last executing test programs: 3m30.168805142s ago: executing program 32 (id=243): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 3m16.730331765s ago: executing program 33 (id=341): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) 3m4.149627822s ago: executing program 34 (id=443): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x94}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x32, 0x1c}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m0.393858843s ago: executing program 4 (id=467): mount$bind(0x0, 0x0, &(0x7f0000000b80), 0x135000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x200}], 0x1, 0xd8) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280)}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x2000000000}, 0x0, 0xff77ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048055}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="7105f504030201aca32c7a303ab4"], 0xf8) 2m59.709110736s ago: executing program 2 (id=476): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 4) 2m59.614445458s ago: executing program 2 (id=477): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xfffff7fe, 0x4) recvmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 2m58.755172973s ago: executing program 2 (id=482): r0 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x3, 0x4) (fail_nth: 2) 2m58.666252105s ago: executing program 35 (id=483): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/icmp6\x00') pread64(r0, &(0x7f0000000140)=""/184, 0xb8, 0xd) r1 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x104) ioctl(r2, 0x40104d00, &(0x7f0000000a00)="000002000000000000000200") close(0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x3, 0x4) 2m58.666066875s ago: executing program 2 (id=485): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40500000000000079101100000000005f500000000000009500000000000000090971fa1067bbc262de8b6b276e79faa32df1ac248067d370073f2430a29869"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x1e, 0x5, 0x0) io_setup(0xb7, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x0, 0x2e, 0x0, 0x1, 0x224e, 0x10000}, 0x28) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth0_to_bond\x00', 0x600}) 2m58.611961586s ago: executing program 2 (id=486): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe8000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 10) 2m58.524006178s ago: executing program 2 (id=487): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x8858, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x260, &(0x7f0000000fc0)="$eJzs3b9uUmEYB+DXQgvpYmfjcBIXJ6JOrsTUxEhigmHQSZLq0hqT0wWduAyvwUvyBty72Mlj7Ielf7AOBb4DPE9Czpv8Djnvx8CB5P3g3f2Phwefjj9U379Gu11EM2JcVRF7sRWNSO5Mjltn9U5cNA4AYNX0+8Nu7h5YrLLsDrcjonUtGXzL0hAAAAAAAAAAAAC3Nmv+P07N/wPAOjP/v/7KsjvcnXx+u8z8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDPaVXdrW545O4PAJi/G+7/P6vk76nTCgBYab7/A8Dmcf8HgM3z+s3bl91eb79fFO2Ik/FoMBqkY8qfv+jtPyrO7E2fdTIaDRrn+eOUF5fz7did5E9m5jvx8EHK/2TPXvWu5K04WPzyAQAAAAAAAAAAAAAAAAAAoBY6xbmZ+/s7nX/lqbrw+wBX9u83415zacsAAAAAAAAAAAAAAAAAAACAlXb8+cvh8OjofVnf4ke2q7ci4j/n1PE1jKe1aGPZRcRSL/qrBkueW9G4HuV+ZwIAAAAAAAAAAAAAAAAAgM0z3fSbuxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyGf6//+LKyJiXCW5lwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACssd8BAAD//xg9nuE=") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x9, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0xc6f40, 0x19b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000400)="74b8b85368f448926ccfa0b1e99405b0cb85ef84321d1ff6f0c2bd875ff59737f70dd058ad16e2e3", 0xff1a) sendfile(r1, r0, 0x0, 0x7fffffff) 2m58.506432078s ago: executing program 36 (id=487): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x8858, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x260, &(0x7f0000000fc0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x9, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0xc6f40, 0x19b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000400)="74b8b85368f448926ccfa0b1e99405b0cb85ef84321d1ff6f0c2bd875ff59737f70dd058ad16e2e3", 0xff1a) sendfile(r1, r0, 0x0, 0x7fffffff) 2m57.36281803s ago: executing program 4 (id=491): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x18, 0x68, 0x401}, 0x18}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000540), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3dd20e18", "6775c975b6b15e11"}, 0x28) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000440)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0xff1}], 0x59) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2m57.150381644s ago: executing program 3 (id=493): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0280c74f6bfd276, @perf_bp={0x0, 0xd}, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0x810c9365, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000800)=0x5f9c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r6, 0xb320a000) 2m57.097646495s ago: executing program 4 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff800, 0x9, 0x80000000, 0x6, 0x5aa, 0x4, 0x3, 0x3, 0x9}}}}]}, 0x58}, 0xc0000000, 0x0, 0x0, 0x40004}, 0x4000) 2m56.932334408s ago: executing program 4 (id=495): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40500000000000079101100000000005f500000000000009500000000000000090971fa1067bbc262de8b6b276e79faa32df1ac248067d370073f2430a29869"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x1e, 0x5, 0x0) io_setup(0xb7, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x0, 0x2e, 0x0, 0x1, 0x224e, 0x10000}, 0x28) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth0_to_bond\x00', 0x600}) 2m56.790746031s ago: executing program 4 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xffff}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fe", 0x1, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) semget(0x0, 0x0, 0x2) r3 = socket(0x2c, 0x3, 0x3) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r6, 0x89e0, &(0x7f0000000140)=0x800) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r6, @ANYRES32=r5, @ANYBLOB="0600070002000000"], 0x3c}}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x35}, {0x5}, {0x2}, {0x6, 0x0, 0x0, 0x400}]}) 2m56.603148694s ago: executing program 4 (id=497): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r4 = syz_io_uring_setup(0x4329, &(0x7f0000000180)={0x0, 0x776c, 0x2, 0x6, 0x160}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x80000008}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) close(r2) 2m56.602530204s ago: executing program 37 (id=497): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r4 = syz_io_uring_setup(0x4329, &(0x7f0000000180)={0x0, 0x776c, 0x2, 0x6, 0x160}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x80000008}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) close(r2) 2m55.985958956s ago: executing program 3 (id=501): r0 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, r0, 0x3, 0x70bd27, 0x25dbdbfb, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24004044) 2m55.933578927s ago: executing program 3 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000020601020000000000000000000000001c0007800800124000060000080008400000003708001340000000ed10000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a310000000005000100"], 0x64}}, 0x0) 2m55.811831829s ago: executing program 3 (id=504): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40500000000000079101100000000005f500000000000009500000000000000090971fa1067bbc262de8b6b276e79faa32df1ac248067d370073f2430a29869"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x1e, 0x5, 0x0) io_setup(0xb7, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x0, 0x2e, 0x0, 0x1, 0x224e, 0x10000}, 0x28) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth0_to_bond\x00', 0x600}) 2m55.511141915s ago: executing program 3 (id=506): openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x400000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0xed) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000003000000000800004202000090080300", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000050000000300"/24, @ANYRES32, @ANYBLOB="0400a10b1d227e61f7f481f318413199eff3288f1ff01d90b62ad3c215aab3e1e28877fcce3cdaa1633a637a3ca001152419"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m55.294577879s ago: executing program 9 (id=508): prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x207, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000f, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) 2m55.27007088s ago: executing program 3 (id=511): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmsg$nl_route_sched(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m55.20259551s ago: executing program 9 (id=512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000020601020000000000000000000000001c0007800800124000060000080008400000003708001340000000ed10000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a310000000005000100"], 0x64}}, 0x0) 2m55.186854911s ago: executing program 38 (id=511): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmsg$nl_route_sched(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m55.110199142s ago: executing program 9 (id=514): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x80}}]}, 0x5, 0x5a4, &(0x7f0000001a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r0, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xc3, 0x0, 0x7fff0000}]}) umount2(&(0x7f0000000040)='.\x00', 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r2) close_range(r1, 0xffffffffffffffff, 0x0) 2m54.922221956s ago: executing program 9 (id=515): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40500000000000079101100000000005f500000000000009500000000000000090971fa1067bbc262de8b6b276e79faa32df1ac248067d370073f2430a29869"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x1e, 0x5, 0x0) io_setup(0xb7, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x0, 0x2e, 0x0, 0x1, 0x224e, 0x10000}, 0x28) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth0_to_bond\x00', 0x600}) 2m54.531823313s ago: executing program 9 (id=518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000000000}) fcntl$lock(r0, 0x6, &(0x7f0000000300)={0x1, 0x2, 0x2005, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x2, 0x20000000000001, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000180)='./cgroup\x00', r1, &(0x7f00000001c0)='./file0\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x8882) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x1, &(0x7f0000000340)=""/1, 0x41100, 0x13}, 0x94) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="46be203119a529f0fcbcd2d0009e83aa8bf6a87015768ef3948455093dc26ad9526c52e7217d4934cfc28f4132bdbd69fc6c57ac2bf95a209766e1361a773518cd9c39f00940abc5cbe83438e237c4b03ccb91a2db73f3d3f6cc26b3878bece795a00fbfbed051b2b0db87ab5c6862f163b597668a8a8a41a3946cc3a0eb362b3dd9cc6d1a0896e5dd0f6508cfaf6ee012a623d254b856cfc30a7116d960072bd8b3be2b21984a11eab42d5568f43b51f38dfd354e601eb275d3323728de8af60a5e0a5aea7d0e5e188de8c6da01489c651509dc15a2f6d5e83defd4b8d69076f15ca0", @ANYRESOCT=r2], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="480000002e0001c6"], 0x48}], 0x1, 0x0, 0x0, 0x84}, 0x300) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x4}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7}]]}}}]}, 0x40}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e14"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 2m52.806394356s ago: executing program 9 (id=526): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40500000000000079101100000000005f500000000000009500000000000000090971fa1067bbc262de8b6b276e79faa32df1ac248067d370073f2430a29869"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x1e, 0x5, 0x0) io_setup(0xb7, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x0, 0x2e, 0x0, 0x1, 0x224e, 0x10000}, 0x28) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth0_to_bond\x00', 0x600}) 2m52.784367326s ago: executing program 39 (id=526): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40500000000000079101100000000005f500000000000009500000000000000090971fa1067bbc262de8b6b276e79faa32df1ac248067d370073f2430a29869"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x1e, 0x5, 0x0) io_setup(0xb7, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x0, 0x2e, 0x0, 0x1, 0x224e, 0x10000}, 0x28) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth0_to_bond\x00', 0x600}) 49.512636608s ago: executing program 0 (id=1577): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000d40)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) 46.522332024s ago: executing program 0 (id=1600): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000d40)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) socket(0x1e, 0x4, 0x0) write$nci(r0, 0x0, 0x14) 43.473057681s ago: executing program 0 (id=1615): mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x90e}}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x7ff}, 0x28) 43.422269372s ago: executing program 0 (id=1619): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c7, &(0x7f0000000280)="$eJzs3buLXFUcB/Df3Z2XEZwprETwgilsDNm0NrPIBAanEGUKtdBgEpCdQUhgwQeOqWxtLP0LBMHOf8LGwj5gK9i5YODKfe08MjPJBCfr4/MpkrPnnO85v3v3zi5bzJkPXpye3Ezj9r3P70enk8RBP/pxlkQvDqL2ZSzpfx0AwL/ZWZbF71lpeSTZmstHO/stDQDYk82//zf4Ye8lAQB79vY7775xPBoN3krTTlyffnU6zv+yz/8vx49vx0cxiVtxNbrxICI7V7avZ1k2a6S5Xlyezk7HeXL6/k/V+se/RRT5o+hGr+hazg9Hg6O0tJCf5XVcqvbv5/lr0Y3n1+w/HA2urcnHuBWvvLxQ/5Xoxs8fxscxiZtFEUX+1T+Ho8EXR2n6evbNH5+9l5eX55PZ6bhdzJvLDp/ytwYAAAAAAAAAAAAAAAAAAAAAgP+wK2najrT4pxeXp3lXdf7O4YP8i2aktd7y+Txl/vyU4JXzgWZZfFufz3M1TdOsmjjPN+KFRjQu5qoBAAAAAAAAAAAAAAAAAADgn+XuJ5+e3JhMbt35Wxr1aQD12/qfdJ3+Qs9LsWZOL8572vMtD6ptt6wch/WcJGJrGfmKOxXffPTuGxrPbEp99/2ut67z6DnNJ6hwx0b9dJ3cSNbfw3bUPZ36IflxcU4rHnOv1qahbKfHr7V2qPu48fuXqldT69miZ7ZlciTbCnvt13KlqidZvYpWcVfXxptVo3wtVEPPLcQ7Oz3PD/+sSJzWAQAAAAAAAAAAAAAAAAAAezV/0++awXsbQr8Myw/5j96eqwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp2P++f+bGmfZQ0OzKrwyOeLNWI234s7dC75EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/gf+CgAA//8tV14E") timer_create(0x0, 0x0, &(0x7f00000003c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0003}]}) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084020004000000000402"], 0x30}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x20, r4, 0x10000, 0x40) ptrace$cont(0x21, r4, 0x80000001, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./file1\x00', 0x163041, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001100)={'batadv_slave_1\x00', 0x0}) sendmmsg(r2, &(0x7f0000001ec0)=[{{&(0x7f0000001140)=@xdp={0x2c, 0x7, r7, 0x2a}, 0x80, &(0x7f0000001280)=[{&(0x7f00000011c0)="e3f1e3b31419379920bd7db7aebc2b75678c5d6f9a5754a495b402140074aedac4519e61f5f70c4bb459a8a63f3c7a3192e4bcab35be2d53cabf1c1b349bba6624a5677b3672353f64b574a54125df391aa615b2d522f413ab25e3bb1838fb25c64e0a8cb435f0fee5dd83b4d2b3f922713a8f0e58f54f6d9cf07aa9251747c1bff356f06c35e1ab166d03af81c392276a4593a1178d95945f22a4e750", 0x9d}], 0x1}}, {{&(0x7f00000012c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001340)="6aae2dcbc7d2b7a7cefee905bf5f068ef29c30aa629ab6c658a931e0fab8af5c3c3fe60886f471a7e484735ce6c0c42b6994098bf9c2a83a5357764665f442f9d9de2f3a3487d27ec4041ccf3f23e1a074cf658dcb213adb8654a8bc6dabfca725b4949a7fb562db4378af9a50d4d150af555ba058e9ead6ddb98437eedacdd8bc22215440b0b7626988c59c7e", 0x8d}, {&(0x7f0000001400)="f34f18e22ec40ceb8484e2c9ca761887bb8b16c6cb216f929e46f79c0998639702e406abd9e51a973ee66fda518f27f44e0156ca96fae566445b01aa92d1142b5cae4f1518906320f00db10e426afe58028cd1b8e16312937121b2d553def11f", 0x60}], 0x2, &(0x7f00000014c0)=[{0x30, 0x113, 0x3, "cca988225318318a4ef2424cf422f500f53a1413e0663d4b2d"}, {0x28, 0x0, 0x10, "2a12fd20a43409787a557d7b0d0d906f7aa6545e60d5d9"}, {0x18, 0x115, 0x9, "2ad3a240cc59"}], 0x70}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001540)="d6f0f3ebc4554e36fde4dedc71f02df2d911aac4d469a07bd2f0c44142b8c4ebb40d883c6fc3289cf629267057911fa21d06ad0db07e4308f72afdd9ebe7f6dc589b6a8710b9fcb2bc2076a1294dd05c275726155fbfd3e95ccd89d9d502666ff603ff2cb3a9bc0523a6b77d91bdc6161b46bf107b1265438931963a146f05923cf4c2af318ee799465c3b684d5feb7abb6b982980a8fd4c0f55af3b05d802871a8c9d4737dc87ca8ec9e456f13a095296601a26ee5245e1d8da19d5850a3eb064a15b4f3df7d9597ff682e420dbde79eee7c7d988ae85", 