se_sys_futex+0x2f6/0x370 [ 488.444282][T19706] ? xfd_validate_state+0x45/0xf0 [ 488.444362][T19706] __x64_sys_futex+0x78/0x90 [ 488.444397][T19706] x64_sys_call+0x22e2/0x2550 [ 488.444428][T19706] do_syscall_64+0x112/0x360 [ 488.444457][T19706] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 488.444569][T19706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.444597][T19706] RIP: 0033:0x7fb4de07e159 [ 488.444686][T19706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.444708][T19706] RSP: 002b:00007fb4dcad70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 488.444733][T19706] RAX: ffffffffffffffda RBX: 00007fb4de305fa8 RCX: 00007fb4de07e159 [ 488.444752][T19706] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb4de305fa8 [ 488.444780][T19706] RBP: 00007fb4de305fa0 R08: 0000000000000000 R09: 0000000000000000 [ 488.444797][T19706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.444813][T19706] R13: 00007fb4de306038 R14: 00007ffcbfe79270 R15: 00007ffcbfe79358 [ 488.444869][T19706] [ 488.497190][T19698] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 488.539348][T19698] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 488.539495][T19698] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 488.539525][T19698] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.3454: Failed to acquire dquot type 1 [ 488.539655][T19698] loop2: lost filesystem error report for type 5 error -117 [ 488.543665][T19698] EXT4-fs (loop2): 1 truncate cleaned up [ 488.784843][ T29] audit: type=1400 audit(1788593520.419:4257): avc: denied { write } for pid=19710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.806657][T19724] FAULT_INJECTION: forcing a failure. [ 488.806657][T19724] name failslab, interval 1, probability 0, space 0, times 0 [ 488.806752][T19724] CPU: 1 UID: 0 PID: 19724 Comm: syz.6.3460 Not tainted syzkaller #0 PREEMPT(lazy) [ 488.806781][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.806796][T19724] Call Trace: [ 488.806803][T19724] [ 488.806811][T19724] __dump_stack+0x1d/0x30 [ 488.806838][T19724] dump_stack_lvl+0x95/0xd0 [ 488.806910][T19724] dump_stack+0x15/0x1b [ 488.807009][T19724] should_fail_ex+0x262/0x280 [ 488.807033][T19724] ? sctp_add_bind_addr+0x71/0x1e0 [ 488.807099][T19724] should_failslab+0x8c/0xb0 [ 488.807137][T19724] __kmalloc_cache_noprof+0x7a/0x400 [ 488.807170][T19724] ? sctp_add_bind_addr+0x71/0x1e0 [ 488.807275][T19724] sctp_add_bind_addr+0x71/0x1e0 [ 488.807299][T19724] sctp_do_bind+0x420/0x4b0 [ 488.807332][T19724] sctp_connect_new_asoc+0x153/0x3a0 [ 488.807368][T19724] sctp_sendmsg+0x105f/0x1d00 [ 488.807442][T19724] ? __pfx_sctp_sendmsg+0x10/0x10 [ 488.807489][T19724] inet_sendmsg+0xc5/0xd0 [ 488.807592][T19724] ? __pfx_inet_sendmsg+0x10/0x10 [ 488.807614][T19724] ____sys_sendmsg+0x4e8/0x580 [ 488.807650][T19724] ___sys_sendmsg+0x195/0x1e0 [ 488.807741][T19724] __sys_sendmmsg+0x185/0x320 [ 488.807859][T19724] __x64_sys_sendmmsg+0x57/0x70 [ 488.807893][T19724] x64_sys_call+0x1fb4/0x2550 [ 488.807996][T19724] do_syscall_64+0x112/0x360 [ 488.808028][T19724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.808053][T19724] RIP: 0033:0x7fb4de07e159 [ 488.808079][T19724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.808171][T19724] RSP: 002b:00007fb4dcad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 488.808216][T19724] RAX: ffffffffffffffda RBX: 00007fb4de305fa0 RCX: 00007fb4de07e159 [ 488.808233][T19724] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 488.808250][T19724] RBP: 00007fb4de115024 R08: 0000000000000000 R09: 0000000000000000 [ 488.808265][T19724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.808281][T19724] R13: 00007fb4de306038 R14: 00007fb4de305fa0 R15: 00007ffcbfe79358 [ 488.808304][T19724] [ 488.854653][T19724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=19724 comm=syz.6.3460 [ 489.151857][T19729] set_capacity_and_notify: 8 callbacks suppressed [ 489.151962][T19729] loop1: detected capacity change from 0 to 2048 [ 489.225164][T19724] loop6: detected capacity change from 0 to 512 [ 489.226009][T19729] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.290261][T19724] EXT4-fs: Ignoring removed oldalloc option [ 489.303970][T19724] EXT4-fs: Ignoring removed i_version option [ 489.315451][ T29] audit: type=1400 audit(1788593520.949:4258): avc: denied { write } for pid=19728 comm="syz.1.3461" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.358128][ T29] audit: type=1400 audit(1788593520.989:4259): avc: denied { write } for pid=19730 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.388004][T19724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 489.389434][ T29] audit: type=1400 audit(1788593521.029:4260): avc: denied { write } for pid=19728 comm="syz.1.3461" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.447426][T19724] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 489.447607][T19724] loop6: lost filesystem error report for type 5 error -117 [ 489.449343][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 489.449934][ C0] EXT4-fs (loop6): initial error at time 1788593521: ext4_process_orphan:346 [ 489.450156][ C0] EXT4-fs (loop6): last error at time 1788593521: ext4_process_orphan:346 [ 489.482783][T19724] EXT4-fs (loop6): 2 truncates cleaned up [ 489.584612][T19745] veth0: entered promiscuous mode [ 489.587989][T19745] netlink: 'syz.8.3463': attribute type 1 has an invalid length. [ 489.588006][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3463'. [ 489.588280][T19724] EXT4-fs warning (device loop6): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 489.630325][ T29] audit: type=1400 audit(1788593521.269:4261): avc: denied { write } for pid=19736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.637943][T19742] veth0: left promiscuous mode [ 489.678681][ T29] audit: type=1400 audit(1788593521.309:4262): avc: denied { write } for pid=19753 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.886410][T19761] lo speed is unknown, defaulting to 1000 [ 490.085901][T19776] loop6: detected capacity change from 0 to 164 [ 490.156612][T19776] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 490.305737][T19782] loop8: detected capacity change from 0 to 1024 [ 490.321123][T19782] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.660818][T19797] loop1: detected capacity change from 0 to 1024 [ 490.669366][T19797] EXT4-fs: Ignoring removed bh option [ 490.697879][T19797] EXT4-fs mount: 59 callbacks suppressed [ 490.697914][T19797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.717709][T19799] loop3: detected capacity change from 0 to 2048 [ 490.739931][T19803] FAULT_INJECTION: forcing a failure. [ 490.739931][T19803] name failslab, interval 1, probability 0, space 0, times 0 [ 490.739980][T19803] CPU: 0 UID: 0 PID: 19803 Comm: syz.1.3474 Not tainted syzkaller #0 PREEMPT(lazy) [ 490.740079][T19803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.740110][T19803] Call Trace: [ 490.740117][T19803] [ 490.740125][T19803] __dump_stack+0x1d/0x30 [ 490.740149][T19803] dump_stack_lvl+0x95/0xd0 [ 490.740202][T19803] dump_stack+0x15/0x1b [ 490.740269][T19803] should_fail_ex+0x262/0x280 [ 490.740296][T19803] should_failslab+0x8c/0xb0 [ 490.740328][T19803] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 490.740360][T19803] ? __d_alloc+0x34/0x320 [ 490.740443][T19803] ? __d_alloc+0x34/0x320 [ 490.740470][T19803] __d_alloc+0x34/0x320 [ 490.740495][T19803] ? d_alloc_pseudo+0x13/0x80 [ 490.740541][T19803] d_alloc_pseudo+0x1e/0x80 [ 490.740594][T19803] alloc_path_pseudo+0xa4/0x140 [ 490.740619][T19803] alloc_file_pseudo+0x55/0x120 [ 490.740644][T19803] sock_alloc_file+0x9c/0x1e0 [ 490.740668][T19803] __sys_socket+0x118/0x180 [ 490.740695][T19803] __x64_sys_socket+0x3f/0x50 [ 490.740728][T19803] x64_sys_call+0x246e/0x2550 [ 490.740826][T19803] do_syscall_64+0x112/0x360 [ 490.740858][T19803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.740935][T19803] RIP: 0033:0x7fb45f52e159 [ 490.740952][T19803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.740973][T19803] RSP: 002b:00007fb45df45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 490.740996][T19803] RAX: ffffffffffffffda RBX: 00007fb45f7b6180 RCX: 00007fb45f52e159 [ 490.741060][T19803] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a [ 490.741154][T19803] RBP: 00007fb45f5c5024 R08: 0000000000000000 R09: 0000000000000000 [ 490.741169][T19803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.741184][T19803] R13: 00007fb45f7b6218 R14: 00007fb45f7b6180 R15: 00007ffffd0e3bd8 [ 490.741265][T19803] [ 490.915789][T19799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.920731][T19799] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.978282][T14569] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /208/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 490.979702][T14569] EXT4-fs (loop1): Remounting filesystem read-only [ 491.020145][T14569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.059342][T19813] loop8: detected capacity change from 0 to 1024 [ 491.220062][T17815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.308929][T19813] lo speed is unknown, defaulting to 1000 [ 491.941965][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3486'. [ 492.200241][T19833] ip6gre1: entered allmulticast mode [ 492.610136][T19855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3491'. [ 492.790259][T11066] IPVS: starting estimator thread 0... [ 492.888932][T19858] IPVS: using max 2160 ests per chain, 108000 per kthread [ 493.811305][T19870] netlink: 'syz.6.3495': attribute type 39 has an invalid length. [ 494.058602][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 494.058625][ T29] audit: type=1400 audit(1788593525.689:4292): avc: denied { mounton } for pid=19880 comm="syz.8.3499" path="/proc/567/task" dev="proc" ino=53470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 494.079388][ T29] audit: type=1400 audit(1788593525.699:4293): avc: denied { write } for pid=19880 comm="syz.8.3499" name="dev_snmp6" dev="proc" ino=4026533211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 494.079498][ T29] audit: type=1400 audit(1788593525.709:4294): avc: denied { add_name } for pid=19880 comm="syz.8.3499" name="lo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 494.079524][ T29] audit: type=1400 audit(1788593525.709:4295): avc: denied { create } for pid=19880 comm="syz.8.3499" name="lo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1 [ 494.079651][ T29] audit: type=1400 audit(1788593525.709:4296): avc: denied { associate } for pid=19880 comm="syz.8.3499" name="lo" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 494.079756][ T29] audit: type=1400 audit(1788593525.709:4297): avc: denied { append } for pid=19880 comm="syz.8.3499" name="lo" dev="proc" ino=4026533292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 494.144997][T19886] FAULT_INJECTION: forcing a failure. [ 494.144997][T19886] name failslab, interval 1, probability 0, space 0, times 0 [ 494.145029][T19886] CPU: 1 UID: 0 PID: 19886 Comm: syz.8.3501 Not tainted syzkaller #0 PREEMPT(lazy) [ 494.145112][T19886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.145127][T19886] Call Trace: [ 494.145134][T19886] [ 494.145143][T19886] __dump_stack+0x1d/0x30 [ 494.145170][T19886] dump_stack_lvl+0x95/0xd0 [ 494.145261][T19886] dump_stack+0x15/0x1b [ 494.145281][T19886] should_fail_ex+0x262/0x280 [ 494.145339][T19886] ? sctp_add_bind_addr+0x71/0x1e0 [ 494.145364][T19886] should_failslab+0x8c/0xb0 [ 494.145428][T19886] __kmalloc_cache_noprof+0x7a/0x400 [ 494.145478][T19886] ? sctp_add_bind_addr+0x71/0x1e0 [ 494.145504][T19886] sctp_add_bind_addr+0x71/0x1e0 [ 494.145530][T19886] sctp_do_bind+0x420/0x4b0 [ 494.145561][T19886] sctp_connect_new_asoc+0x153/0x3a0 [ 494.145640][T19886] sctp_sendmsg+0x105f/0x1d00 [ 494.145675][T19886] ? __pfx_sctp_sendmsg+0x10/0x10 [ 494.145706][T19886] inet_sendmsg+0xc5/0xd0 [ 494.145787][T19886] ? __pfx_inet_sendmsg+0x10/0x10 [ 494.145808][T19886] ____sys_sendmsg+0x4e8/0x580 [ 494.145902][T19886] ___sys_sendmsg+0x195/0x1e0 [ 494.145970][T19886] __sys_sendmmsg+0x185/0x320 [ 494.146048][T19886] __x64_sys_sendmmsg+0x57/0x70 [ 494.146082][T19886] x64_sys_call+0x1fb4/0x2550 [ 494.146114][T19886] do_syscall_64+0x112/0x360 [ 494.146146][T19886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.146172][T19886] RIP: 0033:0x7fd8394ae159 [ 494.146323][T19886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.146344][T19886] RSP: 002b:00007fd837f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 494.146501][T19886] RAX: ffffffffffffffda RBX: 00007fd839735fa0 RCX: 00007fd8394ae159 [ 494.146518][T19886] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 494.146605][T19886] RBP: 00007fd839545024 R08: 0000000000000000 R09: 0000000000000000 [ 494.146620][T19886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.146634][T19886] R13: 00007fd839736038 R14: 00007fd839735fa0 R15: 00007ffe9d745b48 [ 494.146655][T19886] [ 494.147466][T19886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=19886 comm=syz.8.3501 [ 494.153632][T19886] loop8: detected capacity change from 0 to 512 [ 494.154948][T19886] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 494.163165][T19886] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.3501: bad orphan inode 131083 [ 494.163192][T19886] loop8: lost filesystem error report for type 5 error -117 [ 494.163917][T19886] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.164835][ T29] audit: type=1400 audit(1788593525.799:4298): avc: denied { write } for pid=19885 comm="syz.8.3501" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 494.172309][T19886] EXT4-fs warning (device loop8): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 494.196236][T14573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.292546][T19891] loop2: detected capacity change from 0 to 1024 [ 494.292900][T19891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 494.293031][T19891] EXT4-fs: Ignoring removed bh option [ 494.299057][T19891] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 494.375198][T19891] FAULT_INJECTION: forcing a failure. [ 494.375198][T19891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.375228][T19891] CPU: 1 UID: 0 PID: 19891 Comm: syz.2.3503 Not tainted syzkaller #0 PREEMPT(lazy) [ 494.375290][T19891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.375304][T19891] Call Trace: [ 494.375312][T19891] [ 494.375320][T19891] __dump_stack+0x1d/0x30 [ 494.375348][T19891] dump_stack_lvl+0x95/0xd0 [ 494.375371][T19891] dump_stack+0x15/0x1b [ 494.375432][T19891] should_fail_ex+0x262/0x280 [ 494.375458][T19891] should_fail+0xb/0x20 [ 494.375478][T19891] should_fail_usercopy+0x1a/0x20 [ 494.375504][T19891] copy_fpstate_to_sigframe+0x61c/0x7b0 [ 494.375548][T19891] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 494.375579][T19891] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 494.375615][T19891] ? x86_task_fpu+0x36/0x60 [ 494.375690][T19891] get_sigframe+0x34f/0x470 [ 494.375720][T19891] ? _raw_spin_unlock_irq+0x9/0x30 [ 494.375765][T19891] x64_setup_rt_frame+0xa7/0x4e0 [ 494.375856][T19891] arch_do_signal_or_restart+0x27c/0x480 [ 494.375893][T19891] exit_to_user_mode_loop+0x15d/0x8c0 [ 494.375946][T19891] do_syscall_64+0x212/0x360 [ 494.375979][T19891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.376005][T19891] RIP: 0033:0x7f2f5fe5e157 [ 494.376023][T19891] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 494.376049][T19891] RSP: 002b:00007f2f5e8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 494.376072][T19891] RAX: 0000000000000113 RBX: 00007f2f600e5fa0 RCX: 00007f2f5fe5e159 [ 494.376088][T19891] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 494.376103][T19891] RBP: 00007f2f5fef5024 R08: 0000000000000f3a R09: 0000000000000000 [ 494.376118][T19891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.376133][T19891] R13: 00007f2f600e6038 R14: 00007f2f600e5fa0 R15: 00007ffdaa97e528 [ 494.376197][T19891] [ 494.383094][T19896] loop1: detected capacity change from 0 to 1024 [ 494.570423][T19896] lo speed is unknown, defaulting to 1000 [ 494.858241][T19906] ip6t_srh: unknown srh invflags 4000 [ 494.869232][T19906] SELinux: invalid class [ 494.869695][T19906] SELinux: failed to load policy [ 494.967534][T19910] loop1: detected capacity change from 0 to 512 [ 494.977610][T19910] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 494.995907][T19897] loop8: detected capacity change from 0 to 512 [ 495.022817][T19897] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 495.037019][ T29] audit: type=1400 audit(1788593526.669:4299): avc: denied { map } for pid=19905 comm="syz.1.3508" path="socket:[53158]" dev="sockfs" ino=53158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 495.075746][T19897] Quota error (device loop8): do_check_range: Getting block 196613 out of range 1-5 [ 495.075914][T19897] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 495.076014][T19897] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.3502: Failed to acquire dquot type 1 [ 495.076194][T19897] loop8: lost filesystem error report for type 5 error -117 [ 495.078915][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 495.078950][ C1] EXT4-fs (loop8): last error at time 1788593526: ext4_acquire_dquot:7069 [ 495.085953][T19897] EXT4-fs (loop8): 1 truncate cleaned up [ 495.105647][T19897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 495.191696][T14573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 495.211725][T19904] loop3: detected capacity change from 0 to 512 [ 495.229161][T19904] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 495.284489][T19904] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.3507: Failed to acquire dquot type 1 [ 495.284669][T19904] loop3: lost filesystem error report for type 5 error -117 [ 495.296324][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 495.296344][ C0] EXT4-fs (loop3): last error at time 1788593526: ext4_acquire_dquot:7069 [ 495.332532][T19904] EXT4-fs (loop3): 1 truncate cleaned up [ 495.342823][T19904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 495.394354][T17815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 495.490786][T19908] lo speed is unknown, defaulting to 1000 [ 495.505743][T19936] loop1: detected capacity change from 0 to 764 [ 495.565274][T19942] loop1: detected capacity change from 0 to 1024 [ 495.692340][T19947] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 495.692368][T19947] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 495.692478][T19947] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 495.781013][T19952] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3522'. [ 495.781040][T19952] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3522'. [ 495.788227][T19942] lo speed is unknown, defaulting to 1000 [ 496.242221][T19960] loop8: detected capacity change from 0 to 512 [ 496.286662][T19960] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 496.356078][T19960] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.3525: Failed to acquire dquot type 1 [ 496.356375][T19960] loop8: lost filesystem error report for type 5 error -117 [ 496.368637][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 496.368679][ C0] EXT4-fs (loop8): last error at time 1788593527: ext4_acquire_dquot:7069 [ 496.411141][T19960] EXT4-fs (loop8): 1 truncate cleaned up [ 496.430967][T19960] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 496.462493][T19973] loop1: detected capacity change from 0 to 164 [ 496.487281][T14573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 496.608469][T19973] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 496.932937][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3536'. [ 497.025757][T19991] FAULT_INJECTION: forcing a failure. [ 497.025757][T19991] name failslab, interval 1, probability 0, space 0, times 0 [ 497.025859][T19991] CPU: 1 UID: 0 PID: 19991 Comm: syz.6.3538 Not tainted syzkaller #0 PREEMPT(lazy) [ 497.025887][T19991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.025912][T19991] Call Trace: [ 497.025919][T19991] [ 497.025953][T19991] __dump_stack+0x1d/0x30 [ 497.026056][T19991] dump_stack_lvl+0x95/0xd0 [ 497.026081][T19991] dump_stack+0x15/0x1b [ 497.026106][T19991] should_fail_ex+0x262/0x280 [ 497.026132][T19991] ? sctp_add_bind_addr+0x71/0x1e0 [ 497.026157][T19991] should_failslab+0x8c/0xb0 [ 497.026209][T19991] __kmalloc_cache_noprof+0x7a/0x400 [ 497.026245][T19991] ? sctp_add_bind_addr+0x71/0x1e0 [ 497.026292][T19991] sctp_add_bind_addr+0x71/0x1e0 [ 497.026315][T19991] sctp_do_bind+0x420/0x4b0 [ 497.026342][T19991] sctp_connect_new_asoc+0x153/0x3a0 [ 497.026379][T19991] sctp_sendmsg+0x105f/0x1d00 [ 497.026413][T19991] ? __pfx_sctp_sendmsg+0x10/0x10 [ 497.026437][T19991] inet_sendmsg+0xc5/0xd0 [ 497.026523][T19991] ? __pfx_inet_sendmsg+0x10/0x10 [ 497.026545][T19991] ____sys_sendmsg+0x4e8/0x580 [ 497.026582][T19991] ___sys_sendmsg+0x195/0x1e0 [ 497.026641][T19991] __sys_sendmmsg+0x185/0x320 [ 497.026743][T19991] __x64_sys_sendmmsg+0x57/0x70 [ 497.026804][T19991] x64_sys_call+0x1fb4/0x2550 [ 497.026834][T19991] do_syscall_64+0x112/0x360 [ 497.026865][T19991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.026915][T19991] RIP: 0033:0x7fb4de07e159 [ 497.026934][T19991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.026993][T19991] RSP: 002b:00007fb4dcad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 497.027017][T19991] RAX: ffffffffffffffda RBX: 00007fb4de305fa0 RCX: 00007fb4de07e159 [ 497.027034][T19991] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 497.027055][T19991] RBP: 00007fb4de115024 R08: 0000000000000000 R09: 0000000000000000 [ 497.027070][T19991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.027121][T19991] R13: 00007fb4de306038 R14: 00007fb4de305fa0 R15: 00007ffcbfe79358 [ 497.027142][T19991] [ 497.127422][T19993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.254807][T19991] loop6: detected capacity change from 0 to 512 [ 497.352803][T19991] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 497.361646][T19991] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.3538: bad orphan inode 131083 [ 497.361806][T19991] loop6: lost filesystem error report for type 5 error -117 [ 497.367950][T19991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.711357][T20003] lo speed is unknown, defaulting to 1000 [ 497.732502][T19991] EXT4-fs warning (device loop6): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 497.783006][T14390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.901511][T20006] EXT4-fs: Ignoring removed bh option [ 497.908350][T20006] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 497.911152][T20006] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 498.075959][T20010] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 498.114631][T20006] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 498.128253][T20010] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.3543: Failed to acquire dquot type 1 [ 498.128322][T20010] loop8: lost filesystem error report for type 5 error -117 [ 498.136402][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 498.136632][ C1] EXT4-fs (loop8): last error at time 1788593529: ext4_acquire_dquot:7069 [ 498.191578][T20010] EXT4-fs (loop8): 1 truncate cleaned up [ 498.208407][T20010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 498.276137][T14573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 498.290634][T20016] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3544'. [ 498.337728][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3546'. [ 498.425635][T19930] FAULT_INJECTION: forcing a failure. [ 498.425635][T19930] name fail_futex, interval 1, probability 0, space 0, times 0 [ 498.425671][T19930] CPU: 1 UID: 0 PID: 19930 Comm: syz.3.3515 Not tainted syzkaller #0 PREEMPT(lazy) [ 498.425773][T19930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.425787][T19930] Call Trace: [ 498.425794][T19930] [ 498.425864][T19930] __dump_stack+0x1d/0x30 [ 498.425892][T19930] dump_stack_lvl+0x95/0xd0 [ 498.425917][T19930] dump_stack+0x15/0x1b [ 498.425940][T19930] should_fail_ex+0x262/0x280 [ 498.425970][T19930] should_fail+0xb/0x20 [ 498.426026][T19930] get_futex_key+0x12d/0xb10 [ 498.426057][T19930] futex_wake+0x89/0x400 [ 498.426093][T19930] ? perf_lock_task_context+0x24b/0x2c0 [ 498.426126][T19930] do_futex+0x3f8/0x460 [ 498.426275][T19930] mm_exit_exec_release+0xab/0x190 [ 498.426298][T19930] exit_mm+0x37/0x1a0 [ 498.426329][T19930] do_exit+0x438/0x1510 [ 498.426394][T19930] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 498.426472][T19930] do_group_exit+0xfe/0x140 [ 498.426503][T19930] ? get_signal+0xe00/0xf10 [ 498.426539][T19930] get_signal+0xe07/0xf10 [ 498.426613][T19930] arch_do_signal_or_restart+0x96/0x480 [ 498.426702][T19930] exit_to_user_mode_loop+0x15d/0x8c0 [ 498.426735][T19930] do_syscall_64+0x212/0x360 [ 498.426766][T19930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.426889][T19930] RIP: 0033:0x7f49b410e159 [ 498.426911][T19930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.426929][T19930] RSP: 002b:00007f49b2b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 498.426949][T19930] RAX: fffffffffffffe00 RBX: 00007f49b4395fa0 RCX: 00007f49b410e159 [ 498.427046][T19930] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 498.427061][T19930] RBP: 00007f49b41a5024 R08: 0000000000000f3a R09: 0000000000000000 [ 498.427078][T19930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.427094][T19930] R13: 00007f49b4396038 R14: 00007f49b4395fa0 R15: 00007ffeb8ac79a8 [ 498.427116][T19930] [ 498.449017][T20018] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 498.671709][T20027] EXT4-fs (loop3): 1 orphan inode deleted [ 498.672223][T20027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.672345][T20027] ext4 filesystem being mounted at /92/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.713151][T20033] FAULT_INJECTION: forcing a failure. [ 498.713151][T20033] name failslab, interval 1, probability 0, space 0, times 0 [ 498.713189][T20033] CPU: 1 UID: 0 PID: 20033 Comm: syz.8.3551 Not tainted syzkaller #0 PREEMPT(lazy) [ 498.713217][T20033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.713231][T20033] Call Trace: [ 498.713298][T20033] [ 498.713307][T20033] __dump_stack+0x1d/0x30 [ 498.713338][T20033] dump_stack_lvl+0x95/0xd0 [ 498.713363][T20033] dump_stack+0x15/0x1b [ 498.713383][T20033] should_fail_ex+0x262/0x280 [ 498.713404][T20033] ? sctp_add_bind_addr+0x71/0x1e0 [ 498.713434][T20033] should_failslab+0x8c/0xb0 [ 498.713533][T20033] __kmalloc_cache_noprof+0x7a/0x400 [ 498.713567][T20033] ? sctp_add_bind_addr+0x71/0x1e0 [ 498.713662][T20033] sctp_add_bind_addr+0x71/0x1e0 [ 498.713684][T20033] sctp_do_bind+0x420/0x4b0 [ 498.713717][T20033] sctp_connect_new_asoc+0x153/0x3a0 [ 498.713767][T20033] sctp_sendmsg+0x105f/0x1d00 [ 498.713844][T20033] ? __pfx_sctp_sendmsg+0x10/0x10 [ 498.713876][T20033] inet_sendmsg+0xc5/0xd0 [ 498.713900][T20033] ? __pfx_inet_sendmsg+0x10/0x10 [ 498.713928][T20033] ____sys_sendmsg+0x4e8/0x580 [ 498.713989][T20033] ___sys_sendmsg+0x195/0x1e0 [ 498.714034][T20033] __sys_sendmmsg+0x185/0x320 [ 498.714120][T20033] __x64_sys_sendmmsg+0x57/0x70 [ 498.714156][T20033] x64_sys_call+0x1fb4/0x2550 [ 498.714243][T20033] do_syscall_64+0x112/0x360 [ 498.714271][T20033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.714295][T20033] RIP: 0033:0x7fd8394ae159 [ 498.714315][T20033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.714337][T20033] RSP: 002b:00007fd837f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 498.714416][T20033] RAX: ffffffffffffffda RBX: 00007fd839735fa0 RCX: 00007fd8394ae159 [ 498.714423][T17815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.714435][T20033] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 498.714451][T20033] RBP: 00007fd839545024 R08: 0000000000000000 R09: 0000000000000000 [ 498.714467][T20033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.714482][T20033] R13: 00007fd839736038 R14: 00007fd839735fa0 R15: 00007ffe9d745b48 [ 498.714507][T20033] [ 498.787132][T20016] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 499.045136][T20044] FAULT_INJECTION: forcing a failure. [ 499.045136][T20044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.045188][T20044] CPU: 0 UID: 0 PID: 20044 Comm: syz.1.3553 Not tainted syzkaller #0 PREEMPT(lazy) [ 499.045219][T20044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.045234][T20044] Call Trace: [ 499.045241][T20044] [ 499.045248][T20044] __dump_stack+0x1d/0x30 [ 499.045342][T20044] dump_stack_lvl+0x95/0xd0 [ 499.045368][T20044] dump_stack+0x15/0x1b [ 499.045399][T20044] should_fail_ex+0x262/0x280 [ 499.045446][T20044] should_fail+0xb/0x20 [ 499.045468][T20044] should_fail_usercopy+0x1a/0x20 [ 499.045530][T20044] _copy_from_user+0x1c/0xb0 [ 499.045558][T20044] ___sys_sendmsg+0xc1/0x1e0 [ 499.045639][T20044] __x64_sys_sendmsg+0xd4/0x160 [ 499.045671][T20044] x64_sys_call+0x22ab/0x2550 [ 499.045697][T20044] do_syscall_64+0x112/0x360 [ 499.045808][T20044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.045832][T20044] RIP: 0033:0x7fb45f52e159 [ 499.045852][T20044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.045875][T20044] RSP: 002b:00007fb45df66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.045906][T20044] RAX: ffffffffffffffda RBX: 00007fb45f7b6090 RCX: 00007fb45f52e159 [ 499.045924][T20044] RDX: 0000000004040010 RSI: 0000200000000140 RDI: 0000000000000003 [ 499.045983][T20044] RBP: 00007fb45df66090 R08: 0000000000000000 R09: 0000000000000000 [ 499.045997][T20044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.046014][T20044] R13: 00007fb45f7b6128 R14: 00007fb45f7b6090 R15: 00007ffffd0e3bd8 [ 499.046036][T20044] [ 499.118738][T20036] lo speed is unknown, defaulting to 1000 [ 499.128683][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 499.128701][ T29] audit: type=1400 audit(1788593530.759:4320): avc: denied { mount } for pid=20045 comm="syz.2.3554" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 499.131417][ T29] audit: type=1400 audit(1788593530.769:4321): avc: denied { remount } for pid=20045 comm="syz.2.3554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 499.134217][ T29] audit: type=1400 audit(1788593530.769:4322): avc: denied { create } for pid=20045 comm="syz.2.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 499.207483][ T29] audit: type=1400 audit(1788593530.839:4323): avc: denied { unmount } for pid=14385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 499.235958][T20034] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 499.263280][T20034] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.3551: bad orphan inode 131083 [ 499.263416][T20034] loop8: lost filesystem error report for type 5 error -117 [ 499.343274][T20034] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.356187][ T29] audit: type=1400 audit(1788593530.989:4324): avc: denied { write } for pid=20032 comm="syz.8.3551" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.453369][T20051] set_capacity_and_notify: 8 callbacks suppressed [ 499.453485][T20051] loop1: detected capacity change from 0 to 512 [ 499.489702][T20051] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 499.511009][T20051] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 499.511250][T20051] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 499.511279][T20051] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3556: Failed to acquire dquot type 1 [ 499.511419][T20051] loop1: lost filesystem error report for type 5 error -117 [ 499.518893][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 499.518931][ C0] EXT4-fs (loop1): last error at time 1788593531: ext4_acquire_dquot:7069 [ 499.530815][T20051] EXT4-fs (loop1): 1 truncate cleaned up [ 499.639475][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 499.699920][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3557'. [ 499.702302][T20033] EXT4-fs warning (device loop8): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 499.789591][T14573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.853315][T20062] netlink: 'syz.2.3558': attribute type 1 has an invalid length. [ 499.853342][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3558'. [ 499.856002][T20051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 499.907244][T14569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 499.911719][T20061] syzkaller0: entered promiscuous mode [ 499.911807][T20061] syzkaller0: entered allmulticast mode [ 499.941253][T20066] netlink: 'syz.1.3561': attribute type 1 has an invalid length. [ 499.941278][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3561'. [ 500.010065][T20068] xt_connbytes: Forcing CT accounting to be enabled [ 500.087834][T20070] loop3: detected capacity change from 0 to 164 [ 500.122981][T20072] loop1: detected capacity change from 0 to 164 [ 500.193051][T20072] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 500.215593][T20070] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 500.870917][ T29] audit: type=1400 audit(1788593532.509:4325): avc: denied { mount } for pid=20080 comm="syz.3.3566" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 501.034095][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3568'. [ 501.044997][T20083] loop2: detected capacity change from 0 to 2048 [ 501.060730][T20083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.060800][T20083] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.073464][ T29] audit: type=1400 audit(1788593532.699:4326): avc: denied { write } for pid=20082 comm="syz.2.3567" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 501.073494][ T29] audit: type=1400 audit(1788593532.699:4327): avc: denied { write } for pid=20082 comm="syz.2.3567" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 501.083409][T20087] FAULT_INJECTION: forcing a failure. [ 501.083409][T20087] name failslab, interval 1, probability 