0xd7}, {&(0x7f0000001640)="dfd33dbb82c1b959ea5eecd2f17795a03f59266ceb7fbc8e5402a2119af202ed67b0e21cc9b39093d8143cae5eedf84d65799a157ffc41851ebfb3960df504fccee39bd1f7bce4764155276e2067d47c22a53cfa672127f4f391c26434cf817b9d825618554a0bb20f390772277d5c4fa1443edf29f0b637cba4bb988c7b76c13d45e04d2f70d1f6bdb4e181faae70b075454680fe0d95ab979aab690c97489b5552ce668f16c570a15f6864fd3c2042b6cd29ee3cde4e5e1517f0e2464a03cf22d8e695634c6d0b847b5844b5e8d1933778057cf18a42a5a36412594c1969d4c181", 0xe2}, {&(0x7f0000001740)="a0557b67c5ffd36cdc20be49f326153133fe66f825e537dc409ddbf82d76f1f00ad59d36dcf21812a5ae0294ee15a8badbc3462aa24050e584e8b65215ad045d0b7403438ca06e369fe9e35fc5c9afc552d6e4ab099f8aa0a13aec6f5b79904f931021eb5b0ae07c97df88cced76e1e12a8ffba15452471354714cf67723b80874b2976f9ae621c40aa99cc95a2a65c0983bb8b93a92ce0602c9e4a33a58", 0x9e}, {&(0x7f0000001800)}, {&(0x7f0000001840)="90fa09ce8960559dae350e3f08817cbb911e82fdcd9f35f2b7fd0b6bb31b1ee7075d", 0x22}, {&(0x7f0000001880)="c16e0b", 0x3}, {&(0x7f00000018c0)="08ac1c737e52deac6df5661e1ba1b51fcb9479b8e526d0ed94026a79704c25b6f28aa39420e43b2b2e11b55a6c0c7b6cece88d42d1570ece5e6fbf2152533e25a0bae7148be3d86517f60eb6f85d622ca76e27c01529b3ccd0239dd943458d626cab756ec6b684ef6521fa5d3d99c6182fd468608d627fc81b734ecd0c444fb656f46c8e2a32dfe54f0f7902b8e4cf085f2af43133e90079e42097bdd1903657093e7bd7fb73098f9e7079bf5c09a9f8a39a837a5a8d2644bfa8f5b0a61de40f37c403069911ab8013c6f8104cac76f418512c13ccf5e8f1bbff4f2e5e3d50d7a8f985fe68d62707ffd3862e38", 0xed}, {&(0x7f00000019c0)="cb247ec3d1e2003fe9d149c1da2eb2652d93a80eafaa6b92a3877e5ef161c53a38145f2cac85c4052ac94508", 0x2c}, {&(0x7f0000001a00)="de0f81cc455da0be5c680bc4a7be51995427c3816148026635da9ec12b9fb38d7a79819325dc7dc01a66a60a147421b9cd3c662b8973f448d6a13738c483224c9f0bf5cc3cd8060bf916d3f2bfb129daf0aed9b6fae91efb3ad836b432d64216b8a2727a0bc5a0bccbe18448104e6bceee57ac70d3542a064bc16fcdc2f6dff901", 0x81}, {&(0x7f0000001ac0)="ec561820ddb982fb8fea47822762dfdbb1b3ee8c1c354c720ead72b263d466e0ae1c9ade0cc8a85e48c55322421aabc84792397fe220fdaa57d5165b3c47ee35d81c6b808992f6ecbf89d7cda06bb91b705a72b7a39edf5c521baf1a60565b1f1f17242a13935a1e4039fee6badadf2a18a895cc309c4c2448b81cc685d273cd18663e54cb07f3aee842ba0639dff02b", 0x90}], 0xa, &(0x7f0000001c40)=[{0x78, 0x1fd, 0x2, "84630379d3b3e29cbff82e949f7b2c3a51c61d281516c2590fc27a58d9a9db51a0b6cc085554663841173384adb263a8f3a0fc814c620bd7e0cc7b526dd7de244a294b8d91213e51af02a02fb54c63d36f1b3ba1a69b648d916fa83ec0fbb72d8f1d42d026c620"}, {0xf8, 0x115, 0x7, "f100565b3ed578a9eed2d74da16838def23d30a9b0a8748ae2383cc76e109c63f97f17756a8c15097937863af379711fcff199ff633ba51ebb663b1f68c11de464a929b3bd4fc02fd7dee69017e363025514189eb85cc5a7bdfbdad57aad3e68e9bc890bc55d1e0d1e7fdde5c3295416dff7945c70f42f10dfd6ff86990e4e300fca56220c269392af3264ef93c5fc5eaa616cf7999bd6202bfddb6c111ff2a66d354c3baee19502ec8cd7a34e2698ccf54e9c860777879347d7d985852f9f57ca7f1110b8aee817519900ca0a5321055cacc0290bb3a52b0890fcb3b6d9445a24c80cb830"}, {0xe8, 0x84, 0x7ff, "c245b61bbc1e5bcdd5d4c733efff0431557a94a9e86cf817953ca0f7ac2203fcc5f3160d68b06958c789d136c06372b629f26280f2be2c2c55b2488c0ecd67447ec828c4d65b046125a7598f1d80bde13ebe5cf64235a75a1af7277680e2fb9ee7a5b99e04d1e791b7b9974405707f37a187264b2a0f287c24db88f1158b4a31911ad1d0197f6028c9482578fda93636dca1ec3286506c57cd0cd7a3058ed7c206b616ace4f433fd684dd549067ca0fd89bdbf1348b53777861dfa843649063ac8548c74adc850dcccb6ef4ce4f2c8694272e43f233e"}], 0x258}}], 0x3, 0x20000000) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r6}, &(0x7f0000001000), &(0x7f0000001040)=r5}, 0x20) timer_gettime(r0, &(0x7f00000020c0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0xa, &(0x7f0000001f80)=""/208) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x5) capset(&(0x7f0000001800)={0x19980330, r4}, &(0x7f0000002080)={0x4, 0x6, 0xadab, 0x6, 0x71bb090b, 0xfffffff8}) 42.5096081s ago: executing program 0 (id=1629): dup(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0xff000000, 0xff, 'ip6tnl0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x98, 0x100, 0x0, {0x0, 0xffffffffa0028000}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x1000, 0x1, 0x1, 'syz1\x00', 'syz0\x00', {0xaf}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x3, 0x7}, {0x2, 0x5, 0xa}, {0x1, 0x6}, 0x100, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) 42.448651431s ago: executing program 0 (id=1632): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2, 0x6, 0x0, 0x9, 0x1e, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_ident={0x2, 0xa, 0x7, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_lifetime={0x4, 0x4, 0x9415, 0x8, 0x5, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bbc, 0x1, {0x6, 0x2b, 0x0, 0x85, 0x0, 0xd, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bbe, 0x3, {0x6, 0x3c, 0x1, 0x2, 0x0, 0x4, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2d, 0x3500}]}, 0xf0}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000a611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x1, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 42.432328811s ago: executing program 40 (id=1632): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2, 0x6, 0x0, 0x9, 0x1e, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_ident={0x2, 0xa, 0x7, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_lifetime={0x4, 0x4, 0x9415, 0x8, 0x5, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bbc, 0x1, {0x6, 0x2b, 0x0, 0x85, 0x0, 0xd, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bbe, 0x3, {0x6, 0x3c, 0x1, 0x2, 0x0, 0x4, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2d, 0x3500}]}, 0xf0}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000a611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x1, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 10.120541719s ago: executing program 7 (id=1845): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000d40)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYRES16=r4], 0x14) 8.931721072s ago: executing program 1 (id=1856): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 7.080002247s ago: executing program 7 (id=1863): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) (async) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x10}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x12000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)={0x24, 0x2a, 0x503, 0x0, 0x0, "", [@nested={0x11, 0x0, 0x0, 0x1, [@typed={0xb, 0x3ffc, 0x0, 0x0, @str='$\'.*$+\x00'}, @generic="8d"]}]}, 0x24}], 0x1}, 0x14008010) 7.067635687s ago: executing program 1 (id=1866): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb}) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') ioctl$PPPIOCSFLAGS1(r1, 0xc0686611, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001080)=0x0) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, r4, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='mem', 0x3) 6.966623339s ago: executing program 7 (id=1867): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) fchdir(r0) 6.958480979s ago: executing program 7 (id=1868): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x18, 0x68, 0x401}, 0x18}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000540), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3dd20e18", "6775c975b6b15e11"}, 0x28) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00e", 0x5e}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0xff1}], 0x59) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 6.954584489s ago: executing program 8 (id=1869): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0280c74f6bfd276, @perf_bp={0x0, 0xd}, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0x810c9365, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000800)=0x5f9c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) pipe(&(0x7f0000000080)) 5.490280457s ago: executing program 8 (id=1871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (fail_nth: 9) 5.464844207s ago: executing program 7 (id=1873): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000d40)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYRES16=r4], 0x14) 5.390541268s ago: executing program 8 (id=1874): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) r2 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r2], 0x14) 4.848122339s ago: executing program 1 (id=1875): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) (fail_nth: 2) 4.834007259s ago: executing program 1 (id=1876): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 4.572139904s ago: executing program 6 (id=1879): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020820034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0) fadvise64(r5, 0x401, 0xd1, 0x1) preadv2(r5, &(0x7f0000000140)=[{&(0x7f0000000180)=""/162, 0xa2}], 0x1, 0x9, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000180)={r4, 0x7}, 0x8) sendmsg$nl_route(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x8010) unlinkat(0xffffffffffffffff, 0x0, 0x200) 4.490105966s ago: executing program 6 (id=1880): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x12, 0x1ac902) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1ff, 0x0, 0x0, 0x12, 0x15, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000001909000000000001712500000400000170000009a000", [0xd8c, 0xffffffff9673e35d]}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f0000000000), 0xc) pipe(&(0x7f0000000040)) 4.375142218s ago: executing program 6 (id=1881): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0280c74f6bfd276, @perf_bp={0x0, 0xd}, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0x810c9365, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000800)=0x5f9c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) pipe(&(0x7f0000000080)) 4.026496754s ago: executing program 6 (id=1882): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001100)={'batadv_slave_1\x00', 0x0}) sendmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000001140)=@xdp={0x2c, 0x7, r2, 0x2a}, 0x80, &(0x7f0000001280)=[{&(0x7f00000011c0)="e3f1e3b31419379920bd7db7aebc2b75678c5d6f9a5754a495b402140074aedac4519e61f5f70c4bb459a8a63f3c7a3192e4bcab35be2d53cabf1c1b349bba6624a5677b3672353f64b574a54125df391aa615b2d522f413ab25e3bb1838fb25c64e0a8cb435f0fee5dd83b4d2b3f922713a8f0e58f54f6d9cf07aa9251747c1bff356f06c35e1ab166d03af81c392276a4593a1178d95945f22a4e750", 0x9d}], 0x1}}, {{&(0x7f00000012c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001340)="6aae2dcbc7d2b7a7cefee905bf5f068ef29c30aa629ab6c658a931e0fab8af5c3c3fe60886f471a7e484735ce6c0c42b6994098bf9c2a83a5357764665f442f9d9de2f3a3487d27ec4041ccf3f23e1a074cf658dcb213adb8654a8bc6dabfca725b4949a7fb562db4378af9a50d4d150af555ba058e9ead6ddb98437eedacdd8bc22215440b0b7626988c59c7e", 0x8d}, {&(0x7f0000001400)="f34f18e22ec40ceb8484e2c9ca761887bb8b16c6cb216f929e46f79c0998639702e406abd9e51a973ee66fda518f27f44e0156ca96fae566445b01aa92d1142b5cae4f1518906320f00db10e426afe58028cd1b8e16312937121b2d553def11f", 0x60}], 0x2, &(0x7f00000014c0)=[{0x30, 0x113, 0x3, "cca988225318318a4ef2424cf422f500f53a1413e0663d4b2d"}, {0x28, 0x0, 0x10, "2a12fd20a43409787a557d7b0d0d906f7aa6545e60d5d9"}, {0x18, 0x115, 0x9, "2ad3a240cc59"}], 0x70}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001540)="d6f0f3ebc4554e36fde4dedc71f02df2d911aac4d469a07bd2f0c44142b8c4ebb40d883c6fc3289cf629267057911fa21d06ad0db07e4308f72afdd9ebe7f6dc589b6a8710b9fcb2bc2076a1294dd05c275726155fbfd3e95ccd89d9d502666ff603ff2cb3a9bc0523a6b77d91bdc6161b46bf107b1265438931963a146f05923cf4c2af318ee799465c3b684d5feb7abb6b982980a8fd4c0f55af3b05d802871a8c9d4737dc87ca8ec9e456f13a095296601a26ee5245e1d8da19d5850a3eb064a15b4f3df7d9597ff682e420dbde79eee7c7d988ae85", 0xd7}, {&(0x7f0000001640)="dfd33dbb82c1b959ea5eecd2f17795a03f59266ceb7fbc8e5402a2119af202ed67b0e21cc9b39093d8143cae5eedf84d65799a157ffc41851ebfb3960df504fccee39bd1f7bce4764155276e2067d47c22a53cfa672127f4f391c26434cf817b9d825618554a0bb20f390772277d5c4fa1443edf29f0b637cba4bb988c7b76c13d45e04d2f70d1f6bdb4e181faae70b075454680fe0d95ab979aab690c97489b5552ce668f16c570a15f6864fd3c2042b6cd29ee3cde4e5e1517f0e2464a03cf22d8e695634c6d0b847b5844b5e8d1933778057cf18a42a5a36412594c1969d4c181", 0xe2}, {&(0x7f0000001740)="a0557b67c5ffd36cdc20be49f326153133fe66f825e537dc409ddbf82d76f1f00ad59d36dcf21812a5ae0294ee15a8badbc3462aa24050e584e8b65215ad045d0b7403438ca06e369fe9e35fc5c9afc552d6e4ab099f8aa0a13aec6f5b79904f931021eb5b0ae07c97df88cced76e1e12a8ffba15452471354714cf67723b80874b2976f9ae621c40aa99cc95a2a65c0983bb8b93a92ce0602c9e4a33a58", 0x9e}, {&(0x7f0000001800)}, {&(0x7f0000001840)="90fa09ce8960559dae350e3f08817cbb911e82fdcd9f35f2b7fd0b6bb31b1ee7075d", 0x22}, {&(0x7f0000001880)="c16e0b", 0x3}, {&(0x7f00000018c0)="08ac1c737e52deac6df5661e1ba1b51fcb9479b8e526d0ed94026a79704c25b6f28aa39420e43b2b2e11b55a6c0c7b6cece88d42d1570ece5e6fbf2152533e25a0bae7148be3d86517f60eb6f85d622ca76e27c01529b3ccd0239dd943458d626cab756ec6b684ef6521fa5d3d99c6182fd468608d627fc81b734ecd0c444fb656f46c8e2a32dfe54f0f7902b8e4cf085f2af43133e90079e42097bdd1903657093e7bd7fb73098f9e7079bf5c09a9f8a39a837a5a8d2644bfa8f5b0a61de40f37c403069911ab8013c6f8104cac76f418512c13ccf5e8f1bbff4f2e5e3d50d7a8f985fe68d62707ffd3862e38", 0xed}, {&(0x7f00000019c0)="cb247ec3d1e2003fe9d149c1da2eb2652d93a80eafaa6b92a3877e5ef161c53a38145f2cac85c4052ac94508", 0x2c}, {&(0x7f0000001a00)="de0f81cc455da0be5c680bc4a7be51995427c3816148026635da9ec12b9fb38d7a79819325dc7dc01a66a60a147421b9cd3c662b8973f448d6a13738c483224c9f0bf5cc3cd8060bf916d3f2bfb129daf0aed9b6fae91efb3ad836b432d64216b8a2727a0bc5a0bccbe18448104e6bceee57ac70d3542a064bc16fcdc2f6dff901", 0x81}, {&(0x7f0000001ac0)="ec561820ddb982fb8fea47822762dfdbb1b3ee8c1c354c720ead72b263d466e0ae1c9ade0cc8a85e48c55322421aabc84792397fe220fdaa57d5165b3c47ee35d81c6b808992f6ecbf89d7cda06bb91b705a72b7a39edf5c521baf1a60565b1f1f17242a13935a1e4039fee6badadf2a18a895cc309c4c2448b81cc685d273cd18663e54cb07f3aee842ba0639dff02b", 0x90}], 0xa, &(0x7f0000001c40)=[{0x78, 0x1fd, 0x2, "84630379d3b3e29cbff82e949f7b2c3a51c61d281516c2590fc27a58d9a9db51a0b6cc085554663841173384adb263a8f3a0fc814c620bd7e0cc7b526dd7de244a294b8d91213e51af02a02fb54c63d36f1b3ba1a69b648d916fa83ec0fbb72d8f1d42d026c620"}, {0xf8, 0x115, 0x7, "f100565b3ed578a9eed2d74da16838def23d30a9b0a8748ae2383cc76e109c63f97f17756a8c15097937863af379711fcff199ff633ba51ebb663b1f68c11de464a929b3bd4fc02fd7dee69017e363025514189eb85cc5a7bdfbdad57aad3e68e9bc890bc55d1e0d1e7fdde5c3295416dff7945c70f42f10dfd6ff86990e4e300fca56220c269392af3264ef93c5fc5eaa616cf7999bd6202bfddb6c111ff2a66d354c3baee19502ec8cd7a34e2698ccf54e9c860777879347d7d985852f9f57ca7f1110b8aee817519900ca0a5321055cacc0290bb3a52b0890fcb3b6d9445a24c80cb830"}, {0xe8, 0x84, 0x7ff, "c245b61bbc1e5bcdd5d4c733efff0431557a94a9e86cf817953ca0f7ac2203fcc5f3160d68b06958c789d136c06372b629f26280f2be2c2c55b2488c0ecd67447ec828c4d65b046125a7598f1d80bde13ebe5cf64235a75a1af7277680e2fb9ee7a5b99e04d1e791b7b9974405707f37a187264b2a0f287c24db88f1158b4a31911ad1d0197f6028c9482578fda93636dca1ec3286506c57cd0cd7a3058ed7c206b616ace4f433fd684dd549067ca0fd89bdbf1348b53777861dfa843649063ac8548c74adc850dcccb6ef4ce4f2c8694272e43f233e"}], 0x258}}], 0x3, 0x20000000) 4.003924755s ago: executing program 6 (id=1883): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb}) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') ioctl$PPPIOCSFLAGS1(r2, 0xc0686611, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, 0x0, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) write$binfmt_misc(r3, &(0x7f0000000080)="c66f27e29c34074b6dd5a60ed63f5cd99e1922ead31249385b2ba4cce022de247d94226945e891a773c4acf9a1df693f0570ddf2f4f8589d9e3107d7e4963729cc6d193d6318808a0b2a9c09f6670cdc6d556c4c75618e6c5962363d959419ded5618fb613f9b91de62e", 0x6a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000d00)='mem', 0x3) 3.960543115s ago: executing program 5 (id=1884): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x18, 0x68, 0x401}, 0x18}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000540), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3dd20e18", "6775c975b6b15e11"}, 0x28) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b6", 0x8d}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0xff1}], 0x59) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3.913908187s ago: executing program 5 (id=1885): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES16], &(0x7f0000000f40)=""/4079, 0x6f, 0xfef, 0x8}, 0xfffffc90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myconfig\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x3f, 0xe, 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0', 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) r3 = openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)="f7ec005964768388c216d35b75c330", 0xf) r4 = openat(0xffffff9c, &(0x7f00000001c0)='./myconfig\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)="30b057279567abed5fe1a6c7315f001778b0617fa80032588deaac9e154297c8013f03debc8f02faf391bed4c4090000000000000054b3053c25560cd1", 0x3d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r5, 0x204) socket$netlink(0x10, 0x3, 0x4) 2.866802546s ago: executing program 8 (id=1886): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb}) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') ioctl$PPPIOCSFLAGS1(r2, 0xc0686611, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, 0x0, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) write$binfmt_misc(r3, &(0x7f0000000080)="c66f27e29c34074b6dd5a60ed63f5cd99e1922ead31249385b2ba4cce022de247d94226945e891a773c4acf9a1df693f0570ddf2f4f8589d9e3107d7e4963729cc6d193d6318808a0b2a9c09f6670cdc6d556c4c75618e6c5962363d959419ded5618fb613f9b91de62e", 0x6a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000d00)='mem', 0x3) 2.864890556s ago: executing program 5 (id=1887): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0x1, 0x1, 0x0, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "0000000000000900000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100"}]}}]}, 0x170}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) mknod$loop(0x0, 0xc000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r4, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x8f}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, 0x0) epoll_create(0x6) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x3c06, 0x0, 0x4, 0x8, 0x1, 0x50000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "eb5cc566096514259cb854bc63202e68"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='1', 0x1) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0x1, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.864225206s ago: executing program 7 (id=1888): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb}) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') ioctl$PPPIOCSFLAGS1(r1, 0xc0686611, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001080)=0x0) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, r4, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='mem', 0x3) 2.863693166s ago: executing program 1 (id=1889): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0x0, 0x58, 0x20}, 0xd) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) r4 = inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x44000160) r5 = dup(r2) inotify_rm_watch(r5, r4) (async) inotify_rm_watch(r5, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x10040) (async) listen(0xffffffffffffffff, 0x10040) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_usbip_server_init(0x4) (async) r7 = syz_usbip_server_init(0x4) write$usbip_server(r7, &(0x7f0000000280)=@ret_unlink={{0x4, 0x1000, 0x0, 0x1, 0x200}, {0x102}}, 0x30) unshare(0xa000200) r8 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r8, 0x0, 0xd, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xf6c9b5cf4779d849}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x881, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x881, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}, 0x84) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0x2) write$ppp(r9, &(0x7f0000000280)="c021", 0x2) (async) write$ppp(r9, &(0x7f0000000280)="c021", 0x2) ioctl$KDDELIO(r1, 0x4b35, 0x3c7) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) (async) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 2.604134091s ago: executing program 5 (id=1890): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020820034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0) fadvise64(r5, 0x401, 0xd1, 0x1) preadv2(r5, &(0x7f0000000140)=[{&(0x7f0000000180)=""/162, 0xa2}], 0x1, 0x9, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000180)={r4, 0x7}, 0x8) sendmsg$nl_route(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x8010) unlinkat(0xffffffffffffffff, 0x0, 0x200) 2.497790553s ago: executing program 5 (id=1891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000680)=""/222, 0xde, 0x10041, &(0x7f0000000780)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0xc2f1788970f1e6ef) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) write$tun(r3, &(0x7f0000000e00)={@val={0x0, 0x9100}, @val={0x2, 0x0, 0x3, 0x2, 0x807, 0x101}, @x25={0x2, 0xfe, 0xf3, "8fccbd2388f2e8fa9350a54df4d3900d50809deafd39651f3c73cc6a9afda2485336388e216ac24a2c07bb92efcbe7180f8d138ab4c7b810b830916a39e53187766a9b8f1edd40cfaf4093559e122b9054dd6b1825b2fbfb83fdf12621d1c8dfea7dc1cd7caa95e3b9be8e8822cd411c5d70947345bf26727ea690ff3d7ab181b033578e2b"}}, 0x96) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$eJzs3cFqE1EUANCbZpqMBbVrcTHgxpWofxCkghAQqrM30LppRZhuoqt8huAf+Dku/Yyuuou0M5p2qiI17UuccyDMZW7u5L0k5GVxX/Lm/ruDvfdHb+ffPkWeF5FFzOIkYjs2oh+1XnPcOIsHMYiFWQAA62Z3dzJKPQaWqHf5VFWNJpsRMbyUK7/c0KgAAAAAAAAAAABYsqv0/5+n/x8A1o/+//9fVY0mW833t4v0/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnMznd+d/uKUeHwCwfNZ/AOge6z8AdI/1HwC659WdJiiKPOJ4Ni2nZX2sTz9/Md55XJzZXlQdT6flZhOPd57U+aKd32rqn57P/ygrB/HwQZ0/zT17OW7VD2PvWmcOAAAAAAAAAAAAAAAAAAAAq+NR8VNrf3+/zp/eYRi/yOcRny/8PkBr/34W97KbnAkAAAAAAAAAAAAAAAAAAACsr6MPHw8mh4f7VWeDr/2IZI8evfplSP0ktIJbcYWqfNVmsUZBPyL2h5HFv18wi9+/n1/f/vvrpP5kAgAAAAAAAAAAAAAAAACA7lls+k09EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/H//9cXpJ4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A3fAwAA////soPi") syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs3D2LXFUYB/D/uXfeFiLrBxBcSCMKRrETF2Oha7og2gnaWqxILMRCdgcVwZcPYCtaGIUQawUFCWKsrERYYiFib2GacGTuy0xAsZlFCfx+xZznnHue57mXe9sz4c5Wd5Nakuvd7KO2GybNw33wW/L2NFm+8EQy7xOmQ2JJ8tzlJ5+6sHexzNdrq9Xj4ep802U2jJPsDdGXk3xw+eCdLj5OyVGGMNPPZ5ms9tY+78O/3/TNkrbbw/9s8nXtX8QsP+aLJIelXb38ebLMJ8ndWXT7ziVpa63daz5OdpJ2/VVs4cr+teXjQ7yT4Uub9rOjd0t9aLg2Ta21Njk6O2a2yT2Pnbv0T0W7/GX3eONSrXV6ZsxtNhcOb80mw+yR7345ynKxrp7abEqe7CSvnDzzYHcnpa8x3f7xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Zfe9ev83zTg53/2Wdfz0p2k2W49z7zreW5xS/yv713bffOtSk9f3X/rp5Td+Pfg9fyRp2xycSebrfS/2w9X3umEyrLZb9z+81cw++/jbnfXCULok35/9+WYdO5wM42uP3pa832zdHwAAAAAAAAAAAAAAAAAAAFau5sLexSbPfnWj5PlsjvvXLJJSxukiqbXWP2tnPPz/w3gOP9dvpKySUsvt1c8nu3cldf7+A93fCvSJtdZJ16L8J4/Iv/grAAD//x/vY/E=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000003b00), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$9p(0x0, 0x4000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x84400, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x800, &(0x7f0000000d80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_user}], [{@dont_hash}, {@measure}]}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000100)) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x240480c1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xf}, {0x4, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 422.529202ms ago: executing program 6 (id=1892): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x0, 0x238, 0xffffffff, 0x198, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@empty, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x160, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x1a, 0x2, {0x1}}}, @common=@addrtype={{0x30}, {0xf4, 0x2, 0x8001}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'veth0_vlan\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x20}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @gre_key=0x4, @gre_key=0xf801}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @private=0xa010101, @icmp_id, @gre_key=0xfff7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@uid_gt={'uid>', 0xee00}}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c31800000100000071001a000000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="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", 0x105}], 0x1) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace\x00', 0x800, 0x0) read(r5, &(0x7f0000000b00), 0x64) 232.500766ms ago: executing program 5 (id=1893): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0280c74f6bfd276, @perf_bp={0x0, 0xd}, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0x810c9365, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000800)=0x5f9c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) pipe(&(0x7f0000000080)) 190.596037ms ago: executing program 8 (id=1894): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001100)={'batadv_slave_1\x00', 0x0}) sendmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000001140)=@xdp={0x2c, 0x7, r2, 0x2a}, 0x80, &(0x7f0000001280)=[{&(0x7f00000011c0)="e3f1e3b31419379920bd7db7aebc2b75678c5d6f9a5754a495b402140074aedac4519e61f5f70c4bb459a8a63f3c7a3192e4bcab35be2d53cabf1c1b349bba6624a5677b3672353f64b574a54125df391aa615b2d522f413ab25e3bb1838fb25c64e0a8cb435f0fee5dd83b4d2b3f922713a8f0e58f54f6d9cf07aa9251747c1bff356f06c35e1ab166d03af81c392276a4593a1178d95945f22a4e750", 0x9d}], 0x1}}, {{&(0x7f00000012c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001340)="6aae2dcbc7d2b7a7cefee905bf5f068ef29c30aa629ab6c658a931e0fab8af5c3c3fe60886f471a7e484735ce6c0c42b6994098bf9c2a83a5357764665f442f9d9de2f3a3487d27ec4041ccf3f23e1a074cf658dcb213adb8654a8bc6dabfca725b4949a7fb562db4378af9a50d4d150af555ba058e9ead6ddb98437eedacdd8bc22215440b0b7626988c59c7e", 0x8d}, {&(0x7f0000001400)="f34f18e22ec40ceb8484e2c9ca761887bb8b16c6cb216f929e46f79c0998639702e406abd9e51a973ee66fda518f27f44e0156ca96fae566445b01aa92d1142b5cae4f1518906320f00db10e426afe58028cd1b8e16312937121b2d553def11f", 0x60}], 0x2, &(0x7f00000014c0)=[{0x30, 0x113, 0x3, "cca988225318318a4ef2424cf422f500f53a1413e0663d4b2d"}, {0x28, 0x0, 0x10, "2a12fd20a43409787a557d7b0d0d906f7aa6545e60d5d9"}, {0x18, 0x115, 0x9, "2ad3a240cc59"}], 0x70}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001540)="d6f0f3ebc4554e36fde4dedc71f02df2d911aac4d469a07bd2f0c44142b8c4ebb40d883c6fc3289cf629267057911fa21d06ad0db07e4308f72afdd9ebe7f6dc589b6a8710b9fcb2bc2076a1294dd05c275726155fbfd3e95ccd89d9d502666ff603ff2cb3a9bc0523a6b77d91bdc6161b46bf107b1265438931963a146f05923cf4c2af318ee799465c3b684d5feb7abb6b982980a8fd4c0f55af3b05d802871a8c9d4737dc87ca8ec9e456f13a095296601a26ee5245e1d8da19d5850a3eb064a15b4f3df7d9597ff682e420dbde79eee7c7d988ae85", 0xd7}, {&(0x7f0000001640)="dfd33dbb82c1b959ea5eecd2f17795a03f59266ceb7fbc8e5402a2119af202ed67b0e21cc9b39093d8143cae5eedf84d65799a157ffc41851ebfb3960df504fccee39bd1f7bce4764155276e2067d47c22a53cfa672127f4f391c26434cf817b9d825618554a0bb20f390772277d5c4fa1443edf29f0b637cba4bb988c7b76c13d45e04d2f70d1f6bdb4e181faae70b075454680fe0d95ab979aab690c97489b5552ce668f16c570a15f6864fd3c2042b6cd29ee3cde4e5e1517f0e2464a03cf22d8e695634c6d0b847b5844b5e8d1933778057cf18a42a5a36412594c1969d4c181", 0xe2}, {&(0x7f0000001740)="a0557b67c5ffd36cdc20be49f326153133fe66f825e537dc409ddbf82d76f1f00ad59d36dcf21812a5ae0294ee15a8badbc3462aa24050e584e8b65215ad045d0b7403438ca06e369fe9e35fc5c9afc552d6e4ab099f8aa0a13aec6f5b79904f931021eb5b0ae07c97df88cced76e1e12a8ffba15452471354714cf67723b80874b2976f9ae621c40aa99cc95a2a65c0983bb8b93a92ce0602c9e4a33a58", 0x9e}, {&(0x7f0000001800)}, {&(0x7f0000001840)="90fa09ce8960559dae350e3f08817cbb911e82fdcd9f35f2b7fd0b6bb31b1ee7075d", 0x22}, {&(0x7f0000001880)="c16e0b", 0x3}, {&(0x7f00000018c0)="08ac1c737e52deac6df5661e1ba1b51fcb9479b8e526d0ed94026a79704c25b6f28aa39420e43b2b2e11b55a6c0c7b6cece88d42d1570ece5e6fbf2152533e25a0bae7148be3d86517f60eb6f85d622ca76e27c01529b3ccd0239dd943458d626cab756ec6b684ef6521fa5d3d99c6182fd468608d627fc81b734ecd0c444fb656f46c8e2a32dfe54f0f7902b8e4cf085f2af43133e90079e42097bdd1903657093e7bd7fb73098f9e7079bf5c09a9f8a39a837a5a8d2644bfa8f5b0a61de40f37c403069911ab8013c6f8104cac76f418512c13ccf5e8f1bbff4f2e5e3d50d7a8f985fe68d62707ffd3862e38", 0xed}, {&(0x7f00000019c0)="cb247ec3d1e2003fe9d149c1da2eb2652d93a80eafaa6b92a3877e5ef161c53a38145f2cac85c4052ac94508", 0x2c}, {&(0x7f0000001a00)="de0f81cc455da0be5c680bc4a7be51995427c3816148026635da9ec12b9fb38d7a79819325dc7dc01a66a60a147421b9cd3c662b8973f448d6a13738c483224c9f0bf5cc3cd8060bf916d3f2bfb129daf0aed9b6fae91efb3ad836b432d64216b8a2727a0bc5a0bccbe18448104e6bceee57ac70d3542a064bc16fcdc2f6dff901", 0x81}, {&(0x7f0000001ac0)="ec561820ddb982fb8fea47822762dfdbb1b3ee8c1c354c720ead72b263d466e0ae1c9ade0cc8a85e48c55322421aabc84792397fe220fdaa57d5165b3c47ee35d81c6b808992f6ecbf89d7cda06bb91b705a72b7a39edf5c521baf1a60565b1f1f17242a13935a1e4039fee6badadf2a18a895cc309c4c2448b81cc685d273cd18663e54cb07f3aee842ba0639dff02b", 0x90}], 0xa, &(0x7f0000001c40)=[{0x78, 0x1fd, 0x2, "84630379d3b3e29cbff82e949f7b2c3a51c61d281516c2590fc27a58d9a9db51a0b6cc085554663841173384adb263a8f3a0fc814c620bd7e0cc7b526dd7de244a294b8d91213e51af02a02fb54c63d36f1b3ba1a69b648d916fa83ec0fbb72d8f1d42d026c620"}, {0xf8, 0x115, 0x7, "f100565b3ed578a9eed2d74da16838def23d30a9b0a8748ae2383cc76e109c63f97f17756a8c15097937863af379711fcff199ff633ba51ebb663b1f68c11de464a929b3bd4fc02fd7dee69017e363025514189eb85cc5a7bdfbdad57aad3e68e9bc890bc55d1e0d1e7fdde5c3295416dff7945c70f42f10dfd6ff86990e4e300fca56220c269392af3264ef93c5fc5eaa616cf7999bd6202bfddb6c111ff2a66d354c3baee19502ec8cd7a34e2698ccf54e9c860777879347d7d985852f9f57ca7f1110b8aee817519900ca0a5321055cacc0290bb3a52b0890fcb3b6d9445a24c80cb830"}, {0xe8, 0x84, 0x7ff, "c245b61bbc1e5bcdd5d4c733efff0431557a94a9e86cf817953ca0f7ac2203fcc5f3160d68b06958c789d136c06372b629f26280f2be2c2c55b2488c0ecd67447ec828c4d65b046125a7598f1d80bde13ebe5cf64235a75a1af7277680e2fb9ee7a5b99e04d1e791b7b9974405707f37a187264b2a0f287c24db88f1158b4a31911ad1d0197f6028c9482578fda93636dca1ec3286506c57cd0cd7a3058ed7c206b616ace4f433fd684dd549067ca0fd89bdbf1348b53777861dfa843649063ac8548c74adc850dcccb6ef4ce4f2c8694272e43f233e"}], 0x258}}], 0x3, 0x20000000) 66.305079ms ago: executing program 8 (id=1895): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb}) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') ioctl$PPPIOCSFLAGS1(r2, 0xc0686611, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001080)=0x0) bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, r6, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) write$binfmt_misc(r3, &(0x7f0000000080)="c66f27e29c34074b6dd5a60ed63f5cd99e1922ead31249385b2ba4cce022de247d94226945e891a773c4acf9a1df693f0570ddf2f4f8589d9e3107d7e4963729cc6d193d6318808a0b2a9c09f6670cdc6d556c4c75618e6c5962363d959419ded5618fb613f9b91de62e", 0x6a) r7 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r7, &(0x7f0000000d00)='mem', 0x3) 0s ago: executing program 1 (id=1896): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001100)={'batadv_slave_1\x00', 0x0}) sendmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000001140)=@xdp={0x2c, 0x7, r2, 0x2a}, 0x80, &(0x7f0000001280)=[{&(0x7f00000011c0)="e3f1e3b31419379920bd7db7aebc2b75678c5d6f9a5754a495b402140074aedac4519e61f5f70c4bb459a8a63f3c7a3192e4bcab35be2d53cabf1c1b349bba6624a5677b3672353f64b574a54125df391aa615b2d522f413ab25e3bb1838fb25c64e0a8cb435f0fee5dd83b4d2b3f922713a8f0e58f54f6d9cf07aa9251747c1bff356f06c35e1ab166d03af81c392276a4593a1178d95945f22a4e750", 0x9d}], 0x1}}, {{&(0x7f00000012c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001340)="6aae2dcbc7d2b7a7cefee905bf5f068ef29c30aa629ab6c658a931e0fab8af5c3c3fe60886f471a7e484735ce6c0c42b6994098bf9c2a83a5357764665f442f9d9de2f3a3487d27ec4041ccf3f23e1a074cf658dcb213adb8654a8bc6dabfca725b4949a7fb562db4378af9a50d4d150af555ba058e9ead6ddb98437eedacdd8bc22215440b0b7626988c59c7e", 0x8d}, {&(0x7f0000001400)="f34f18e22ec40ceb8484e2c9ca761887bb8b16c6cb216f929e46f79c0998639702e406abd9e51a973ee66fda518f27f44e0156ca96fae566445b01aa92d1142b5cae4f1518906320f00db10e426afe58028cd1b8e16312937121b2d553def11f", 0x60}], 0x2, &(0x7f00000014c0)=[{0x30, 0x113, 0x3, "cca988225318318a4ef2424cf422f500f53a1413e0663d4b2d"}, {0x28, 0x0, 0x10, "2a12fd20a43409787a557d7b0d0d906f7aa6545e60d5d9"}, {0x18, 0x115, 0x9, "2ad3a240cc59"}], 0x70}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001540)="d6f0f3ebc4554e36fde4dedc71f02df2d911aac4d469a07bd2f0c44142b8c4ebb40d883c6fc3289cf629267057911fa21d06ad0db07e4308f72afdd9ebe7f6dc589b6a8710b9fcb2bc2076a1294dd05c275726155fbfd3e95ccd89d9d502666ff603ff2cb3a9bc0523a6b77d91bdc6161b46bf107b1265438931963a146f05923cf4c2af318ee799465c3b684d5feb7abb6b982980a8fd4c0f55af3b05d802871a8c9d4737dc87ca8ec9e456f13a095296601a26ee5245e1d8da19d5850a3eb064a15b4f3df7d9597ff682e420dbde79eee7c7d988ae85", 