0, space 0, times 0 [ 501.083453][T20087] CPU: 1 UID: 0 PID: 20087 Comm: syz.3.3569 Not tainted syzkaller #0 PREEMPT(lazy) [ 501.083505][T20087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.083519][T20087] Call Trace: [ 501.083527][T20087] [ 501.083535][T20087] __dump_stack+0x1d/0x30 [ 501.083608][T20087] dump_stack_lvl+0x95/0xd0 [ 501.083677][T20087] dump_stack+0x15/0x1b [ 501.083700][T20087] should_fail_ex+0x262/0x280 [ 501.083724][T20087] ? __get_vm_area_node+0x125/0x1f0 [ 501.083773][T20087] should_failslab+0x8c/0xb0 [ 501.083804][T20087] __kmalloc_cache_node_noprof+0x81/0x420 [ 501.083838][T20087] ? __get_vm_area_node+0x125/0x1f0 [ 501.083906][T20087] __get_vm_area_node+0x125/0x1f0 [ 501.083938][T20087] __vmalloc_node_range_noprof+0x262/0x1000 [ 501.083970][T20087] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 501.083991][T20087] ? _raw_spin_unlock+0x9/0x30 [ 501.084080][T20087] ? __hrtimer_rearm_deferred+0x571/0x650 [ 501.084105][T20087] ? _raw_spin_unlock+0x9/0x30 [ 501.084245][T20087] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 501.084270][T20087] __vmalloc_noprof+0xa4/0xf0 [ 501.084301][T20087] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 501.084339][T20087] bpf_prog_alloc_no_stats+0x47/0x390 [ 501.084366][T20087] ? bpf_prog_alloc+0x2a/0x150 [ 501.084388][T20087] bpf_prog_alloc+0x3c/0x150 [ 501.084412][T20087] bpf_prog_create_from_user+0x80/0x260 [ 501.084447][T20087] ? __pfx_seccomp_check_filter+0x10/0x10 [ 501.084519][T20087] do_seccomp+0x5ef/0xa40 [ 501.084551][T20087] __x64_sys_seccomp+0x40/0x50 [ 501.084581][T20087] x64_sys_call+0x3f0/0x2550 [ 501.084609][T20087] do_syscall_64+0x112/0x360 [ 501.084710][T20087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.084735][T20087] RIP: 0033:0x7f49b410e159 [ 501.084761][T20087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.084782][T20087] RSP: 002b:00007f49b2b67028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 501.084856][T20087] RAX: ffffffffffffffda RBX: 00007f49b4395fa0 RCX: 00007f49b410e159 [ 501.084872][T20087] RDX: 0000200000000140 RSI: 000000000000000c RDI: 0000000000000001 [ 501.084920][T20087] RBP: 00007f49b2b67090 R08: 0000000000000000 R09: 0000000000000000 [ 501.084935][T20087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.084950][T20087] R13: 00007f49b4396038 R14: 00007f49b4395fa0 R15: 00007ffeb8ac79a8 [ 501.084971][T20087] [ 501.107215][T20087] syz.3.3569: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 501.107516][T20087] CPU: 1 UID: 0 PID: 20087 Comm: syz.3.3569 Not tainted syzkaller #0 PREEMPT(lazy) [ 501.107544][T20087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.107558][T20087] Call Trace: [ 501.107565][T20087] [ 501.107573][T20087] __dump_stack+0x1d/0x30 [ 501.107628][T20087] dump_stack_lvl+0x95/0xd0 [ 501.107653][T20087] dump_stack+0x15/0x1b [ 501.107676][T20087] warn_alloc+0x146/0x1c0 [ 501.107711][T20087] __vmalloc_node_range_noprof+0x28a/0x1000 [ 501.107819][T20087] ? _raw_spin_unlock+0x9/0x30 [ 501.107909][T20087] ? __hrtimer_rearm_deferred+0x571/0x650 [ 501.107943][T20087] ? _raw_spin_unlock+0x9/0x30 [ 501.107983][T20087] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 501.108007][T20087] __vmalloc_noprof+0xa4/0xf0 [ 501.108089][T20087] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 501.108114][T20087] bpf_prog_alloc_no_stats+0x47/0x390 [ 501.108138][T20087] ? bpf_prog_alloc+0x2a/0x150 [ 501.108161][T20087] bpf_prog_alloc+0x3c/0x150 [ 501.108276][T20087] bpf_prog_create_from_user+0x80/0x260 [ 501.108439][T20087] ? __pfx_seccomp_check_filter+0x10/0x10 [ 501.108474][T20087] do_seccomp+0x5ef/0xa40 [ 501.108505][T20087] __x64_sys_seccomp+0x40/0x50 [ 501.108647][T20087] x64_sys_call+0x3f0/0x2550 [ 501.108702][T20087] do_syscall_64+0x112/0x360 [ 501.108735][T20087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.108813][T20087] RIP: 0033:0x7f49b410e159 [ 501.108831][T20087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.108902][T20087] RSP: 002b:00007f49b2b67028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 501.108925][T20087] RAX: ffffffffffffffda RBX: 00007f49b4395fa0 RCX: 00007f49b410e159 [ 501.108941][T20087] RDX: 0000200000000140 RSI: 000000000000000c RDI: 0000000000000001 [ 501.108956][T20087] RBP: 00007f49b2b67090 R08: 0000000000000000 R09: 0000000000000000 [ 501.108971][T20087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.109002][T20087] R13: 00007f49b4396038 R14: 00007f49b4395fa0 R15: 00007ffeb8ac79a8 [ 501.109024][T20087] [ 501.119755][T20087] Mem-Info: [ 501.119926][T20087] active_anon:10602 inactive_anon:9 isolated_anon:0 [ 501.119926][T20087] active_file:443 inactive_file:24551 isolated_file:0 [ 501.119926][T20087] unevictable:1 dirty:452 writeback:0 [ 501.119926][T20087] slab_reclaimable:3827 slab_unreclaimable:19997 [ 501.119926][T20087] mapped:31512 shmem:1261 pagetables:2027 [ 501.119926][T20087] sec_pagetables:0 bounce:0 [ 501.119926][T20087] kernel_misc_reclaimable:0 [ 501.119926][T20087] free:1865869 free_pcp:4750 free_cma:0 [ 501.120024][T20087] Node 0 active_anon:42408kB inactive_anon:36kB active_file:1772kB inactive_file:98204kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:126048kB dirty:1808kB writeback:0kB shmem:5044kB kernel_stack:4768kB pagetables:8108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 501.120156][T20087] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.120356][T20087] lowmem_reserve[]: 0 2877 7856 7856 [ 501.120647][T20087] Node 0 DMA32 free:2946912kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946912kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.120797][T20087] lowmem_reserve[]: 0 0 4978 4978 [ 501.121039][T20087] Node 0 Normal free:4501204kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42408kB inactive_anon:36kB active_file:1772kB inactive_file:98204kB unevictable:4kB writepending:1808kB zspages:0kB present:5242880kB managed:5098228kB mlocked:8kB bounce:0kB free_pcp:19000kB local_pcp:8772kB free_cma:0kB [ 501.121324][T20091] FAULT_INJECTION: forcing a failure. [ 501.121324][T20091] name failslab, interval 1, probability 0, space 0, times 0 [ 501.121351][T20091] CPU: 1 UID: 0 PID: 20091 Comm: syz.1.3570 Not tainted syzkaller #0 PREEMPT(lazy) [ 501.121380][T20091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.121395][T20091] Call Trace: [ 501.121452][T20091] [ 501.121460][T20091] __dump_stack+0x1d/0x30 [ 501.121536][T20091] dump_stack_lvl+0x95/0xd0 [ 501.121561][T20091] dump_stack+0x15/0x1b [ 501.121585][T20091] should_fail_ex+0x262/0x280 [ 501.121609][T20091] ? sctp_add_bind_addr+0x71/0x1e0 [ 501.121633][T20091] should_failslab+0x8c/0xb0 [ 501.121679][T20091] __kmalloc_cache_noprof+0x7a/0x400 [ 501.121724][T20091] ? sctp_add_bind_addr+0x71/0x1e0 [ 501.121756][T20091] sctp_add_bind_addr+0x71/0x1e0 [ 501.121823][T20091] sctp_copy_local_addr_list+0x1b4/0x250 [ 501.121850][T20091] sctp_copy_one_addr+0x7f/0x280 [ 501.121875][T20091] sctp_bind_addr_copy+0x79/0x290 [ 501.121900][T20091] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 501.122009][T20091] sctp_connect_new_asoc+0x1c3/0x3a0 [ 501.122044][T20091] sctp_sendmsg+0x105f/0x1d00 [ 501.122078][T20091] ? __pfx_sctp_sendmsg+0x10/0x10 [ 501.122145][T20091] inet_sendmsg+0xc5/0xd0 [ 501.122167][T20091] ? __pfx_inet_sendmsg+0x10/0x10 [ 501.122189][T20091] ____sys_sendmsg+0x4e8/0x580 [ 501.122226][T20091] ___sys_sendmsg+0x195/0x1e0 [ 501.122322][T20091] __sys_sendmmsg+0x185/0x320 [ 501.122364][T20091] __x64_sys_sendmmsg+0x57/0x70 [ 501.122399][T20091] x64_sys_call+0x1fb4/0x2550 [ 501.122525][T20091] do_syscall_64+0x112/0x360 [ 501.122635][T20091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.122662][T20091] RIP: 0033:0x7fb45f52e159 [ 501.122680][T20091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.122701][T20091] RSP: 002b:00007fb45df87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 501.122762][T20091] RAX: ffffffffffffffda RBX: 00007fb45f7b5fa0 RCX: 00007fb45f52e159 [ 501.122779][T20091] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 501.122795][T20091] RBP: 00007fb45f5c5024 R08: 0000000000000000 R09: 0000000000000000 [ 501.122866][T20091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.122880][T20091] R13: 00007fb45f7b6038 R14: 00007fb45f7b5fa0 R15: 00007ffffd0e3bd8 [ 501.122901][T20091] [ 501.126263][T20087] lowmem_reserve[]: 0 0 0 0 [ 501.126543][T20087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 501.127112][T20087] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 1*256kB (M) 4*512kB (M) 5*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2946912kB [ 501.146829][T20087] Node 0 Normal: 1177*4kB (UME) 1698*8kB (UM) 898*16kB (UME) 440*32kB (UME) 239*64kB (UME) 95*128kB (UM) 33*256kB (UME) 60*512kB (UME) 47*1024kB (UM) 35*2048kB (UM) 1042*4096kB (UM) = 4501204kB [ 501.153161][T20087] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 501.153191][T20087] 26228 total pagecache pages [ 501.153210][T20087] 11 pages in swap cache [ 501.153229][T20087] Free swap = 124676kB [ 501.153321][T20087] Total swap = 124996kB [ 501.153339][T20087] 2097051 pages RAM [ 501.153404][T20087] 0 pages HighMem/MovableOnly [ 501.153419][T20087] 81926 pages reserved [ 501.265372][T14385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.437877][T20091] loop1: detected capacity change from 0 to 512 [ 501.504450][T20091] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 501.523398][T20091] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.3570: bad orphan inode 131083 [ 501.523437][T20091] loop1: lost filesystem error report for type 5 error -117 [ 501.554959][T20091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.610846][T20097] loop6: detected capacity change from 0 to 164 [ 501.666537][T20097] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 501.754521][T20101] netlink: 'syz.6.3573': attribute type 1 has an invalid length. [ 501.754539][T20101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3573'. [ 502.168386][T20091] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 502.211655][T20111] loop3: detected capacity change from 0 to 164 [ 502.308111][T20105] loop6: detected capacity change from 0 to 512 [ 502.326832][T14569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.347713][T20111] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 502.374111][T20105] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 502.467412][T20105] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.3574: Failed to acquire dquot type 1 [ 502.467532][T20105] loop6: lost filesystem error report for type 5 error -117 [ 502.468832][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 502.468851][ C1] EXT4-fs (loop6): last error at time 1788593534: ext4_acquire_dquot:7069 [ 502.472090][T20105] EXT4-fs (loop6): 1 truncate cleaned up [ 502.478092][T20105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 502.491988][T20113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.496508][T20113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.538400][T14390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 502.579301][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3580'. [ 502.623239][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3581'. [ 502.826775][T20130] FAULT_INJECTION: forcing a failure. [ 502.826775][T20130] name failslab, interval 1, probability 0, space 0, times 0 [ 502.826816][T20130] CPU: 1 UID: 0 PID: 20130 Comm: syz.6.3583 Not tainted syzkaller #0 PREEMPT(lazy) [ 502.826851][T20130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.826867][T20130] Call Trace: [ 502.826875][T20130] [ 502.826884][T20130] __dump_stack+0x1d/0x30 [ 502.826913][T20130] dump_stack_lvl+0x95/0xd0 [ 502.826940][T20130] dump_stack+0x15/0x1b [ 502.826967][T20130] should_fail_ex+0x262/0x280 [ 502.826993][T20130] ? nft_trans_table_add+0x36/0x190 [ 502.827031][T20130] should_failslab+0x8c/0xb0 [ 502.827112][T20130] __kmalloc_cache_noprof+0x7a/0x400 [ 502.827147][T20130] ? nft_trans_table_add+0x36/0x190 [ 502.827199][T20130] nft_trans_table_add+0x36/0x190 [ 502.827298][T20130] nf_tables_newtable+0x986/0xf00 [ 502.827342][T20130] nfnetlink_rcv+0xbf7/0x1740 [ 502.827447][T20130] netlink_unicast+0x5a9/0x680 [ 502.827549][T20130] netlink_sendmsg+0x5be/0x6f0 [ 502.827584][T20130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.827616][T20130] ____sys_sendmsg+0x532/0x580 [ 502.827655][T20130] ___sys_sendmsg+0x195/0x1e0 [ 502.827721][T20130] __x64_sys_sendmsg+0xd4/0x160 [ 502.827779][T20130] x64_sys_call+0x22ab/0x2550 [ 502.827827][T20130] do_syscall_64+0x112/0x360 [ 502.827861][T20130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.827888][T20130] RIP: 0033:0x7fb4de07e159 [ 502.827907][T20130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.827928][T20130] RSP: 002b:00007fb4dcad7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.828031][T20130] RAX: ffffffffffffffda RBX: 00007fb4de305fa0 RCX: 00007fb4de07e159 [ 502.828049][T20130] RDX: 0000000000004000 RSI: 0000200000005780 RDI: 0000000000000003 [ 502.828065][T20130] RBP: 00007fb4dcad7090 R08: 0000000000000000 R09: 0000000000000000 [ 502.828082][T20130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.828098][T20130] R13: 00007fb4de306038 R14: 00007fb4de305fa0 R15: 00007ffcbfe79358 [ 502.828173][T20130] [ 502.850697][T20132] netlink: 'syz.1.3584': attribute type 1 has an invalid length. [ 502.881200][T20134] loop1: detected capacity change from 0 to 1024 [ 503.171084][T20134] lo speed is unknown, defaulting to 1000 [ 503.371982][T20136] syzkaller0: entered promiscuous mode [ 503.372008][T20136] syzkaller0: entered allmulticast mode [ 503.601935][T20152] loop2: detected capacity change from 0 to 512 [ 503.641574][T20152] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 503.731109][T20156] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 503.766261][T20154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.770361][T20154] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.797992][T20152] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.3590: Failed to acquire dquot type 1 [ 503.798352][T20152] loop2: lost filesystem error report for type 5 error -117 [ 503.810184][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 503.810206][ C0] EXT4-fs (loop2): last error at time 1788593535: ext4_acquire_dquot:7069 [ 503.860040][T20152] EXT4-fs (loop2): 1 truncate cleaned up [ 503.881966][T20152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 503.915001][T20163] FAULT_INJECTION: forcing a failure. [ 503.915001][T20163] name failslab, interval 1, probability 0, space 0, times 0 [ 503.915169][T20163] CPU: 0 UID: 0 PID: 20163 Comm: syz.1.3594 Not tainted syzkaller #0 PREEMPT(lazy) [ 503.915199][T20163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.915214][T20163] Call Trace: [ 503.915222][T20163] [ 503.915231][T20163] __dump_stack+0x1d/0x30 [ 503.915311][T20163] dump_stack_lvl+0x95/0xd0 [ 503.915338][T20163] dump_stack+0x15/0x1b [ 503.915386][T20163] should_fail_ex+0x262/0x280 [ 503.915407][T20163] ? rxrpc_alloc_peer+0x64/0x230 [ 503.915428][T20163] should_failslab+0x8c/0xb0 [ 503.915457][T20163] __kmalloc_cache_noprof+0x7a/0x400 [ 503.915519][T20163] ? rxrpc_alloc_peer+0x64/0x230 [ 503.915542][T20163] rxrpc_alloc_peer+0x64/0x230 [ 503.915573][T20163] rxrpc_lookup_peer+0x1f3/0x550 [ 503.915680][T20163] rxrpc_do_sendmsg+0x9b4/0xe40 [ 503.915713][T20163] rxrpc_sendmsg+0x46c/0x580 [ 503.915748][T20163] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 503.915782][T20163] ____sys_sendmsg+0x532/0x580 [ 503.915887][T20163] ___sys_sendmsg+0x195/0x1e0 [ 503.915965][T20163] __x64_sys_sendmsg+0xd4/0x160 [ 503.916000][T20163] x64_sys_call+0x22ab/0x2550 [ 503.916026][T20163] do_syscall_64+0x112/0x360 [ 503.916057][T20163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.916158][T20163] RIP: 0033:0x7fb45f52e159 [ 503.916174][T20163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.916192][T20163] RSP: 002b:00007fb45df87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.916212][T20163] RAX: ffffffffffffffda RBX: 00007fb45f7b5fa0 RCX: 00007fb45f52e159 [ 503.916227][T20163] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 503.916240][T20163] RBP: 00007fb45df87090 R08: 0000000000000000 R09: 0000000000000000 [ 503.916274][T20163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.916346][T20163] R13: 00007fb45f7b6038 R14: 00007fb45f7b5fa0 R15: 00007ffffd0e3bd8 [ 503.916364][T20163] [ 504.134041][T20172] veth0: entered promiscuous mode [ 504.140063][T20172] netlink: 'syz.6.3595': attribute type 1 has an invalid length. [ 504.140082][T20172] __nla_validate_parse: 1 callbacks suppressed [ 504.140097][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3595'. [ 504.172425][T20168] veth0: left promiscuous mode [ 504.784092][T14573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.796456][T14385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 504.900419][T20180] syzkaller0: entered promiscuous mode [ 504.900547][T20180] syzkaller0: entered allmulticast mode [ 504.918748][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3597'. [ 505.000571][T20185] set_capacity_and_notify: 3 callbacks suppressed [ 505.000631][T20185] loop3: detected capacity change from 0 to 2048 [ 505.034871][T20185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.035101][T20185] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.112249][T20194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.138580][T20193] FAULT_INJECTION: forcing a failure. [ 505.138580][T20193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.138648][T20193] CPU: 1 UID: 0 PID: 20193 Comm: syz.2.3604 Not tainted syzkaller #0 PREEMPT(lazy) [ 505.138682][T20193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.138785][T20193] Call Trace: [ 505.138793][T20193] [ 505.138802][T20193] __dump_stack+0x1d/0x30 [ 505.138832][T20193] dump_stack_lvl+0x95/0xd0 [ 505.138859][T20193] dump_stack+0x15/0x1b [ 505.138898][T20193] should_fail_ex+0x262/0x280 [ 505.138925][T20193] should_fail+0xb/0x20 [ 505.138945][T20193] should_fail_usercopy+0x1a/0x20 [ 505.139016][T20193] _copy_from_user+0x1c/0xb0 [ 505.139043][T20193] restore_altstack+0x4b/0x300 [ 505.139136][T20193] ? __set_current_blocked+0x284/0x2e0 [ 505.139161][T20193] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 505.139204][T20193] ? arch_do_signal_or_restart+0x2f3/0x480 [ 505.139242][T20193] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 505.139352][T20193] ? __rcu_read_unlock+0x4e/0x70 [ 505.139443][T20193] x64_sys_call+0x1532/0x2550 [ 505.139471][T20193] do_syscall_64+0x112/0x360 [ 505.139549][T20193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.139574][T20193] RIP: 0033:0x7f2f5fdff4d9 [ 505.139592][T20193] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 505.139648][T20193] RSP: 002b:00007f2f5e8b6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 505.139670][T20193] RAX: ffffffffffffffda RBX: 00007f2f600e5fa0 RCX: 00007f2f5fdff4d9 [ 505.139760][T20193] RDX: 00007f2f5e8b6a80 RSI: 00007f2f5e8b6bb0 RDI: 0000000000000021 [ 505.139776][T20193] RBP: 00007f2f5fef5024 R08: 0000000000000f3a R09: 0000000000000000 [ 505.139792][T20193] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 505.139806][T20193] R13: 00007f2f600e6038 R14: 00007f2f600e5fa0 R15: 00007ffdaa97e528 [ 505.139824][T20193] [ 505.316847][T20197] loop6: detected capacity change from 0 to 164 [ 505.473948][T20197] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 505.818672][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 505.818699][ T29] audit: type=1400 audit(1788593537.449:4331): avc: denied { write } for pid=20184 comm="syz.3.3602" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.893223][ T29] audit: type=1400 audit(1788593537.529:4332): avc: denied { write } for pid=20184 comm="syz.3.3602" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.915141][ T29] audit: type=1400 audit(1788593537.549:4333): avc: denied { create } for pid=20201 comm="syz.8.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 506.013599][T20205] loop6: detected capacity change from 0 to 512 [ 506.053786][T20205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.054079][T20205] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.129242][T17815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.163352][T20210] FAULT_INJECTION: forcing a failure. [ 506.163352][T20210] name fail_futex, interval 1, probability 0, space 0, times 0 [ 506.163394][T20210] CPU: 0 UID: 0 PID: 20210 Comm: syz.3.3609 Not tainted syzkaller #0 PREEMPT(lazy) [ 506.163420][T20210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.163435][T20210] Call Trace: [ 506.163462][T20210] [ 506.163471][T20210] __dump_stack+0x1d/0x30 [ 506.163497][T20210] dump_stack_lvl+0x95/0xd0 [ 506.163521][T20210] dump_stack+0x15/0x1b [ 506.163619][T20210] should_fail_ex+0x262/0x280 [ 506.163656][T20210] should_fail+0xb/0x20 [ 506.163732][T20210] get_futex_key+0x12d/0xb10 [ 506.163765][T20210] futex_wake+0x89/0x400 [ 506.163817][T20210] do_futex+0x3f8/0x460 [ 506.163871][T20210] __se_sys_futex+0x2f6/0x370 [ 506.163902][T20210] ? mutex_unlock+0x4e/0x90 [ 506.163931][T20210] __x64_sys_futex+0x78/0x90 [ 506.163962][T20210] x64_sys_call+0x22e2/0x2550 [ 506.164011][T20210] do_syscall_64+0x112/0x360 [ 506.164045][T20210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.164068][T20210] RIP: 0033:0x7f49b410e159 [ 506.164086][T20210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.164108][T20210] RSP: 002b:00007f49b2b67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 506.164192][T20210] RAX: ffffffffffffffda RBX: 00007f49b4395fa0 RCX: 00007f49b410e159 [ 506.164211][T20210] RDX: 0000000000000df4 RSI: 0000000000000281 RDI: 0000200000000000 [ 506.164226][T20210] RBP: 00007f49b2b67090 R08: 00002000000000c0 R09: 00000000000007ff [ 506.164240][T20210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.164253][T20210] R13: 00007f49b4396038 R14: 00007f49b4395fa0 R15: 00007ffeb8ac79a8 [ 506.164270][T20210] [ 506.218410][T20202] loop8: detected capacity change from 0 to 512 [ 506.283601][T20202] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.3608: corrupted in-inode xattr: invalid ea_ino [ 506.283679][T20202] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 506.284506][T20202] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.3608: couldn't read orphan inode 15 (err -117) [ 506.284616][T20202] loop8: lost filesystem error report for type 5 error -117 [ 506.336780][T20202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.346158][T14390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.416772][T20217] FAULT_INJECTION: forcing a failure. [ 506.416772][T20217] name failslab, interval 1, probability 