0xd7}, {&(0x7f0000001640)="dfd33dbb82c1b959ea5eecd2f17795a03f59266ceb7fbc8e5402a2119af202ed67b0e21cc9b39093d8143cae5eedf84d65799a157ffc41851ebfb3960df504fccee39bd1f7bce4764155276e2067d47c22a53cfa672127f4f391c26434cf817b9d825618554a0bb20f390772277d5c4fa1443edf29f0b637cba4bb988c7b76c13d45e04d2f70d1f6bdb4e181faae70b075454680fe0d95ab979aab690c97489b5552ce668f16c570a15f6864fd3c2042b6cd29ee3cde4e5e1517f0e2464a03cf22d8e695634c6d0b847b5844b5e8d1933778057cf18a42a5a36412594c1969d4c181", 0xe2}, {&(0x7f0000001740)="a0557b67c5ffd36cdc20be49f326153133fe66f825e537dc409ddbf82d76f1f00ad59d36dcf21812a5ae0294ee15a8badbc3462aa24050e584e8b65215ad045d0b7403438ca06e369fe9e35fc5c9afc552d6e4ab099f8aa0a13aec6f5b79904f931021eb5b0ae07c97df88cced76e1e12a8ffba15452471354714cf67723b80874b2976f9ae621c40aa99cc95a2a65c0983bb8b93a92ce0602c9e4a33a58", 0x9e}, {&(0x7f0000001800)}, {&(0x7f0000001840)="90fa09ce8960559dae350e3f08817cbb911e82fdcd9f35f2b7fd0b6bb31b1ee7075d", 0x22}, {&(0x7f0000001880)="c16e0b", 0x3}, {&(0x7f00000018c0)="08ac1c737e52deac6df5661e1ba1b51fcb9479b8e526d0ed94026a79704c25b6f28aa39420e43b2b2e11b55a6c0c7b6cece88d42d1570ece5e6fbf2152533e25a0bae7148be3d86517f60eb6f85d622ca76e27c01529b3ccd0239dd943458d626cab756ec6b684ef6521fa5d3d99c6182fd468608d627fc81b734ecd0c444fb656f46c8e2a32dfe54f0f7902b8e4cf085f2af43133e90079e42097bdd1903657093e7bd7fb73098f9e7079bf5c09a9f8a39a837a5a8d2644bfa8f5b0a61de40f37c403069911ab8013c6f8104cac76f418512c13ccf5e8f1bbff4f2e5e3d50d7a8f985fe68d62707ffd3862e38", 0xed}, {&(0x7f00000019c0)="cb247ec3d1e2003fe9d149c1da2eb2652d93a80eafaa6b92a3877e5ef161c53a38145f2cac85c4052ac94508", 0x2c}, {&(0x7f0000001a00)="de0f81cc455da0be5c680bc4a7be51995427c3816148026635da9ec12b9fb38d7a79819325dc7dc01a66a60a147421b9cd3c662b8973f448d6a13738c483224c9f0bf5cc3cd8060bf916d3f2bfb129daf0aed9b6fae91efb3ad836b432d64216b8a2727a0bc5a0bccbe18448104e6bceee57ac70d3542a064bc16fcdc2f6dff901", 0x81}, {&(0x7f0000001ac0)="ec561820ddb982fb8fea47822762dfdbb1b3ee8c1c354c720ead72b263d466e0ae1c9ade0cc8a85e48c55322421aabc84792397fe220fdaa57d5165b3c47ee35d81c6b808992f6ecbf89d7cda06bb91b705a72b7a39edf5c521baf1a60565b1f1f17242a13935a1e4039fee6badadf2a18a895cc309c4c2448b81cc685d273cd18663e54cb07f3aee842ba0639dff02b", 0x90}], 0xa, &(0x7f0000001c40)=[{0x78, 0x1fd, 0x2, "84630379d3b3e29cbff82e949f7b2c3a51c61d281516c2590fc27a58d9a9db51a0b6cc085554663841173384adb263a8f3a0fc814c620bd7e0cc7b526dd7de244a294b8d91213e51af02a02fb54c63d36f1b3ba1a69b648d916fa83ec0fbb72d8f1d42d026c620"}, {0xf8, 0x115, 0x7, "f100565b3ed578a9eed2d74da16838def23d30a9b0a8748ae2383cc76e109c63f97f17756a8c15097937863af379711fcff199ff633ba51ebb663b1f68c11de464a929b3bd4fc02fd7dee69017e363025514189eb85cc5a7bdfbdad57aad3e68e9bc890bc55d1e0d1e7fdde5c3295416dff7945c70f42f10dfd6ff86990e4e300fca56220c269392af3264ef93c5fc5eaa616cf7999bd6202bfddb6c111ff2a66d354c3baee19502ec8cd7a34e2698ccf54e9c860777879347d7d985852f9f57ca7f1110b8aee817519900ca0a5321055cacc0290bb3a52b0890fcb3b6d9445a24c80cb830"}, {0xe8, 0x84, 0x7ff, "c245b61bbc1e5bcdd5d4c733efff0431557a94a9e86cf817953ca0f7ac2203fcc5f3160d68b06958c789d136c06372b629f26280f2be2c2c55b2488c0ecd67447ec828c4d65b046125a7598f1d80bde13ebe5cf64235a75a1af7277680e2fb9ee7a5b99e04d1e791b7b9974405707f37a187264b2a0f287c24db88f1158b4a31911ad1d0197f6028c9482578fda93636dca1ec3286506c57cd0cd7a3058ed7c206b616ace4f433fd684dd549067ca0fd89bdbf1348b53777861dfa843649063ac8548c74adc850dcccb6ef4ce4f2c8694272e43f233e"}], 0x258}}], 0x3, 0x20000000) kernel console output (not intermixed with test programs): vhci_hcd [ 222.805955][T10738] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 222.805981][T10738] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 222.806060][T10738] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 222.815045][T10738] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 222.815080][T10738] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 222.815476][T10738] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 222.815519][T10738] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 222.815574][T10738] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 222.815732][T10738] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 222.815823][T10738] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 222.815847][T10738] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 222.865221][ T9065] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 223.477479][T10738] ACPI: PM: Preparing to enter system sleep state S3 [ 223.477666][T10738] ACPI: PM: Saving platform NVS memory [ 223.477745][T10738] Disabling non-boot CPUs ... [ 223.482618][T10738] smpboot: CPU 1 is now offline [ 223.487500][T10738] ACPI: PM: Low-level resume complete [ 223.487567][T10738] ACPI: PM: Restoring platform NVS memory [ 223.504131][T10738] Enabling non-boot CPUs ... [ 223.504273][T10738] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 223.509011][T10738] CPU1 is up [ 223.509294][T10738] ACPI: PM: Waking up from system sleep state S3 [ 223.534307][ T4501] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 223.701626][T10738] OOM killer enabled. [ 223.701643][T10738] Restarting tasks: Starting [ 223.715996][T10738] Restarting tasks: Done [ 223.716049][T10738] random: crng reseeded on system resumption [ 223.729397][T10738] PM: suspend exit [ 223.859513][ T3387] logitech-hidpp-device 0003:046D:C082.0029: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 223.936180][T10754] fido_id[10754]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 224.173989][T10750] loop5: detected capacity change from 0 to 1164 [ 224.248101][T10750] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 224.396467][T10774] loop8: detected capacity change from 0 to 512 [ 224.411389][T10772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.411514][T10772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.498308][T10771] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1567'. [ 224.608493][T10786] loop8: detected capacity change from 0 to 512 [ 224.640208][T10786] EXT4-fs (loop8): invalid #clusters per group: 95 [ 225.148873][T10800] loop6: detected capacity change from 0 to 512 [ 225.210868][T10807] loop5: detected capacity change from 0 to 512 [ 225.285608][T10800] EXT4-fs (loop6): 1 truncate cleaned up [ 225.287380][T10800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.315347][ T29] audit: type=1400 audit(1788210351.639:1861): avc: denied { write } for pid=10798 comm="syz.6.1589" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.315593][T10807] EXT4-fs (loop5): 1 truncate cleaned up [ 225.318745][T10807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.330827][ T29] audit: type=1400 audit(1788210351.659:1862): avc: denied { write } for pid=10806 comm="syz.5.1580" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.338448][T10800] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1589: bg 0: block 465: padding at end of block bitmap is not set [ 225.340778][T10800] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 225.341327][T10800] EXT4-fs (loop6): This should not happen!! Data will be lost [ 225.341327][T10800] [ 225.345553][T10807] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1580: bg 0: block 465: padding at end of block bitmap is not set [ 225.347012][T10807] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 225.347110][T10807] EXT4-fs (loop5): This should not happen!! Data will be lost [ 225.347110][T10807] [ 225.894605][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.072543][ T6002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.165684][T10827] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1584'. [ 226.166066][T10827] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1584'. [ 226.166344][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 226.279510][T10830] netlink: 'syz.5.1584': attribute type 2 has an invalid length. [ 226.301504][T10829] loop6: detected capacity change from 0 to 512 [ 226.354997][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 226.355096][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1586'. [ 226.375776][T10829] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.386162][T10829] EXT4-fs (loop6): orphan cleanup on readonly fs [ 226.387607][T10829] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 226.389386][T10829] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1585: bg 0: block 248: padding at end of block bitmap is not set [ 226.389726][T10829] loop6: lost filesystem error report for type 5 error -117 [ 226.390912][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 226.391279][ C0] EXT4-fs (loop6): last error at time 1788210352: ext4_validate_block_bitmap:445 [ 226.391398][T10829] Quota error (device loop6): write_blk: dquota write failed [ 226.391441][T10829] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 226.391604][T10829] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1585: Failed to acquire dquot type 1 [ 226.393530][T10829] loop6: lost filesystem error report for type 5 error -28 [ 226.395974][T10829] EXT4-fs (loop6): 1 truncate cleaned up [ 226.402201][T10829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 226.422028][T10839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.422165][T10839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.431091][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 226.505002][T10845] loop6: detected capacity change from 0 to 512 [ 226.516525][T10845] EXT4-fs (loop6): invalid #clusters per group: 95 [ 226.565798][T10848] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1592'. [ 226.578257][T10848] netlink: 'syz.6.1592': attribute type 2 has an invalid length. [ 226.605398][T10850] loop6: detected capacity change from 0 to 512 [ 226.622449][T10850] EXT4-fs (loop6): 1 truncate cleaned up [ 226.624249][T10850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.627669][ T29] audit: type=1400 audit(1788210352.959:1863): avc: denied { write } for pid=10849 comm="syz.6.1593" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.633557][T10850] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1593: bg 0: block 465: padding at end of block bitmap is not set [ 226.635271][T10850] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 226.635420][T10850] EXT4-fs (loop6): This should not happen!! Data will be lost [ 226.635420][T10850] [ 226.635481][T10850] EXT4-fs (loop6): Total free blocks count 0 [ 226.635837][T10850] EXT4-fs (loop6): Free/Dirty block details [ 226.635892][T10850] EXT4-fs (loop6): free_blocks=0 [ 226.635940][T10850] EXT4-fs (loop6): dirty_blocks=5 [ 226.635984][T10850] EXT4-fs (loop6): Block reservation details [ 226.636036][T10850] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 226.834460][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.943523][T10859] loop6: detected capacity change from 0 to 512 [ 226.945223][T10859] EXT4-fs: inline encryption not supported [ 226.946663][T10859] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 226.959747][T10859] EXT4-fs (loop6): 1 truncate cleaned up [ 226.963634][T10859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.984823][ T29] audit: type=1400 audit(1788210353.319:1864): avc: denied { write } for pid=10858 comm="syz.6.1595" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.992753][T10862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.997231][ T29] audit: type=1400 audit(1788210353.329:1865): avc: denied { write } for pid=10861 comm="syz.5.1596" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.006981][T10862] EXT4-fs error (device loop5): ext4_validate_block_bitmap:427: comm syz.5.1596: bg 0: bad block bitmap checksum [ 227.018223][ T29] audit: type=1400 audit(1788210353.349:1866): avc: denied { write } for pid=10861 comm="syz.5.1596" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.050637][ T6002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.084408][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.784886][T10788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.919829][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.919978][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.978360][T10887] set_capacity_and_notify: 1 callbacks suppressed [ 227.978395][T10887] loop6: detected capacity change from 0 to 512 [ 228.087555][T10885] loop8: detected capacity change from 0 to 512 [ 228.090681][T10887] EXT4-fs (loop6): 1 truncate cleaned up [ 228.114235][T10885] EXT4-fs (loop8): invalid #clusters per group: 95 [ 228.127701][T10887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.171412][ T29] audit: type=1400 audit(1788210354.499:1867): avc: denied { write } for pid=10886 comm="syz.6.1604" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.185189][T10887] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1604: bg 0: block 465: padding at end of block bitmap is not set [ 228.188387][T10887] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 228.188515][T10887] EXT4-fs (loop6): This should not happen!! Data will be lost [ 228.188515][T10887] [ 228.228177][ T29] audit: type=1400 audit(1788210354.559:1868): avc: denied { remount } for pid=10900 comm="syz.8.1608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 228.535513][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.830219][T10880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.926074][T10949] loop0: detected capacity change from 0 to 256 [ 230.935664][ T29] audit: type=1326 audit(1788210357.279:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287b5ce159 code=0x7ffc0000 [ 230.936448][ T29] audit: type=1326 audit(1788210357.279:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287b5ce159 code=0x7ffc0000 [ 230.936965][ T29] audit: type=1326 audit(1788210357.279:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287b5ce159 code=0x7ffc0000 [ 230.937367][ T29] audit: type=1326 audit(1788210357.279:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f287b5ce159 code=0x7ffc0000 [ 230.937642][ T29] audit: type=1326 audit(1788210357.279:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287b5ce159 code=0x7ffc0000 [ 230.938033][ T29] audit: type=1326 audit(1788210357.279:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287b5ce159 code=0x7ffc0000 [ 230.938259][ T29] audit: type=1326 audit(1788210357.279:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287b5ce159 code=0x7ffc0000 [ 230.938721][ T29] audit: type=1326 audit(1788210357.279:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f287b5ce159 code=0x7ffc0000 [ 230.940350][ T29] audit: type=1326 audit(1788210357.279:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287b5ce159 code=0x7ffc0000 [ 230.942062][ T29] audit: type=1326 audit(1788210357.279:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287b5ce159 code=0x7ffc0000 [ 231.216781][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.216963][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.276766][T10943] loop6: detected capacity change from 0 to 512 [ 231.316775][T10943] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.353110][T10943] EXT4-fs (loop6): orphan cleanup on readonly fs [ 231.365669][T10943] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 231.383457][T10943] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1617: bg 0: block 248: padding at end of block bitmap is not set [ 231.383667][T10943] loop6: lost filesystem error report for type 5 error -117 [ 231.398508][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 231.398531][ C0] EXT4-fs (loop6): last error at time 1788210357: ext4_validate_block_bitmap:445 [ 231.423554][T10943] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1617: Failed to acquire dquot type 1 [ 231.423733][T10943] loop6: lost filesystem error report for type 5 error -28 [ 231.442387][T10943] EXT4-fs (loop6): 1 truncate cleaned up [ 231.462414][T10943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 231.503214][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 231.535838][T10983] loop8: detected capacity change from 0 to 512 [ 231.776156][ T5937] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 231.776273][ T5937] FAT-fs (loop0): Filesystem has been set read-only [ 231.776359][ T5937] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 231.979378][T11007] FAULT_INJECTION: forcing a failure. [ 231.979378][T11007] name failslab, interval 1, probability 0, space 0, times 0 [ 231.979501][T11007] CPU: 1 UID: 0 PID: 11007 Comm: syz.1.1636 Not tainted syzkaller #0 PREEMPT(lazy) [ 231.979536][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.979554][T11007] Call Trace: [ 231.979585][T11007] [ 231.979595][T11007] __dump_stack+0x1d/0x30 [ 231.979624][T11007] dump_stack_lvl+0x95/0xd0 [ 231.979645][T11007] dump_stack+0x15/0x1b [ 231.979669][T11007] should_fail_ex+0x262/0x280 [ 231.979696][T11007] ? audit_log_start+0x34c/0x730 [ 231.979778][T11007] should_failslab+0x8c/0xb0 [ 231.979947][T11007] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 231.980113][T11007] ? timerqueue_linked_add+0x1c9/0x1f0 [ 231.980246][T11007] ? audit_log_start+0x34c/0x730 [ 231.980332][T11007] audit_log_start+0x34c/0x730 [ 231.980411][T11007] audit_seccomp+0x49/0x110 [ 231.980511][T11007] __seccomp_filter+0x909/0x1360 [ 231.980611][T11007] ? __fget_files+0x184/0x1c0 [ 231.980691][T11007] ? xfd_validate_state+0x45/0xf0 [ 231.980845][T11007] __seccomp_permit_syscall+0x7d/0x150 [ 231.980939][T11007] do_syscall_64+0xca/0x360 [ 231.981086][T11007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.981166][T11007] RIP: 0033:0x7f687506e159 [ 231.981227][T11007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.981316][T11007] RSP: 002b:00007f6873ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 231.981405][T11007] RAX: ffffffffffffffda RBX: 00007f68752f5fa0 RCX: 00007f687506e159 [ 231.981463][T11007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.981504][T11007] RBP: 00007f6873ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.981547][T11007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.981594][T11007] R13: 00007f68752f6038 R14: 00007f68752f5fa0 R15: 00007ffe70c51138 [ 231.981695][T11007] [ 232.188729][ T4467] bridge_slave_1: left allmulticast mode [ 232.188765][ T4467] bridge_slave_1: left promiscuous mode [ 232.189096][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.202633][ T4467] bridge_slave_0: left allmulticast mode [ 232.202695][ T4467] bridge_slave_0: left promiscuous mode [ 232.203022][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.214427][ T4467] pim6reg: left allmulticast mode [ 232.248172][ T4467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.257505][ T4467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.267316][ T4467] bond0 (unregistering): Released all slaves [ 232.307032][ T4467] hsr_slave_0: left promiscuous mode [ 232.312404][ T4467] hsr_slave_1: left promiscuous mode [ 232.313370][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.318508][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.363338][ T4467] team0 (unregistering): Port device team_slave_1 removed [ 232.372828][ T4467] team0 (unregistering): Port device team_slave_0 removed [ 232.478634][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.478721][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.478900][T10999] bridge_slave_0: entered allmulticast mode [ 232.480268][T10999] bridge_slave_0: entered promiscuous mode [ 232.482955][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.482998][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.483185][T10999] bridge_slave_1: entered allmulticast mode [ 232.484309][T10999] bridge_slave_1: entered promiscuous mode [ 232.507052][T10999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.508866][T10999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.529842][T10999] team0: Port device team_slave_0 added [ 232.533386][T10999] team0: Port device team_slave_1 added [ 232.564467][T10999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.564485][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.564518][T10999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.567892][T10999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.567963][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.568128][T10999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.613736][T10999] hsr_slave_0: entered promiscuous mode [ 232.614770][T10999] hsr_slave_1: entered promiscuous mode [ 232.615716][T10999] debugfs: 'hsr0' already exists in 'hsr' [ 232.615757][T10999] Cannot create hsr debugfs directory [ 234.523299][T10978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.539269][T10999] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 234.563293][T10999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 234.572800][T10999] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 234.587706][T10999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 234.597253][T10999] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 234.606599][T10999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 234.614480][T10999] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 234.624624][T10999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 234.658067][T11029] __nla_validate_parse: 3 callbacks suppressed [ 234.658092][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1640'. [ 234.658118][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1640'. [ 234.690977][T11029] bridge1: entered promiscuous mode [ 234.691015][T11029] bridge1: entered allmulticast mode [ 234.719260][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.719548][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.738731][T10999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.762899][T10999] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.774178][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.774271][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.788411][ T4495] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.788515][ T4495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.956844][T11049] loop6: detected capacity change from 0 to 512 [ 234.973277][ T3024] 8021q: adding VLAN 0 to HW filter on device eth6 [ 235.007235][T11049] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 235.035944][T11049] EXT4-fs (loop6): orphan cleanup on readonly fs [ 235.038646][T11070] --map-set only usable from mangle table [ 235.043845][T11049] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 235.048394][T11049] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1642: bg 0: block 248: padding at end of block bitmap is not set [ 235.048478][T11049] loop6: lost filesystem error report for type 5 error -117 [ 235.049525][T11049] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1642: Failed to acquire dquot type 1 [ 235.049627][T11049] loop6: lost filesystem error report for type 5 error -28 [ 235.057020][T11049] EXT4-fs (loop6): 1 truncate cleaned up [ 235.062745][T11049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 235.153565][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 235.237091][T11092] loop5: detected capacity change from 0 to 512 [ 235.249431][T11092] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 235.249705][T11092] EXT4-fs (loop5): orphan cleanup on readonly fs [ 235.251866][T11092] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.1647: Failed to acquire dquot type 1 [ 235.252017][T11092] loop5: lost filesystem error report for type 5 error -5 [ 235.252988][T11092] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1647: bg 0: block 40: padding at end of block bitmap is not set [ 235.253081][T11092] loop5: lost filesystem error report for type 5 error -117 [ 235.256791][T11092] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 235.256853][T11092] loop5: lost filesystem error report for type 5 error -117 [ 235.258749][T11092] EXT4-fs warning (device loop5): ext4_evict_inode:196: inode #16: comm syz.5.1647: data will be lost [ 235.259050][T11092] EXT4-fs (loop5): 1 truncate cleaned up [ 235.260508][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 235.260568][ C0] EXT4-fs (loop5): initial error at time 1788210361: ext4_acquire_dquot:7069 [ 235.260654][ C0] EXT4-fs (loop5): last error at time 1788210361: ext4_mb_clear_bb:6680 [ 235.264184][T11092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.375834][T11099] loop6: detected capacity change from 0 to 512 [ 235.383149][T10999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.407721][T11099] EXT4-fs (loop6): 1 truncate cleaned up [ 235.408185][T11099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.486823][T11088] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1648: bg 0: block 465: padding at end of block bitmap is not set [ 235.490164][T11088] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 235.490247][T11088] EXT4-fs (loop6): This should not happen!! Data will be lost [ 235.490247][T11088] [ 235.534528][ T3024] 8021q: adding VLAN 0 to HW filter on device eth5 [ 235.609240][ T6002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.774740][T10999] veth0_vlan: entered promiscuous mode [ 235.783850][T10999] veth1_vlan: entered promiscuous mode [ 235.799659][T10999] veth0_macvtap: entered promiscuous mode [ 235.807799][T10999] veth1_macvtap: entered promiscuous mode [ 235.819911][T10999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.833033][T10999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.880792][ T4505] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.880942][ T4505] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.898922][ T4495] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.899917][ T4495] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.954149][T11138] loop7: detected capacity change from 0 to 512 [ 235.967361][T11138] EXT4-fs (loop7): 1 truncate cleaned up [ 235.967832][T11138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.987434][T11138] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 13: comm syz.7.1634: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 235.987628][ T29] kauditd_printk_skb: 942 callbacks suppressed [ 235.987649][ T29] audit: type=1400 audit(1788210362.319:2813): avc: denied { write } for pid=11137 comm="syz.7.1634" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.037355][T11138] EXT4-fs (loop7): Remounting filesystem read-only [ 236.071868][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.120846][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.276973][T11153] PM: suspend entry (deep) [ 236.623679][ T4505] Filesystems sync: 0.340 seconds [ 236.702687][T11153] Freezing user space processes [ 236.712527][T11104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.678755][T11153] Freezing user space processes completed (elapsed 0.976 seconds) [ 237.678837][T11153] OOM killer disabled. [ 237.678847][T11153] Freezing remaining freezable tasks [ 237.685256][T11153] Freezing remaining freezable tasks completed (elapsed 0.006 seconds) [ 237.685382][T11153] printk: Suspending console(s) (use no_console_suspend to debug) [ 237.751964][T11153] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 237.752006][T11153] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 237.752073][T11153] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 237.752121][T11153] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 237.752147][T11153] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 237.752193][T11153] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 237.762962][T11153] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 237.763116][T11153] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 237.763187][T11153] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 237.763330][T11153] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 237.763359][T11153] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 237.763398][T11153] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 237.763506][T11153] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 237.763608][T11153] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 237.763634][T11153] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 237.763700][T11153] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 237.810601][ T4522] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 238.457069][T11153] ACPI: PM: Preparing to enter system sleep state S3 [ 238.457201][T11153] ACPI: PM: Saving platform NVS memory [ 238.457253][T11153] Disabling non-boot CPUs ... [ 238.462189][T11153] smpboot: CPU 1 is now offline [ 238.466645][T11153] ACPI: PM: Low-level resume complete [ 238.466710][T11153] ACPI: PM: Restoring platform NVS memory [ 238.480768][T11153] Enabling non-boot CPUs ... [ 238.481000][T11153] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 238.485442][T11153] CPU1 is up [ 238.485735][T11153] ACPI: PM: Waking up from system sleep state S3 [ 238.522306][ T4471] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 238.657829][T11153] OOM killer enabled. [ 238.657848][T11153] Restarting tasks: Starting [ 238.664269][T11153] Restarting tasks: Done [ 238.664319][T11153] random: crng reseeded on system resumption [ 238.734158][T11153] PM: suspend exit [ 238.770036][T11165] loop5: detected capacity change from 0 to 2048 [ 238.771565][T11165] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 238.887774][T11168] loop8: detected capacity change from 0 to 512 [ 238.902610][T11168] EXT4-fs (loop8): 1 truncate cleaned up [ 238.903160][T11168] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.920037][ T29] audit: type=1400 audit(1788210365.251:2814): avc: denied { write } for pid=11166 comm="syz.8.1660" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.949837][T11167] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1660: bg 0: block 465: padding at end of block bitmap is not set [ 238.955082][T11167] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 238.955171][T11167] EXT4-fs (loop8): This should not happen!! Data will be lost [ 238.955171][T11167] [ 238.955840][T11167] EXT4-fs (loop8): Total free blocks count 0 [ 238.956147][T11167] EXT4-fs (loop8): Free/Dirty block details [ 238.956205][T11167] EXT4-fs (loop8): free_blocks=0 [ 238.956242][T11167] EXT4-fs (loop8): dirty_blocks=5 [ 238.956285][T11167] EXT4-fs (loop8): Block reservation details [ 238.956332][T11167] EXT4-fs (loop8): i_reserved_data_blocks=5 [ 239.063843][ T29] audit: type=1400 audit(1788210365.401:2815): avc: denied { write } for pid=11171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.111341][ T29] audit: type=1400 audit(1788210365.451:2816): avc: denied { write } for pid=11194 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.140431][ T3024] 8021q: adding VLAN 0 to HW filter on device eth7 [ 239.273278][ T29] audit: type=1400 audit(1788210365.611:2817): avc: denied { write } for pid=11196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.311730][ T29] audit: type=1400 audit(1788210365.651:2818): avc: denied { write } for pid=11219 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.551443][ T29] audit: type=1400 audit(1788210365.891:2819): avc: denied { write } for pid=11223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.598931][ T29] audit: type=1400 audit(1788210365.941:2820): avc: denied { write } for pid=11244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.760431][ T29] audit: type=1400 audit(1788210366.101:2821): avc: denied { write } for pid=11246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.777381][ T5692] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.823496][ T29] audit: type=1400 audit(1788210366.161:2822): avc: denied { write } for pid=11262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.853013][T11266] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1675'. [ 239.853105][T11266] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1675'. [ 239.853130][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1675'. [ 239.877932][T11266] netlink: 'syz.6.1675': attribute type 2 has an invalid length. [ 240.156788][T11263] loop8: detected capacity change from 0 to 512 [ 240.225379][T11263] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.267132][T11263] EXT4-fs (loop8): orphan cleanup on readonly fs [ 240.281842][T11263] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 240.304745][T11263] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1674: bg 0: block 248: padding at end of block bitmap is not set [ 240.305465][T11263] loop8: lost filesystem error report for type 5 error -117 [ 240.317121][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 