0, space 0, times 0 [ 506.416840][T20217] CPU: 1 UID: 0 PID: 20217 Comm: syz.6.3611 Not tainted syzkaller #0 PREEMPT(lazy) [ 506.416876][T20217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.416892][T20217] Call Trace: [ 506.416899][T20217] [ 506.416909][T20217] __dump_stack+0x1d/0x30 [ 506.416939][T20217] dump_stack_lvl+0x95/0xd0 [ 506.417015][T20217] dump_stack+0x15/0x1b [ 506.417038][T20217] should_fail_ex+0x262/0x280 [ 506.417128][T20217] ? sctp_add_bind_addr+0x71/0x1e0 [ 506.417153][T20217] should_failslab+0x8c/0xb0 [ 506.417248][T20217] __kmalloc_cache_noprof+0x7a/0x400 [ 506.417456][T20217] ? sctp_add_bind_addr+0x71/0x1e0 [ 506.417483][T20217] sctp_add_bind_addr+0x71/0x1e0 [ 506.417508][T20217] sctp_do_bind+0x420/0x4b0 [ 506.417609][T20217] sctp_connect_new_asoc+0x153/0x3a0 [ 506.417711][T20217] sctp_sendmsg+0x105f/0x1d00 [ 506.417746][T20217] ? __pfx_sctp_sendmsg+0x10/0x10 [ 506.417843][T20217] inet_sendmsg+0xc5/0xd0 [ 506.417871][T20217] ? __pfx_inet_sendmsg+0x10/0x10 [ 506.417893][T20217] ____sys_sendmsg+0x4e8/0x580 [ 506.417947][T20217] ___sys_sendmsg+0x195/0x1e0 [ 506.417993][T20217] __sys_sendmmsg+0x185/0x320 [ 506.418068][T20217] __x64_sys_sendmmsg+0x57/0x70 [ 506.418102][T20217] x64_sys_call+0x1fb4/0x2550 [ 506.418132][T20217] do_syscall_64+0x112/0x360 [ 506.418225][T20217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.418251][T20217] RIP: 0033:0x7fb4de07e159 [ 506.418269][T20217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.418289][T20217] RSP: 002b:00007fb4dcad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 506.418354][T20217] RAX: ffffffffffffffda RBX: 00007fb4de305fa0 RCX: 00007fb4de07e159 [ 506.418370][T20217] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 506.418383][T20217] RBP: 00007fb4de115024 R08: 0000000000000000 R09: 0000000000000000 [ 506.418396][T20217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.418450][T20217] R13: 00007fb4de306038 R14: 00007fb4de305fa0 R15: 00007ffcbfe79358 [ 506.418518][T20217] [ 506.431376][T20217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=20217 comm=syz.6.3611 [ 506.678769][T20217] loop6: detected capacity change from 0 to 512 [ 506.701070][T20217] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 506.761852][T20217] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.3611: bad orphan inode 131083 [ 506.761995][T20217] loop6: lost filesystem error report for type 5 error -117 [ 506.771367][T20217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.781043][ T29] audit: type=1400 audit(1788593538.419:4334): avc: denied { setopt } for pid=20219 comm="syz.3.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 506.812728][ T29] audit: type=1400 audit(1788593538.439:4335): avc: denied { write } for pid=20216 comm="syz.6.3611" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 507.124147][T14390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.199731][T20228] syzkaller0: entered promiscuous mode [ 507.199755][T20228] syzkaller0: entered allmulticast mode [ 507.243109][T14573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.389835][T20232] FAULT_INJECTION: forcing a failure. [ 507.389835][T20232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.389875][T20232] CPU: 1 UID: 0 PID: 20232 Comm: syz.8.3616 Not tainted syzkaller #0 PREEMPT(lazy) [ 507.389908][T20232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.389925][T20232] Call Trace: [ 507.389933][T20232] [ 507.389964][T20232] __dump_stack+0x1d/0x30 [ 507.389994][T20232] dump_stack_lvl+0x95/0xd0 [ 507.390023][T20232] dump_stack+0x15/0x1b [ 507.390050][T20232] should_fail_ex+0x262/0x280 [ 507.390078][T20232] should_fail+0xb/0x20 [ 507.390106][T20232] should_fail_usercopy+0x1a/0x20 [ 507.390133][T20232] _copy_from_user+0x1c/0xb0 [ 507.390163][T20232] restore_altstack+0x4b/0x300 [ 507.390230][T20232] ? __set_current_blocked+0x284/0x2e0 [ 507.390387][T20232] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 507.390501][T20232] ? arch_do_signal_or_restart+0x2f3/0x480 [ 507.390596][T20232] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 507.390629][T20232] ? __rcu_read_unlock+0x4e/0x70 [ 507.390665][T20232] x64_sys_call+0x1532/0x2550 [ 507.390699][T20232] do_syscall_64+0x112/0x360 [ 507.390780][T20232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.390813][T20232] RIP: 0033:0x7fd83944f4d9 [ 507.390832][T20232] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 507.390854][T20232] RSP: 002b:00007fd837f06a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 507.390929][T20232] RAX: ffffffffffffffda RBX: 00007fd839735fa0 RCX: 00007fd83944f4d9 [ 507.391062][T20232] RDX: 00007fd837f06a80 RSI: 00007fd837f06bb0 RDI: 0000000000000021 [ 507.391078][T20232] RBP: 00007fd839545024 R08: 0000000000000f3a R09: 0000000000000000 [ 507.391094][T20232] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 507.391109][T20232] R13: 00007fd839736038 R14: 00007fd839735fa0 R15: 00007ffe9d745b48 [ 507.391133][T20232] [ 507.441139][T20236] loop6: detected capacity change from 0 to 164 [ 507.480472][T20239] FAULT_INJECTION: forcing a failure. [ 507.480472][T20239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.480502][T20239] CPU: 1 UID: 0 PID: 20239 Comm: syz.2.3618 Not tainted syzkaller #0 PREEMPT(lazy) [ 507.480531][T20239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.480564][T20239] Call Trace: [ 507.480571][T20239] [ 507.480596][T20239] __dump_stack+0x1d/0x30 [ 507.480624][T20239] dump_stack_lvl+0x95/0xd0 [ 507.480649][T20239] dump_stack+0x15/0x1b [ 507.480672][T20239] should_fail_ex+0x262/0x280 [ 507.480804][T20239] should_fail+0xb/0x20 [ 507.480825][T20239] should_fail_usercopy+0x1a/0x20 [ 507.480851][T20239] copy_fpstate_to_sigframe+0x61c/0x7b0 [ 507.480923][T20239] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 507.481019][T20239] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 507.481056][T20239] ? x86_task_fpu+0x36/0x60 [ 507.481079][T20239] get_sigframe+0x34f/0x470 [ 507.481116][T20239] ? _raw_spin_unlock_irq+0x9/0x30 [ 507.481154][T20239] x64_setup_rt_frame+0xa7/0x4e0 [ 507.481187][T20239] arch_do_signal_or_restart+0x27c/0x480 [ 507.481275][T20239] exit_to_user_mode_loop+0x15d/0x8c0 [ 507.481314][T20239] do_syscall_64+0x212/0x360 [ 507.481346][T20239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.481422][T20239] RIP: 0033:0x7f2f5fe5e157 [ 507.481439][T20239] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 507.481460][T20239] RSP: 002b:00007f2f5e8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 507.481483][T20239] RAX: 0000000000000113 RBX: 00007f2f600e5fa0 RCX: 00007f2f5fe5e159 [ 507.481499][T20239] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 507.481586][T20239] RBP: 00007f2f5fef5024 R08: 0000000000000f3a R09: 0000000000000000 [ 507.481602][T20239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.481662][T20239] R13: 00007f2f600e6038 R14: 00007f2f600e5fa0 R15: 00007ffdaa97e528 [ 507.481684][T20239] [ 507.484153][T20236] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 507.660171][T20245] FAULT_INJECTION: forcing a failure. [ 507.660171][T20245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.660199][T20245] CPU: 1 UID: 0 PID: 20245 Comm: syz.3.3630 Not tainted syzkaller #0 PREEMPT(lazy) [ 507.660224][T20245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.660292][T20245] Call Trace: [ 507.660337][T20245] [ 507.660345][T20245] __dump_stack+0x1d/0x30 [ 507.660374][T20245] dump_stack_lvl+0x95/0xd0 [ 507.660399][T20245] dump_stack+0x15/0x1b [ 507.660422][T20245] should_fail_ex+0x262/0x280 [ 507.660450][T20245] should_fail+0xb/0x20 [ 507.660471][T20245] should_fail_usercopy+0x1a/0x20 [ 507.660529][T20245] copy_fpstate_to_sigframe+0x61c/0x7b0 [ 507.660638][T20245] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 507.660669][T20245] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 507.660705][T20245] ? x86_task_fpu+0x36/0x60 [ 507.660806][T20245] get_sigframe+0x34f/0x470 [ 507.660836][T20245] ? _raw_spin_unlock_irq+0x9/0x30 [ 507.660875][T20245] x64_setup_rt_frame+0xa7/0x4e0 [ 507.660908][T20245] arch_do_signal_or_restart+0x27c/0x480 [ 507.660972][T20245] exit_to_user_mode_loop+0x15d/0x8c0 [ 507.661072][T20245] do_syscall_64+0x212/0x360 [ 507.661104][T20245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.661166][T20245] RIP: 0033:0x7f49b410e157 [ 507.661183][T20245] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 507.661207][T20245] RSP: 002b:00007f49b2b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 507.661230][T20245] RAX: 0000000000000113 RBX: 00007f49b4395fa0 RCX: 00007f49b410e159 [ 507.661246][T20245] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 507.661278][T20245] RBP: 00007f49b41a5024 R08: 0000000000000f3a R09: 0000000000000000 [ 507.661294][T20245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.661310][T20245] R13: 00007f49b4396038 R14: 00007f49b4395fa0 R15: 00007ffeb8ac79a8 [ 507.661331][T20245] [ 507.784684][T20247] loop8: detected capacity change from 0 to 164 [ 507.898663][T20253] loop2: detected capacity change from 0 to 2048 [ 507.903310][T20247] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 507.907050][T20253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.907150][T20253] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.065370][T20251] loop3: detected capacity change from 0 to 512 [ 508.099655][T20251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.099722][T20251] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.185964][T20265] loop6: detected capacity change from 0 to 1024 [ 508.233566][T17815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.365904][T20268] syzkaller0: entered promiscuous mode [ 508.365930][T20268] syzkaller0: entered allmulticast mode [ 508.523395][ T29] audit: type=1400 audit(1788593540.159:4336): avc: denied { write } for pid=20243 comm="syz.2.3620" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 508.556339][T20265] lo speed is unknown, defaulting to 1000 [ 508.696643][T20272] FAULT_INJECTION: forcing a failure. [ 508.696643][T20272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.696790][T20272] CPU: 0 UID: 0 PID: 20272 Comm: syz.3.3629 Not tainted syzkaller #0 PREEMPT(lazy) [ 508.696822][T20272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.696889][T20272] Call Trace: [ 508.696896][T20272] [ 508.696904][T20272] __dump_stack+0x1d/0x30 [ 508.696929][T20272] dump_stack_lvl+0x95/0xd0 [ 508.696998][T20272] dump_stack+0x15/0x1b [ 508.697024][T20272] should_fail_ex+0x262/0x280 [ 508.697050][T20272] should_fail+0xb/0x20 [ 508.697069][T20272] should_fail_usercopy+0x1a/0x20 [ 508.697098][T20272] _copy_from_user+0x1c/0xb0 [ 508.697176][T20272] restore_altstack+0x4b/0x300 [ 508.697237][T20272] ? __set_current_blocked+0x284/0x2e0 [ 508.697266][T20272] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 508.697303][T20272] ? arch_do_signal_or_restart+0x2f3/0x480 [ 508.697398][T20272] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 508.697435][T20272] ? __rcu_read_unlock+0x4e/0x70 [ 508.697472][T20272] x64_sys_call+0x1532/0x2550 [ 508.697506][T20272] do_syscall_64+0x112/0x360 [ 508.697542][T20272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.697613][T20272] RIP: 0033:0x7f49b40af4d9 [ 508.697633][T20272] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 508.697656][T20272] RSP: 