240.317256][ C1] EXT4-fs (loop8): last error at time 1788210366: ext4_validate_block_bitmap:445 [ 240.352227][T11263] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.1674: Failed to acquire dquot type 1 [ 240.376834][T11263] loop8: lost filesystem error report for type 5 error -28 [ 240.377381][T11271] loop6: detected capacity change from 0 to 512 [ 240.428811][T11271] EXT4-fs (loop6): invalid #clusters per group: 95 [ 240.456479][T11263] EXT4-fs (loop8): 1 truncate cleaned up [ 240.576602][T11263] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 240.622643][ T5692] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 240.673822][T11285] loop6: detected capacity change from 0 to 256 [ 240.685814][T11284] PM: suspend entry (deep) [ 240.890656][ T363] Filesystems sync: 0.203 seconds [ 240.905329][T11291] coredump: 675(syz.6.1683): Core dump to core aborted: cannot preserve file permissions [ 240.927629][T11284] Freezing user space processes [ 240.928465][T11240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.021717][T11284] Freezing user space processes completed (elapsed 0.094 seconds) [ 241.021864][T11284] OOM killer disabled. [ 241.021894][T11284] Freezing remaining freezable tasks [ 241.024509][T11284] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 241.024617][T11284] printk: Suspending console(s) (use no_console_suspend to debug) [ 241.068401][T11284] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 241.078432][T11284] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 241.078472][T11284] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 241.078594][T11284] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 241.078637][T11284] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 241.078667][T11284] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 241.078723][T11284] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 241.078756][T11284] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 241.078785][T11284] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 241.078900][T11284] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 241.078929][T11284] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 241.078977][T11284] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 241.079006][T11284] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 241.079060][T11284] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 241.079110][T11284] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 241.079197][T11284] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 241.127230][ T4483] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 241.753169][T11284] ACPI: PM: Preparing to enter system sleep state S3 [ 241.753344][T11284] ACPI: PM: Saving platform NVS memory [ 241.753455][T11284] Disabling non-boot CPUs ... [ 241.758454][T11284] smpboot: CPU 1 is now offline [ 241.762696][T11284] ACPI: PM: Low-level resume complete [ 241.762765][T11284] ACPI: PM: Restoring platform NVS memory [ 241.775347][T11284] Enabling non-boot CPUs ... [ 241.775585][T11284] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 241.779875][T11284] CPU1 is up [ 241.780111][T11284] ACPI: PM: Waking up from system sleep state S3 [ 241.817739][ T4511] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 241.962393][T11284] OOM killer enabled. [ 241.962412][T11284] Restarting tasks: Starting [ 241.964695][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 241.964712][ T29] audit: type=1326 audit(1788210368.305:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.6.1683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa42753e159 code=0x7ffc0000 [ 241.964752][ T29] audit: type=1326 audit(1788210368.305:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.6.1683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42753e159 code=0x7ffc0000 [ 241.964896][ T29] audit: type=1326 audit(1788210368.305:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.6.1683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42753e159 code=0x7ffc0000 [ 241.971495][ T29] audit: type=1326 audit(1788210368.305:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.6.1683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa42753e159 code=0x7ffc0000 [ 241.972187][ T29] audit: type=1326 audit(1788210368.305:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.6.1683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa42753e159 code=0x7ffc0000 [ 242.004101][T11284] Restarting tasks: Done [ 242.004156][T11284] random: crng reseeded on system resumption [ 242.007196][T11284] PM: suspend exit [ 242.072598][ T29] audit: type=1400 audit(1788210368.415:2957): avc: denied { mounton } for pid=11297 comm="syz.5.1685" path="/proc/614/task" dev="proc" ino=29276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 242.076576][ T29] audit: type=1400 audit(1788210368.415:2958): avc: denied { associate } for pid=11299 comm="syz.5.1685" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 242.123433][T11303] FAULT_INJECTION: forcing a failure. [ 242.123433][T11303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.123481][T11303] CPU: 0 UID: 0 PID: 11303 Comm: syz.6.1686 Not tainted syzkaller #0 PREEMPT(lazy) [ 242.123513][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.123529][T11303] Call Trace: [ 242.123601][T11303] [ 242.123644][T11303] __dump_stack+0x1d/0x30 [ 242.123747][T11303] dump_stack_lvl+0x95/0xd0 [ 242.123830][T11303] dump_stack+0x15/0x1b [ 242.123903][T11303] should_fail_ex+0x262/0x280 [ 242.124060][T11303] should_fail+0xb/0x20 [ 242.124157][T11303] should_fail_usercopy+0x1a/0x20 [ 242.124242][T11303] _copy_to_user+0x20/0xa0 [ 242.124322][T11303] simple_read_from_buffer+0xb5/0x130 [ 242.124496][T11303] proc_fail_nth_read+0x10e/0x150 [ 242.124670][T11303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.124845][T11303] vfs_read+0x18e/0x7c0 [ 242.124911][T11303] ? __rcu_read_unlock+0x4e/0x70 [ 242.125013][T11303] ? __fget_files+0x184/0x1c0 [ 242.125151][T11303] ? mutex_lock+0x57/0x90 [ 242.125238][T11303] ksys_read+0xdc/0x1a0 [ 242.125317][T11303] __x64_sys_read+0x40/0x50 [ 242.125417][T11303] x64_sys_call+0x2135/0x2550 [ 242.125501][T11303] do_syscall_64+0x112/0x360 [ 242.125583][T11303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.125674][T11303] RIP: 0033:0x7fa4274fe98e [ 242.125741][T11303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.125836][T11303] RSP: 002b:00007fa425f96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.125911][T11303] RAX: ffffffffffffffda RBX: 00007fa425f976c0 RCX: 00007fa4274fe98e [ 242.125978][T11303] RDX: 000000000000000f RSI: 00007fa425f970a0 RDI: 0000000000000005 [ 242.126023][T11303] RBP: 00007fa425f97090 R08: 0000000000000000 R09: 0000000000000000 [ 242.126087][T11303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.126121][T11303] R13: 00007fa4277c6038 R14: 00007fa4277c5fa0 R15: 00007ffd88ac6a68 [ 242.126306][T11303] [ 242.156236][T11304] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 242.167302][T11307] loop5: detected capacity change from 0 to 512 [ 242.206113][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.206185][T11307] FAT-fs (loop5): Filesystem has been set read-only [ 242.206288][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.206577][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.206725][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.207006][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.211879][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.212500][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.212864][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.218023][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.218362][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.218817][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.219202][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.229574][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.229735][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.229844][T11307] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 242.230130][T11307] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 242.262163][ T29] audit: type=1400 audit(1788210368.595:2959): avc: denied { cmd } for pid=11306 comm="syz.5.1688" path="socket:[29304]" dev="sockfs" ino=29304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 242.339938][ T29] audit: type=1400 audit(1788210368.675:2960): avc: denied { mount } for pid=11321 comm="syz.7.1692" name="/" dev="ramfs" ino=30139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 242.351474][ T29] audit: type=1400 audit(1788210368.685:2961): avc: denied { write } for pid=11300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.443415][ T3024] 8021q: adding VLAN 0 to HW filter on device eth8 [ 242.556226][T11336] loop5: detected capacity change from 0 to 512 [ 242.584957][T11336] EXT4-fs (loop5): invalid #clusters per group: 95 [ 242.609777][T11346] dummy0: entered allmulticast mode [ 243.088464][T11414] loop6: detected capacity change from 0 to 1024 [ 243.090071][T11414] EXT4-fs: Ignoring removed nobh option [ 243.090201][T11414] EXT4-fs: Ignoring removed bh option [ 243.090306][T11414] EXT4-fs: Ignoring removed nobh option [ 243.093937][T11414] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 243.106279][T11414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.347615][T11414] SELinux: failed to load policy [ 243.364948][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.518371][T11469] loop7: detected capacity change from 0 to 512 [ 243.527042][T11469] EXT4-fs (loop7): 1 orphan inode deleted [ 243.528790][T11469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.531612][T11469] ext4 filesystem being mounted at /15/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.592297][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.744304][T11489] loop7: detected capacity change from 0 to 512 [ 243.812653][T11489] EXT4-fs (loop7): invalid #clusters per group: 95 [ 243.878808][T11507] netlink: 'syz.1.1708': attribute type 3 has an invalid length. [ 243.878842][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1708'. [ 244.044944][T11514] loop7: detected capacity change from 0 to 512 [ 244.057064][T11520] netlink: 'syz.1.1711': attribute type 21 has an invalid length. [ 244.057112][T11520] netlink: 'syz.1.1711': attribute type 6 has an invalid length. [ 244.057133][T11520] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1711'. [ 244.062711][T11514] EXT4-fs (loop7): 1 truncate cleaned up [ 244.063293][T11514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.065332][T11514] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1709: bg 0: block 465: padding at end of block bitmap is not set [ 244.067922][T11514] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 244.068029][T11514] EXT4-fs (loop7): This should not happen!! Data will be lost [ 244.068029][T11514] [ 244.568628][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1715'. [ 244.619483][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.648399][T11549] Cannot find set identified by id 65535 to match [ 244.682571][T11552] loop6: detected capacity change from 0 to 512 [ 244.686830][T11552] EXT4-fs (loop6): invalid #clusters per group: 95 [ 244.707692][T11553] FAULT_INJECTION: forcing a failure. [ 244.707692][T11553] name failslab, interval 1, probability 0, space 0, times 0 [ 244.707726][T11553] CPU: 1 UID: 0 PID: 11553 Comm: syz.7.1717 Not tainted syzkaller #0 PREEMPT(lazy) [ 244.707758][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.707786][T11553] Call Trace: [ 244.707795][T11553] [ 244.707805][T11553] __dump_stack+0x1d/0x30 [ 244.707838][T11553] dump_stack_lvl+0x95/0xd0 [ 244.707908][T11553] dump_stack+0x15/0x1b [ 244.707935][T11553] should_fail_ex+0x262/0x280 [ 244.707969][T11553] ? security_file_alloc+0x32/0xf0 [ 244.708007][T11553] should_failslab+0x8c/0xb0 [ 244.708220][T11553] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 244.708327][T11553] ? security_file_alloc+0x32/0xf0 [ 244.708491][T11553] security_file_alloc+0x32/0xf0 [ 244.708618][T11553] init_file+0x5b/0x1b0 [ 244.708722][T11553] alloc_empty_file+0x85/0x1e0 [ 244.708840][T11553] path_openat+0x50/0x10d0 [ 244.708964][T11553] ? kstrtouint+0x76/0xc0 [ 244.709079][T11553] do_file_open+0x16c/0x290 [ 244.709276][T11553] do_sys_openat2+0xa0/0x130 [ 244.709384][T11553] __x64_sys_open+0xe6/0x110 [ 244.709461][T11553] x64_sys_call+0x23a8/0x2550 [ 244.709581][T11553] do_syscall_64+0x112/0x360 [ 244.709709][T11553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.709789][T11553] RIP: 0033:0x7fcf1d94e159 [ 244.709886][T11553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.709947][T11553] RSP: 002b:00007fcf1c386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 244.709991][T11553] RAX: ffffffffffffffda RBX: 00007fcf1dbd6090 RCX: 00007fcf1d94e159 [ 244.710045][T11553] RDX: 00000000000001ff RSI: 0000000000000241 RDI: 00002000000004c0 [ 244.710100][T11553] RBP: 00007fcf1c386090 R08: 0000000000000000 R09: 0000000000000000 [ 244.710186][T11553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.710225][T11553] R13: 00007fcf1dbd6128 R14: 00007fcf1dbd6090 R15: 00007ffc55352438 [ 244.710352][T11553] [ 244.710963][T11553] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1717'. [ 244.746718][T11553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.746842][T11553] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.639213][T11562] set_capacity_and_notify: 1 callbacks suppressed [ 245.639269][T11562] loop6: detected capacity change from 0 to 512 [ 245.651435][T11562] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.654797][T11562] EXT4-fs (loop6): orphan cleanup on readonly fs [ 245.656331][T11562] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 245.658185][T11562] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1721: bg 0: block 248: padding at end of block bitmap is not set [ 245.658594][T11562] loop6: lost filesystem error report for type 5 error -117 [ 245.660826][T11562] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1721: Failed to acquire dquot type 1 [ 245.660956][T11562] loop6: lost filesystem error report for type 5 error -28 [ 245.663988][T11562] EXT4-fs (loop6): 1 truncate cleaned up [ 245.667450][T11562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 245.679892][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 245.725919][T11361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.751926][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 245.888099][T11577] cgroup: noprefix used incorrectly [ 245.984840][T11575] loop5: detected capacity change from 0 to 8192 [ 246.117505][T11585] loop7: detected capacity change from 0 to 1024 [ 246.156274][T11585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.156353][T11585] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.166340][T11585] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.1728: lblock 3 mapped to illegal pblock 3 (length 3) [ 246.168803][T11585] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 246.168835][T11585] EXT4-fs (loop7): This should not happen!! Data will be lost [ 246.168835][T11585] [ 246.261074][ T4511] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:112: lblock 8 mapped to illegal pblock 8 (length 8) [ 246.265141][ T4511] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 246.265180][ T4511] EXT4-fs (loop7): This should not happen!! Data will be lost [ 246.265180][ T4511] [ 246.270193][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.331072][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1726'. [ 246.419893][T11596] loop8: detected capacity change from 0 to 512 [ 246.421797][T11596] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 246.442824][T11604] PM: suspend entry (deep) [ 246.521697][T11599] loop7: detected capacity change from 0 to 512 [ 246.525960][ T4511] Filesystems sync: 0.082 seconds [ 246.571254][T11599] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.581879][T11599] EXT4-fs (loop7): orphan cleanup on readonly fs [ 246.586744][T11599] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 246.589981][T11599] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1733: bg 0: block 248: padding at end of block bitmap is not set [ 246.590438][T11599] loop7: lost filesystem error report for type 5 error -117 [ 246.593833][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 246.593858][ C0] EXT4-fs (loop7): last error at time 1788210372: ext4_validate_block_bitmap:445 [ 246.599466][T11604] Freezing user space processes [ 246.604093][T11599] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.1733: Failed to acquire dquot type 1 [ 246.604192][T11599] loop7: lost filesystem error report for type 5 error -28 [ 246.612608][T11599] EXT4-fs (loop7): 1 truncate cleaned up [ 246.620998][T11599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 246.650207][T11604] Freezing user space processes completed (elapsed 0.050 seconds) [ 246.650235][T11604] OOM killer disabled. [ 246.650388][T11604] Freezing remaining freezable tasks [ 246.655463][T11604] Freezing remaining freezable tasks completed (elapsed 0.005 seconds) [ 246.655556][T11604] printk: Suspending console(s) (use no_console_suspend to debug) [ 246.714517][T11604] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 246.714678][T11604] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 246.714704][T11604] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 246.714730][T11604] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 246.714807][T11604] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 246.714834][T11604] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 246.714901][T11604] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 246.714957][T11604] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 246.715044][T11604] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 246.715113][T11604] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 246.715155][T11604] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 246.715180][T11604] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 246.715276][T11604] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 246.715301][T11604] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 246.715403][T11604] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 246.715446][T11604] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 246.761946][ T4511] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 247.383662][T11604] ACPI: PM: Preparing to enter system sleep state S3 [ 247.383895][T11604] ACPI: PM: Saving platform NVS memory [ 247.384003][T11604] Disabling non-boot CPUs ... [ 247.388641][T11604] smpboot: CPU 1 is now offline [ 247.393317][T11604] ACPI: PM: Low-level resume complete [ 247.393451][T11604] ACPI: PM: Restoring platform NVS memory [ 247.405676][T11604] Enabling non-boot CPUs ... [ 247.405819][T11604] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 247.410608][T11604] CPU1 is up [ 247.410813][T11604] ACPI: PM: Waking up from system sleep state S3 [ 247.440717][ T4527] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 247.587357][T11604] OOM killer enabled. [ 247.587374][T11604] Restarting tasks: Starting [ 247.627113][T11604] Restarting tasks: Done [ 247.627174][T11604] random: crng reseeded on system resumption [ 247.630937][T11604] PM: suspend exit [ 247.664912][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 247.670017][T11613] loop6: detected capacity change from 0 to 128 [ 247.689781][T11613] syz.6.1736: attempt to access beyond end of device [ 247.689781][T11613] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 247.689985][T11613] syz.6.1736: attempt to access beyond end of device [ 247.689985][T11613] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 247.690090][T11613] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 247.690126][T11613] syz.6.1736: attempt to access beyond end of device [ 247.690126][T11613] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 247.690150][T11613] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 247.690268][T11613] syz.6.1736: attempt to access beyond end of device [ 247.690268][T11613] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 247.703381][T11613] syz.6.1736: attempt to access beyond end of device [ 247.703381][T11613] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 247.703413][T11613] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 247.703440][T11613] syz.6.1736: attempt to access beyond end of device [ 247.703440][T11613] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 247.703601][T11613] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 247.717931][T11613] syz.6.1736: attempt to access beyond end of device [ 247.717931][T11613] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 247.718247][T11613] syz.6.1736: attempt to access beyond end of device [ 247.718247][T11613] loop6: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 247.718298][T11613] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 247.718315][T11613] syz.6.1736: attempt to access beyond end of device [ 247.718315][T11613] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 247.718334][T11613] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 247.718552][T11613] syz.6.1736: attempt to access beyond end of device [ 247.718552][T11613] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 247.739469][T11613] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 247.739500][T11613] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 247.778989][T11625] Buffer I/O error on dev loop6, logical block 77, lost async page write [ 247.779022][T11625] Buffer I/O error on dev loop6, logical block 78, lost async page write [ 247.820412][T11632] tc_dump_action: action bad kind [ 247.868767][T11632] loop8: detected capacity change from 0 to 2048 [ 247.918278][T11638] FAULT_INJECTION: forcing a failure. [ 247.918278][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 247.918374][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.7.1743 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.918400][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.918413][T11638] Call Trace: [ 247.918422][T11638] [ 247.918431][T11638] __dump_stack+0x1d/0x30 [ 247.918621][T11638] dump_stack_lvl+0x95/0xd0 [ 247.918702][T11638] dump_stack+0x15/0x1b [ 247.918812][T11638] should_fail_ex+0x262/0x280 [ 247.919047][T11638] ? skb_clone+0x151/0x1f0 [ 247.919205][T11638] should_failslab+0x8c/0xb0 [ 247.919409][T11638] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 247.919605][T11638] ? skb_clone+0x151/0x1f0 [ 247.919724][T11638] skb_clone+0x151/0x1f0 [ 247.919835][T11638] __netlink_deliver_tap+0x2be/0x510 [ 247.919970][T11638] netlink_unicast+0x656/0x680 [ 247.920098][T11638] netlink_sendmsg+0x5be/0x6f0 [ 247.920225][T11638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.920337][T11638] ____sys_sendmsg+0x532/0x580 [ 247.920532][T11638] ___sys_sendmsg+0x195/0x1e0 [ 247.920760][T11638] __x64_sys_sendmsg+0xd4/0x160 [ 247.920946][T11638] x64_sys_call+0x22ab/0x2550 [ 247.921059][T11638] do_syscall_64+0x112/0x360 [ 247.921193][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.921288][T11638] RIP: 0033:0x7fcf1d94e159 [ 247.921356][T11638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.921458][T11638] RSP: 002b:00007fcf1c3a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.921558][T11638] RAX: ffffffffffffffda RBX: 00007fcf1dbd5fa0 RCX: 00007fcf1d94e159 [ 247.921572][T11638] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 247.921585][T11638] RBP: 00007fcf1c3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 247.921598][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.921611][T11638] R13: 00007fcf1dbd6038 R14: 00007fcf1dbd5fa0 R15: 00007ffc55352438 [ 247.921745][T11638] [ 247.939252][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1743'. [ 247.950587][T11641] loop8: detected capacity change from 0 to 512 [ 247.963356][T11641] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.1745: iget: bogus i_mode (3355) [ 247.963474][T11641] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.963863][T11641] EXT4-fs (loop8): Remounting filesystem read-only [ 247.965082][T11641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.173567][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 248.173592][ T29] audit: type=1400 audit(1788210374.517:3111): avc: denied { mounton } for pid=11639 comm="syz.8.1745" path="/262/file0" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.439817][T11664] loop6: detected capacity change from 0 to 512 [ 248.484770][T11664] EXT4-fs (loop6): 1 truncate cleaned up [ 248.508493][T11664] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.526949][ T29] audit: type=1400 audit(1788210374.867:3112): avc: denied { write } for pid=11662 comm="syz.6.1749" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.529108][T11664] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1749: bg 0: block 465: padding at end of block bitmap is not set [ 248.531262][T11664] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 248.531374][T11664] EXT4-fs (loop6): This should not happen!! Data will be lost [ 248.531374][T11664] [ 248.531437][T11664] EXT4-fs (loop6): Total free blocks count 0 [ 248.531983][T11664] EXT4-fs (loop6): Free/Dirty block details [ 248.532032][T11664] EXT4-fs (loop6): free_blocks=0 [ 248.532090][T11664] EXT4-fs (loop6): dirty_blocks=5 [ 248.532207][T11664] EXT4-fs (loop6): Block reservation details [ 248.532251][T11664] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 248.548537][T11668] loop7: detected capacity change from 0 to 512 [ 248.579537][T11668] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.620142][T11668] EXT4-fs (loop7): orphan cleanup on readonly fs [ 248.639562][T11668] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 248.645952][T11668] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1750: bg 0: block 248: padding at end of block bitmap is not set [ 248.646015][T11668] loop7: lost filesystem error report for type 5 error -117 [ 248.648931][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 248.648953][ C0] EXT4-fs (loop7): last error at time 1788210374: ext4_validate_block_bitmap:445 [ 248.657583][T11668] Quota error (device loop7): write_blk: dquota write failed [ 248.658134][T11668] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 248.658334][T11668] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.1750: Failed to acquire dquot type 1 [ 248.658436][T11668] loop7: lost filesystem error report for type 5 error -28 [ 248.666170][T11668] EXT4-fs (loop7): 1 truncate cleaned up [ 248.669154][T11668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 248.685477][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 248.844017][T11680] EXT4-fs (loop7): 1 truncate cleaned up [ 248.856727][T11680] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.872227][ T29] audit: type=1400 audit(1788210375.207:3113): avc: denied { write } for pid=11679 comm="syz.7.1752" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.885276][T11680] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1752: bg 0: block 465: padding at end of block bitmap is not set [ 248.888185][T11680] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 248.888293][T11680] EXT4-fs (loop7): This should not happen!! Data will be lost [ 248.888293][T11680] [ 248.888347][T11680] EXT4-fs (loop7): Total free blocks count 0 [ 248.888387][T11680] EXT4-fs (loop7): Free/Dirty block details [ 248.888592][T11680] EXT4-fs (loop7): free_blocks=0 [ 248.888637][T11680] EXT4-fs (loop7): dirty_blocks=5 [ 248.888690][T11680] EXT4-fs (loop7): Block reservation details [ 248.888736][T11680] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 249.001386][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.128181][T11691] FAULT_INJECTION: forcing a failure. [ 249.128181][T11691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.128244][T11691] CPU: 1 UID: 0 PID: 11691 Comm: syz.6.1755 Not tainted syzkaller #0 PREEMPT(lazy) [ 249.128275][T11691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.128366][T11691] Call Trace: [ 249.128375][T11691] [ 249.128416][T11691] __dump_stack+0x1d/0x30 [ 249.128449][T11691] dump_stack_lvl+0x95/0xd0 [ 249.128479][T11691] dump_stack+0x15/0x1b [ 249.128507][T11691] should_fail_ex+0x262/0x280 [ 249.128542][T11691] should_fail+0xb/0x20 [ 249.128565][T11691] should_fail_usercopy+0x1a/0x20 [ 249.128649][T11691] _copy_from_user+0x1c/0xb0 [ 249.128758][T11691] vmemdup_user+0x5e/0xd0 [ 249.128904][T11691] path_setxattrat+0x1b3/0x320 [ 249.129033][T11691] __x64_sys_lsetxattr+0x71/0x90 [ 249.129126][T11691] x64_sys_call+0x22c1/0x2550 [ 249.129228][T11691] do_syscall_64+0x112/0x360 [ 249.129422][T11691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.129514][T11691] RIP: 0033:0x7fa42753e159 [ 249.129576][T11691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.129661][T11691] RSP: 002b:00007fa425f97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 249.129803][T11691] RAX: ffffffffffffffda RBX: 00007fa4277c5fa0 RCX: 00007fa42753e159 [ 249.129867][T11691] RDX: 0000200000000680 RSI: 0000200000000280 RDI: 0000200000000140 [ 249.129889][T11691] RBP: 00007fa425f97090 R08: 0000000000000003 R09: 0000000000000000 [ 249.129901][T11691] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 249.129982][T11691] R13: 00007fa4277c6038 R14: 00007fa4277c5fa0 R15: 00007ffd88ac6a68 [ 249.130058][T11691] [ 249.204236][T11698] netlink: 'syz.6.1758': attribute type 3 has an invalid length. [ 249.204257][T11698] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1758'. [ 249.204353][T11698] FAULT_INJECTION: forcing a failure. [ 249.204353][T11698] name failslab, interval 1, probability 0, space 0, times 0 [ 249.204385][T11698] CPU: 0 UID: 0 PID: 11698 Comm: syz.6.1758 Not tainted syzkaller #0 PREEMPT(lazy) [ 249.204416][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.204429][T11698] Call Trace: [ 249.204434][T11698] [ 249.204442][T11698] __dump_stack+0x1d/0x30 [ 249.204550][T11698] dump_stack_lvl+0x95/0xd0 [ 249.204578][T11698] dump_stack+0x15/0x1b [ 249.204602][T11698] should_fail_ex+0x262/0x280 [ 249.204629][T11698] ? u32_change+0x3ce/0x1430 [ 249.204720][T11698] should_failslab+0x8c/0xb0 [ 249.204821][T11698] __kmalloc_noprof+0xd0/0x4d0 [ 249.204866][T11698] ? u32_change+0x3ce/0x1430 [ 249.204905][T11698] u32_change+0x3ce/0x1430 [ 249.204943][T11698] ? memcmp+0x5e/0x90 [ 249.205024][T11698] tc_new_tfilter+0xf87/0x1180 [ 249.205051][T11698] ? __rcu_read_unlock+0x4e/0x70 [ 249.205110][T11698] ? __pfx_tc_new_tfilter+0x10/0x10 [ 249.205146][T11698] rtnetlink_rcv_msg+0x64b/0x720 [ 249.205182][T11698] netlink_rcv_skb+0x11e/0x220 [ 249.205211][T11698] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 249.205315][T11698] rtnetlink_rcv+0x1c/0x30 [ 249.205355][T11698] netlink_unicast+0x5a9/0x680 [ 249.205379][T11698] netlink_sendmsg+0x5be/0x6f0 [ 249.205412][T11698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.205513][T11698] ____sys_sendmsg+0x532/0x580 [ 249.205552][T11698] ___sys_sendmsg+0x195/0x1e0 [ 249.205605][T11698] __sys_sendmmsg+0x185/0x320 [ 249.205671][T11698] __x64_sys_sendmmsg+0x57/0x70 [ 249.205710][T11698] x64_sys_call+0x1fb4/0x2550 [ 249.205777][T11698] do_syscall_64+0x112/0x360 [ 249.205814][T11698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.205890][T11698] RIP: 0033:0x7fa42753e159 [ 249.205910][T11698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.205930][T11698] RSP: 002b:00007fa425f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 249.205998][T11698] RAX: ffffffffffffffda RBX: 00007fa4277c5fa0 RCX: 00007fa42753e159 [ 249.206012][T11698] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 249.206024][T11698] RBP: 00007fa425f97090 R08: 0000000000000000 R09: 0000000000000000 [ 249.206039][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.206054][T11698] R13: 00007fa4277c6038 R14: 00007fa4277c5fa0 R15: 00007ffd88ac6a68 [ 249.206078][T11698] [ 249.242965][T11699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.244608][T11699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.250309][T11699] FAULT_INJECTION: forcing a failure. [ 249.250309][T11699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.250412][T11699] CPU: 1 UID: 0 PID: 11699 Comm: syz.1.1757 Not tainted syzkaller #0 PREEMPT(lazy) [ 249.250690][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.250713][T11699] Call Trace: [ 249.250733][T11699] [ 249.250786][T11699] __dump_stack+0x1d/0x30 [ 249.250881][T11699] dump_stack_lvl+0x95/0xd0 [ 249.250968][T11699] dump_stack+0x15/0x1b [ 249.251173][T11699] should_fail_ex+0x262/0x280 [ 249.251268][T11699] should_fail+0xb/0x20 [ 249.251354][T11699] should_fail_usercopy+0x1a/0x20 [ 249.251606][T11699] _copy_from_iter+0xcc/0xe70 [ 249.251692][T11699] ? skb_put+0x9f/0xf0 [ 249.251812][T11699] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 249.251915][T11699] netlink_sendmsg+0x4a4/0x6f0 [ 249.252083][T11699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.252183][T11699] ____sys_sendmsg+0x532/0x580 [ 249.252317][T11699] ___sys_sendmsg+0x195/0x1e0 [ 249.252479][T11699] __x64_sys_sendmsg+0xd4/0x160 [ 249.252707][T11699] x64_sys_call+0x22ab/0x2550 [ 249.252870][T11699] do_syscall_64+0x112/0x360 [ 249.252992][T11699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.253106][T11699] RIP: 0033:0x7f687506e159 [ 249.253159][T11699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.253232][T11699] RSP: 002b:00007f6873aa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.253346][T11699] RAX: ffffffffffffffda RBX: 00007f68752f6090 RCX: 00007f687506e159 [ 249.253417][T11699] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000006 [ 249.253461][T11699] RBP: 00007f6873aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.253512][T11699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.253565][T11699] R13: 00007f68752f6128 R14: 00007f68752f6090 R15: 00007ffe70c51138 [ 249.253732][T11699] [ 249.264376][T11699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.267610][T11699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.422838][ T29] audit: type=1400 audit(1788210375.767:3114): avc: denied { connect } for pid=11700 comm="syz.6.