002b:00007f49b2b66a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 508.697677][T20272] RAX: ffffffffffffffda RBX: 00007f49b4395fa0 RCX: 00007f49b40af4d9 [ 508.697695][T20272] RDX: 00007f49b2b66a80 RSI: 00007f49b2b66bb0 RDI: 0000000000000021 [ 508.697775][T20272] RBP: 00007f49b41a5024 R08: 0000000000000f3a R09: 0000000000000000 [ 508.697789][T20272] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 508.697805][T20272] R13: 00007f49b4396038 R14: 00007f49b4395fa0 R15: 00007ffeb8ac79a8 [ 508.697830][T20272] [ 508.959939][T20281] FAULT_INJECTION: forcing a failure. [ 508.959939][T20281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.959973][T20281] CPU: 0 UID: 0 PID: 20281 Comm: syz.8.3632 Not tainted syzkaller #0 PREEMPT(lazy) [ 508.960034][T20281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.960071][T20281] Call Trace: [ 508.960077][T20281] [ 508.960085][T20281] __dump_stack+0x1d/0x30 [ 508.960112][T20281] dump_stack_lvl+0x95/0xd0 [ 508.960138][T20281] dump_stack+0x15/0x1b [ 508.960161][T20281] should_fail_ex+0x262/0x280 [ 508.960233][T20281] should_fail+0xb/0x20 [ 508.960253][T20281] should_fail_usercopy+0x1a/0x20 [ 508.960373][T20281] _copy_to_user+0x20/0xa0 [ 508.960432][T20281] simple_read_from_buffer+0xb5/0x130 [ 508.960494][T20281] proc_fail_nth_read+0x10e/0x150 [ 508.960536][T20281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.960573][T20281] vfs_read+0x18e/0x7c0 [ 508.960611][T20281] ? __rcu_read_unlock+0x4e/0x70 [ 508.960650][T20281] ? __fget_files+0x184/0x1c0 [ 508.960677][T20281] ? mutex_lock+0x57/0x90 [ 508.960700][T20281] ksys_read+0xdc/0x1a0 [ 508.960786][T20281] __x64_sys_read+0x40/0x50 [ 508.960815][T20281] x64_sys_call+0x2135/0x2550 [ 508.960855][T20281] do_syscall_64+0x112/0x360 [ 508.960885][T20281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.961035][T20281] RIP: 0033:0x7fd83946e98e [ 508.961051][T20281] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 508.961072][T20281] RSP: 002b:00007fd837f06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.961175][T20281] RAX: ffffffffffffffda RBX: 00007fd837f076c0 RCX: 00007fd83946e98e [ 508.961189][T20281] RDX: 000000000000000f RSI: 00007fd837f070a0 RDI: 0000000000000004 [ 508.961225][T20281] RBP: 00007fd837f07090 R08: 0000000000000000 R09: 0000000000000000 [ 508.961241][T20281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.961255][T20281] R13: 00007fd839736038 R14: 00007fd839735fa0 R15: 00007ffe9d745b48 [ 508.961276][T20281] [ 508.994921][T14385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.021321][ T29] audit: type=1400 audit(1788593540.659:4337): avc: denied { connect } for pid=20278 comm="syz.3.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.030430][ T29] audit: type=1400 audit(1788593540.659:4338): avc: denied { setopt } for pid=20278 comm="syz.3.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.080279][ T29] audit: type=1400 audit(1788593540.719:4339): avc: denied { write } for pid=20278 comm="syz.3.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.203715][T20286] FAULT_INJECTION: forcing a failure. [ 509.203715][T20286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.203761][T20286] CPU: 1 UID: 0 PID: 20286 Comm: syz.2.3633 Not tainted syzkaller #0 PREEMPT(lazy) [ 509.203790][T20286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.203806][T20286] Call Trace: [ 509.203814][T20286] [ 509.203823][T20286] __dump_stack+0x1d/0x30 [ 509.203902][T20286] dump_stack_lvl+0x95/0xd0 [ 509.203927][T20286] dump_stack+0x15/0x1b [ 509.204001][T20286] should_fail_ex+0x262/0x280 [ 509.204058][T20286] should_fail+0xb/0x20 [ 509.204079][T20286] should_fail_usercopy+0x1a/0x20 [ 509.204244][T20286] copy_fpstate_to_sigframe+0x61c/0x7b0 [ 509.204274][T20286] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 509.204389][T20286] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 509.204425][T20286] ? x86_task_fpu+0x36/0x60 [ 509.204471][T20286] get_sigframe+0x34f/0x470 [ 509.204501][T20286] ? _raw_spin_unlock_irq+0x9/0x30 [ 509.204545][T20286] x64_setup_rt_frame+0xa7/0x4e0 [ 509.204579][T20286] arch_do_signal_or_restart+0x27c/0x480 [ 509.204615][T20286] exit_to_user_mode_loop+0x15d/0x8c0 [ 509.204691][T20286] do_syscall_64+0x212/0x360 [ 509.204751][T20286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.204776][T20286] RIP: 0033:0x7f2f5fe5e157 [ 509.204794][T20286] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 509.204815][T20286] RSP: 002b:00007f2f5e8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 509.204838][T20286] RAX: 0000000000000113 RBX: 00007f2f600e5fa0 RCX: 00007f2f5fe5e159 [ 509.204929][T20286] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 509.204968][T20286] RBP: 00007f2f5fef5024 R08: 0000000000000f3a R09: 0000000000000000 [ 509.205052][T20286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.205066][T20286] R13: 00007f2f600e6038 R14: 00007f2f600e5fa0 R15: 00007ffdaa97e528 [ 509.205088][T20286] [ 509.229215][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.229252][ C1] buffer_io_error: 8 callbacks suppressed [ 509.229264][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.229903][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.229931][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.230098][T20279] loop5: unable to read partition table [ 509.230587][T20279] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 509.232742][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.232772][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.234469][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.234499][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.234745][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.234773][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.236330][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.236363][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.237756][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 509.237797][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 509.477919][T20284] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 509.579857][T20295] FAULT_INJECTION: forcing a failure. [ 509.579857][T20295] name failslab, interval 1, probability 0, space 0, times 0 [ 509.579887][T20295] CPU: 1 UID: 0 PID: 20295 Comm: syz.2.3638 Not tainted syzkaller #0 PREEMPT(lazy) [ 509.579937][T20295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.579951][T20295] Call Trace: [ 509.579958][T20295] [ 509.579967][T20295] __dump_stack+0x1d/0x30 [ 509.580033][T20295] dump_stack_lvl+0x95/0xd0 [ 509.580090][T20295] dump_stack+0x15/0x1b [ 509.580114][T20295] should_fail_ex+0x262/0x280 [ 509.580138][T20295] ? sctp_add_bind_addr+0x71/0x1e0 [ 509.580207][T20295] should_failslab+0x8c/0xb0 [ 509.580239][T20295] __kmalloc_cache_noprof+0x7a/0x400 [ 509.580273][T20295] ? sctp_add_bind_addr+0x71/0x1e0 [ 509.580325][T20295] sctp_add_bind_addr+0x71/0x1e0 [ 509.580351][T20295] sctp_copy_local_addr_list+0x1b4/0x250 [ 509.580436][T20295] sctp_copy_one_addr+0x7f/0x280 [ 509.580461][T20295] sctp_bind_addr_copy+0x79/0x290 [ 509.580487][T20295] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 509.580525][T20295] sctp_connect_new_asoc+0x1c3/0x3a0 [ 509.580581][T20295] sctp_sendmsg+0x105f/0x1d00 [ 509.580685][T20295] ? __pfx_sctp_sendmsg+0x10/0x10 [ 509.580714][T20295] inet_sendmsg+0xc5/0xd0 [ 509.580733][T20295] ? __pfx_inet_sendmsg+0x10/0x10 [ 509.580752][T20295] ____sys_sendmsg+0x4e8/0x580 [ 509.580834][T20295] ___sys_sendmsg+0x195/0x1e0 [ 509.580877][T20295] __sys_sendmmsg+0x185/0x320 [ 509.580991][T20295] __x64_sys_sendmmsg+0x57/0x70 [ 509.581129][T20295] x64_sys_call+0x1fb4/0x2550 [ 509.581158][T20295] do_syscall_64+0x112/0x360 [ 509.581204][T20295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.581268][T20295] RIP: 0033:0x7f2f5fe5e159 [ 509.581287][T20295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.581312][T20295] RSP: 002b:00007f2f5e8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 509.581335][T20295] RAX: ffffffffffffffda RBX: 00007f2f600e5fa0 RCX: 00007f2f5fe5e159 [ 509.581386][T20295] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 509.581402][T20295] RBP: 00007f2f5fef5024 R08: 0000000000000000 R09: 0000000000000000 [ 509.581417][T20295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.581432][T20295] R13: 00007f2f600e6038 R14: 00007f2f600e5fa0 R15: 00007ffdaa97e528 [ 509.581453][T20295] [ 509.606451][T20295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=20295 comm=syz.2.3638 [ 509.646113][T20293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.646294][T20293] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.143869][T20295] set_capacity_and_notify: 4 callbacks suppressed [ 510.144104][T20295] loop2: detected capacity change from 0 to 512 [ 510.159870][T20300] lo speed is unknown, defaulting to 1000 [ 510.206615][T20295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 510.232886][T20295] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3638: bad orphan inode 131083 [ 510.232957][T20295] loop2: lost filesystem error report for type 5 error -117 [ 510.243690][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 510.243711][ C0] EXT4-fs (loop2): initial error at time 1788593541: ext4_orphan_get:1429 [ 510.243736][ C0] EXT4-fs (loop2): last error at time 1788593541: ext4_orphan_get:1429 [ 510.261736][ T29] audit: type=1400 audit(1788593541.899:4340): avc: denied { write } for pid=20292 comm="syz.8.3637" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 510.308014][T20295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.396023][T20304] syzkaller0: entered promiscuous mode [ 510.396050][T20304] syzkaller0: entered allmulticast mode [ 510.466708][T14573] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.525096][T20279] loop3: detected capacity change from 0 to 2048 [ 510.549320][T20307] loop8: detected capacity change from 0 to 1024 [ 510.692014][T20295] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 510.716654][T20279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.832083][T20279] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 510.852877][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 510.852902][ T29] audit: type=1400 audit(1788593542.489:4342): avc: denied { relabelto } for pid=20278 comm="syz.3.3631" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:login_exec_t:s0" [ 510.857574][T20307] lo speed is unknown, defaulting to 1000 [ 510.940534][ T29] audit: type=1400 audit(1788593542.549:4343): avc: denied { remount } for pid=20278 comm="syz.3.3631" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 511.054576][T14385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.090051][T20279] EXT4-fs error (device loop3): __ext4_remount:6872: comm syz.3.3631: Abort forced by user [ 511.102153][T20279] EXT4-fs (loop3): Remounting filesystem read-only [ 511.102405][T20279] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 511.221469][T17815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.310548][T20318] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3645'. [ 511.387736][T20327] veth0: entered promiscuous mode [ 511.392555][T20327] netlink: 'syz.6.3648': attribute type 1 has an invalid length. [ 511.392641][T20327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3648'. [ 511.407924][T20326] veth0: left promiscuous mode [ 511.608054][T20338] loop2: detected capacity change from 0 to 512 [ 511.637300][T20334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.639942][T20329] loop8: detected capacity change from 0 to 164 [ 511.646734][T20334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.669298][T20338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.669496][T20338] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.797140][T20329] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 511.871731][T14385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.005122][T20345] loop2: detected capacity change from 0 to 512 [ 512.033306][T20345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.033634][T20345] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.156529][T14385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.244441][T20353] loop2: detected capacity change from 0 to 1024 [ 512.244710][T20353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 512.244824][T20353] EXT4-fs: Ignoring removed bh option [ 512.254028][T20353] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 512.264542][T20353] FAULT_INJECTION: forcing a failure. [ 512.264542][T20353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.264571][T20353] CPU: 1 UID: 0 PID: 20353 Comm: syz.2.3654 Not tainted syzkaller #0 PREEMPT(lazy) [ 512.264613][T20353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.264629][T20353] Call Trace: [ 512.264637][T20353] [ 512.264647][T20353] __dump_stack+0x1d/0x30 [ 512.264676][T20353] dump_stack_lvl+0x95/0xd0 [ 512.264778][T20353] dump_stack+0x15/0x1b [ 512.264802][T20353] should_fail_ex+0x262/0x280 [ 512.264869][T20353] should_fail+0xb/0x20 [ 512.264889][T20353] should_fail_usercopy+0x1a/0x20 [ 512.264915][T20353] _copy_from_user+0x1c/0xb0 [ 512.264942][T20353] get_itimerspec64+0x4c/0x1b0 [ 512.265021][T20353] __x64_sys_timer_settime+0x9a/0x160 [ 512.265061][T20353] x64_sys_call+0x158e/0x2550 [ 512.265089][T20353] do_syscall_64+0x112/0x360 [ 512.265128][T20353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.265153][T20353] RIP: 0033:0x7f2f5fe5e159 [ 512.265207][T20353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.265228][T20353] RSP: 002b:00007f2f5e8b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 512.265252][T20353] RAX: ffffffffffffffda RBX: 00007f2f600e5fa0 RCX: 00007f2f5fe5e159 [ 512.265271][T20353] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.265351][T20353] RBP: 00007f2f5fef5024 R08: 0000000000000000 R09: 0000000000000000 [ 512.265365][T20353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.265380][T20353] R13: 00007f2f600e6038 R14: 00007f2f600e5fa0 R15: 00007ffdaa97e528 [ 512.265402][T20353] [ 512.345313][T20357] loop2: detected capacity change from 0 to 2048 [ 512.359704][T20357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.359766][T20357] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.363409][ T29] audit: type=1400 audit(1788593543.999:4344): avc: denied { write } for pid=20356 comm="syz.2.3656" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 512.448703][T14385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.511354][T20360] loop3: detected capacity change from 0 to 1024 [ 512.814538][T20360] lo speed is unknown, defaulting to 1000 [ 512.874770][T20382] FAULT_INJECTION: forcing a failure. [ 512.874770][T20382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.874809][T20382] CPU: 0 UID: 0 PID: 20382 Comm: syz.6.3663 Not tainted syzkaller #0 PREEMPT(lazy) [ 512.874837][T20382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.874852][T20382] Call Trace: [ 512.874867][T20382] [ 512.874877][T20382] __dump_stack+0x1d/0x30 [ 512.874939][T20382] dump_stack_lvl+0x95/0xd0 [ 512.875021][T20382] dump_stack+0x15/0x1b [ 512.875046][T20382] should_fail_ex+0x262/0x280 [ 512.875150][T20382] should_fail+0xb/0x20 [ 512.875208][T20382] should_fail_usercopy+0x1a/0x20 [ 512.875236][T20382] _copy_to_user+0x20/0xa0 [ 512.875266][T20382] simple_read_from_buffer+0xb5/0x130 [ 512.875306][T20382] proc_fail_nth_read+0x10e/0x150 [ 512.875404][T20382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.875473][T20382] vfs_read+0x18e/0x7c0 [ 512.875498][T20382] ? __rcu_read_unlock+0x4e/0x70 [ 512.875530][T20382] ? __fget_files+0x184/0x1c0 [ 512.875554][T20382] ? mutex_lock+0x57/0x90 [ 512.875649][T20382] ksys_read+0xdc/0x1a0 [ 512.875756][T20382] __x64_sys_read+0x40/0x50 [ 512.875788][T20382] x64_sys_call+0x2135/0x2550 [ 512.875818][T20382] do_syscall_64+0x112/0x360 [ 512.875875][T20382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.875903][T20382] RIP: 0033:0x7fb4de03e98e [ 512.875923][T20382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 512.875969][T20382] RSP: 002b:00007fb4dcab5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.875994][T20382] RAX: ffffffffffffffda RBX: 00007fb4dcab66c0 RCX: 00007fb4de03e98e [ 512.876012][T20382] RDX: 000000000000000f RSI: 00007fb4dcab60a0 RDI: 0000000000000003 [ 512.876108][T20382] RBP: 00007fb4dcab6090 R08: 0000000000000000 R09: 0000000000000000 [ 512.876125][T20382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.876166][T20382] R13: 00007fb4de306128 R14: 00007fb4de306090 R15: 00007ffcbfe79358 [ 512.876189][T20382] [ 513.222825][T20387] loop8: detected capacity change from 0 to 164 [ 513.236679][T20390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.236808][T20390] EXT4-fs: Ignoring removed bh option [ 513.256890][T20390] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 513.281131][T20387] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 513.284874][T20390] FAULT_INJECTION: forcing a failure. [ 513.284874][T20390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.284904][T20390] CPU: 1 UID: 0 PID: 20390 Comm: syz.3.3666 Not tainted syzkaller #0 PREEMPT(lazy) [ 513.284981][T20390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.284996][T20390] Call Trace: [ 513.285004][T20390] [ 513.285012][T20390] __dump_stack+0x1d/0x30 [ 513.285041][T20390] dump_stack_lvl+0x95/0xd0 [ 513.285065][T20390] dump_stack+0x15/0x1b [ 513.285103][T20390] should_fail_ex+0x262/0x280 [ 513.285128][T20390] should_fail+0xb/0x20 [ 513.285149][T20390] should_fail_usercopy+0x1a/0x20 [ 513.285174][T20390] _copy_from_user+0x1c/0xb0 [ 513.285230][T20390] get_itimerspec64+0x4c/0x1b0 [ 513.285342][T20390] __x64_sys_timer_settime+0x9a/0x160 [ 513.285387][T20390] x64_sys_call+0x158e/0x2550 [ 513.285416][T20390] do_syscall_64+0x112/0x360 [ 513.285457][T20390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.285484][T20390] RIP: 0033:0x7f49b410e159 [ 513.285501][T20390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.285523][T20390] RSP: 002b:00007f49b2b67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 513.285545][T20390] RAX: ffffffffffffffda RBX: 00007f49b4395fa0 RCX: 00007f49b410e159 [ 513.285600][T20390] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.285615][T20390] RBP: 00007f49b41a5024 R08: 0000000000000000 R09: 0000000000000000 [ 513.285630][T20390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.285644][T20390] R13: 00007f49b4396038 R14: 00007f49b4395fa0 R15: 00007ffeb8ac79a8 [ 513.285733][T20390] [ 513.445643][T20394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.465807][T20394] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.546159][T20403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.546321][T20403] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.558760][ T29] audit: type=1400 audit(1788593545.189:4345): avc: denied { write } for pid=20401 comm="syz.2.3669" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 513.635077][T20408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.635196][T20408] EXT4-fs: Ignoring removed bh option [ 513.643482][T20408] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 513.669584][T14390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.693659][T20408] FAULT_INJECTION: forcing a failure. [ 513.693659][T20408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.693701][T20408] CPU: 1 UID: 0 PID: 20408 Comm: syz.8.3680 Not tainted syzkaller #0 PREEMPT(lazy) [ 513.693806][T20408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.693829][T20408] Call Trace: [ 513.693837][T20408] [ 513.693846][T20408] __dump_stack+0x1d/0x30 [ 513.693913][T20408] dump_stack_lvl+0x95/0xd0 [ 513.693942][T20408] dump_stack+0x15/0x1b [ 513.693968][T20408] should_fail_ex+0x262/0x280 [ 513.693994][T20408] should_fail+0xb/0x20 [ 513.694078][T20408] should_fail_usercopy+0x1a/0x20 [ 513.694106][T20408] _copy_from_user+0x1c/0xb0 [ 513.694135][T20408] get_itimerspec64+0x4c/0x1b0 [ 513.694200][T20408] __x64_sys_timer_settime+0x9a/0x160 [ 513.694238][T20408] x64_sys_call+0x158e/0x2550 [ 513.694270][T20408] do_syscall_64+0x112/0x360 [ 513.694350][T20408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.694378][T20408] RIP: 0033:0x7fd8394ae159 [ 513.694398][T20408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.694421][T20408] RSP: 002b:00007fd837f07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 513.694446][T20408] RAX: ffffffffffffffda RBX: 00007fd839735fa0 RCX: 00007fd8394ae159 [ 513.694465][T20408] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.694533][T20408] RBP: 00007fd839545024 R08: 0000000000000000 R09: 0000000000000000 [ 513.694549][T20408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.694565][T20408] R13: 00007fd839736038 R14: 00007fd839735fa0 R15: 00007ffe9d745b48 [ 513.694588][T20408] [ 513.719022][T14385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.952003][T20419] ================================================================== [ 513.952041][T20419] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 513.952082][T20419] [ 513.952088][T20419] write to 0xffff888136a1c800 of 8 bytes by task 20416 on cpu 1: [ 513.952105][T20419] mas_wr_store_entry+0x3c1f/0x5ac0 [ 513.952130][T20419] mas_store_prealloc+0x421/0x670 [ 513.952155][T20419] vma_complete+0x3b7/0x830 [ 513.952173][T20419] __split_vma+0x675/0x720 [ 513.952193][T20419] vma_modify+0xbf5/0xd50 [ 513.952211][T20419] vma_modify_flags+0x1be/0x250 [ 513.952229][T20419] mprotect_fixup+0x382/0x660 [ 513.952249][T20419] do_mprotect_pkey+0x69f/0x950 [ 513.952271][T20419] __x64_sys_mprotect+0x48/0x60 [ 513.952290][T20419] x64_sys_call+0xd54/0x2550 [ 513.952334][T20419] do_syscall_64+0x112/0x360 [ 513.952358][T20419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.952378][T20419] [ 513.952384][T20419] read to 0xffff888136a1c800 of 8 bytes by task 20419 on cpu 0: [ 513.952400][T20419] mtree_range_walk+0x35a/0x480 [ 513.952429][T20419] mas_walk+0x1ac/0x340 [ 513.952450][T20419] lock_vma_under_rcu+0xc9/0x210 [ 513.952473][T20419] do_user_addr_fault+0x239/0x1060 [ 513.952500][T20419] exc_page_fault+0x62/0xa0 [ 513.952519][T20419] asm_exc_page_fault+0x26/0x30 [ 513.952537][T20419] [ 513.952541][T20419] value changed: 0xffff88811c13f70e -> 0xffff888136a1c800 [ 513.952553][T20419] [ 513.952556][T20419] Reported by Kernel Concurrency Sanitizer on: [ 513.952567][T20419] CPU: 0 UID: 0 PID: 20419 Comm: syz.2.3674 Not tainted syzkaller #0 PREEMPT(lazy) [ 513.952591][T20419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.952603][T20419] ================================================================== [ 520.329148][T14875] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 483 sec