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.579971][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.944704][T11720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.945281][T11720] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.947804][ T29] audit: type=1400 audit(1788210376.287:3115): avc: denied { write } for pid=11719 comm="syz.7.1761" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.949142][T11720] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz.7.1761: iget: bad i_size value: 2533274857506816 [ 249.951082][T11720] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz.7.1761: iget: bad i_size value: 2533274857506816 [ 249.952669][ T29] audit: type=1400 audit(1788210376.287:3116): avc: denied { write } for pid=11719 comm="syz.7.1761" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.971421][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.008962][T11725] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 250.011033][T11725] EXT4-fs (loop7): orphan cleanup on readonly fs [ 250.013516][T11725] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 250.014383][T11725] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1762: bg 0: block 248: padding at end of block bitmap is not set [ 250.014486][T11725] loop7: lost filesystem error report for type 5 error -117 [ 250.016442][T11725] Quota error (device loop7): write_blk: dquota write failed [ 250.016458][T11725] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 250.016489][T11725] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.1762: Failed to acquire dquot type 1 [ 250.016506][T11725] loop7: lost filesystem error report for type 5 error -28 [ 250.020576][T11725] EXT4-fs (loop7): 1 truncate cleaned up [ 250.025163][T11725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 250.038913][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 250.118839][T11728] EXT4-fs (loop7): 1 truncate cleaned up [ 250.120049][T11728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.123078][T11728] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1763: bg 0: block 465: padding at end of block bitmap is not set [ 250.123704][T11728] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 250.123898][T11728] EXT4-fs (loop7): This should not happen!! Data will be lost [ 250.123898][T11728] [ 250.431907][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.663424][T11615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.725559][ T5692] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.754176][T11750] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.387907][T11775] netlink: 'syz.7.1773': attribute type 10 has an invalid length. [ 251.387959][T11775] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1773'. [ 251.388190][T11775] dummy0: entered promiscuous mode [ 251.392104][T11775] bridge0: port 3(dummy0) entered blocking state [ 251.392167][T11775] bridge0: port 3(dummy0) entered disabled state [ 251.394887][T11775] bridge0: port 3(dummy0) entered blocking state [ 251.394938][T11775] bridge0: port 3(dummy0) entered forwarding state [ 253.770681][T11754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.813239][T11786] set_capacity_and_notify: 4 callbacks suppressed [ 253.813270][T11786] loop8: detected capacity change from 0 to 512 [ 253.919951][T11797] loop6: detected capacity change from 0 to 1024 [ 253.937311][T11797] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 253.937348][T11797] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 253.937477][T11797] EXT4-fs error (device loop6): ext4_get_journal_inode:5927: comm syz.6.1779: inode #1: comm syz.6.1779: iget: illegal inode # [ 253.937510][T11797] loop6: lost filesystem error report for type 5 error -117 [ 253.948612][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 253.948636][ C1] EXT4-fs (loop6): initial error at time 1788210636: ext4_get_journal_inode:5927 [ 253.948667][ C1] EXT4-fs (loop6): last error at time 1788210636: ext4_get_journal_inode:5927 [ 253.959381][T11797] EXT4-fs (loop6): no journal found [ 253.959412][T11797] EXT4-fs (loop6): can't get journal size [ 253.973273][T11797] EXT4-fs (loop6): failed to initialize system zone (-22) [ 253.973362][T11797] EXT4-fs (loop6): mount failed [ 254.069766][T11805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1783'. [ 254.081133][T11809] loop6: detected capacity change from 0 to 2048 [ 254.113921][T11805] netlink: 'syz.1.1783': attribute type 2 has an invalid length. [ 254.167086][T11809] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 254.167177][T11809] FAT-fs (loop6): Filesystem has been set read-only [ 254.184947][T11813] --map-set only usable from mangle table [ 254.203937][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1784'. [ 254.218519][T11809] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.1784'. [ 254.413961][T11815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1785'. [ 254.426209][T11815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.523342][T11820] FAULT_INJECTION: forcing a failure. [ 254.523342][T11820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.523372][T11820] CPU: 1 UID: 0 PID: 11820 Comm: syz.6.1787 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.523396][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.523414][T11820] Call Trace: [ 254.523420][T11820] [ 254.523430][T11820] __dump_stack+0x1d/0x30 [ 254.523459][T11820] dump_stack_lvl+0x95/0xd0 [ 254.523483][T11820] dump_stack+0x15/0x1b [ 254.523500][T11820] should_fail_ex+0x262/0x280 [ 254.523580][T11820] should_fail+0xb/0x20 [ 254.523597][T11820] should_fail_usercopy+0x1a/0x20 [ 254.523630][T11820] _copy_to_user+0x20/0xa0 [ 254.523658][T11820] simple_read_from_buffer+0xb5/0x130 [ 254.523723][T11820] proc_fail_nth_read+0x10e/0x150 [ 254.523890][T11820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.523927][T11820] vfs_read+0x18e/0x7c0 [ 254.523972][T11820] ? __rcu_read_unlock+0x4e/0x70 [ 254.524001][T11820] ? __fget_files+0x184/0x1c0 [ 254.524017][T11820] ? mutex_lock+0x57/0x90 [ 254.524035][T11820] ksys_read+0xdc/0x1a0 [ 254.524135][T11820] __x64_sys_read+0x40/0x50 [ 254.524216][T11820] x64_sys_call+0x2135/0x2550 [ 254.524237][T11820] do_syscall_64+0x112/0x360 [ 254.524296][T11820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.524387][T11820] RIP: 0033:0x7fa4274fe98e [ 254.524400][T11820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.524416][T11820] RSP: 002b:00007fa425f96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.524433][T11820] RAX: ffffffffffffffda RBX: 00007fa425f976c0 RCX: 00007fa4274fe98e [ 254.524519][T11820] RDX: 000000000000000f RSI: 00007fa425f970a0 RDI: 0000000000000003 [ 254.524530][T11820] RBP: 00007fa425f97090 R08: 0000000000000000 R09: 0000000000000000 [ 254.524543][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.524558][T11820] R13: 00007fa4277c6038 R14: 00007fa4277c5fa0 R15: 00007ffd88ac6a68 [ 254.524575][T11820] [ 254.689739][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 254.689762][ T29] audit: type=1400 audit(1788210636.738:3118): avc: denied { accept } for pid=11810 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 254.944218][ T29] audit: type=1400 audit(1788210637.278:3119): avc: denied { write } for pid=11818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.036008][ T29] audit: type=1400 audit(1788210637.368:3120): avc: denied { write } for pid=11839 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.051814][T11841] loop6: detected capacity change from 0 to 512 [ 255.204267][T11841] EXT4-fs (loop6): 1 truncate cleaned up [ 255.205745][T11841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.215016][ T29] audit: type=1400 audit(1788210637.558:3121): avc: denied { write } for pid=11840 comm="syz.6.1801" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.242030][T11841] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1801: bg 0: block 465: padding at end of block bitmap is not set [ 255.242505][T11841] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 255.242556][T11841] EXT4-fs (loop6): This should not happen!! Data will be lost [ 255.242556][T11841] [ 255.341750][ T29] audit: type=1400 audit(1788210637.678:3122): avc: denied { write } for pid=11846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.391349][ T29] audit: type=1400 audit(1788210637.728:3123): avc: denied { write } for pid=11870 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.450881][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.552682][T11882] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1795'. [ 255.560786][T11882] netlink: 'syz.1.1795': attribute type 2 has an invalid length. [ 255.574584][ T29] audit: type=1400 audit(1788210637.908:3124): avc: denied { write } for pid=11873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.619303][ T29] audit: type=1400 audit(1788210637.958:3125): avc: denied { relabelfrom } for pid=11891 comm="syz.1.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 255.619367][ T29] audit: type=1400 audit(1788210637.958:3126): avc: denied { relabelto } for pid=11891 comm="syz.1.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 255.674913][ T29] audit: type=1400 audit(1788210638.008:3127): avc: denied { write } for pid=11893 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.917327][T11905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.917548][T11905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.934118][T11905] PM: suspend entry (deep) [ 255.991292][ T4526] Filesystems sync: 0.057 seconds [ 256.027397][T11905] Freezing user space processes [ 256.032701][T11792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.042010][T11905] Freezing user space processes completed (elapsed 0.014 seconds) [ 256.042130][T11905] OOM killer disabled. [ 256.042138][T11905] Freezing remaining freezable tasks [ 256.044205][T11905] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 256.044332][T11905] printk: Suspending console(s) (use no_console_suspend to debug) [ 256.107881][T11905] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 256.107969][T11905] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 256.108012][T11905] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 256.108040][T11905] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 256.108083][T11905] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 256.108111][T11905] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 256.118031][T11905] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 256.118085][T11905] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 256.118125][T11905] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 256.118172][T11905] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 256.118299][T11905] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 256.118390][T11905] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 256.118416][T11905] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 256.118482][T11905] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 256.118509][T11905] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 256.118534][T11905] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 256.156581][ T4460] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 256.803460][T11905] ACPI: PM: Preparing to enter system sleep state S3 [ 256.803625][T11905] ACPI: PM: Saving platform NVS memory [ 256.803777][T11905] Disabling non-boot CPUs ... [ 256.808515][T11905] smpboot: CPU 1 is now offline [ 256.813488][T11905] ACPI: PM: Low-level resume complete [ 256.813583][T11905] ACPI: PM: Restoring platform NVS memory [ 256.829019][T11905] Enabling non-boot CPUs ... [ 256.829228][T11905] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 256.833652][T11905] CPU1 is up [ 256.833844][T11905] ACPI: PM: Waking up from system sleep state S3 [ 256.869442][ T4424] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 257.024648][T11905] OOM killer enabled. [ 257.024784][T11905] Restarting tasks: Starting [ 257.051940][T11905] Restarting tasks: Done [ 257.052000][T11905] random: crng reseeded on system resumption [ 257.064972][T11905] PM: suspend exit [ 257.198839][T11920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.199084][T11920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.228038][T11920] PM: suspend entry (deep) [ 257.329235][T11938] tipc: Started in network mode [ 257.329434][T11938] tipc: Node identity 4, cluster identity 4711 [ 257.329485][T11938] tipc: Node number set to 4 [ 257.391017][T11942] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1808'. [ 257.401526][ T4539] Filesystems sync: 0.173 seconds [ 257.403831][T11942] netlink: 'syz.7.1808': attribute type 2 has an invalid length. [ 257.431245][T11920] Freezing user space processes [ 257.434306][T11920] Freezing user space processes completed (elapsed 0.003 seconds) [ 257.434341][T11920] OOM killer disabled. [ 257.434349][T11920] Freezing remaining freezable tasks [ 257.437355][T11920] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 257.437472][T11920] printk: Suspending console(s) (use no_console_suspend to debug) [ 257.485209][T11920] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 257.485251][T11920] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 257.495154][T11920] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 257.495330][T11920] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 257.495368][T11920] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 257.495457][T11920] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 257.495561][T11920] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 257.495787][T11920] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 257.495892][T11920] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 257.495929][T11920] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 257.495953][T11920] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 257.495997][T11920] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 257.496093][T11920] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 257.496249][T11920] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 257.496273][T11920] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 257.496354][T11920] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 257.534030][ T4538] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 258.175051][T11920] ACPI: PM: Preparing to enter system sleep state S3 [ 258.175194][T11920] ACPI: PM: Saving platform NVS memory [ 258.175259][T11920] Disabling non-boot CPUs ... [ 258.179821][T11920] smpboot: CPU 1 is now offline [ 258.184825][T11920] ACPI: PM: Low-level resume complete [ 258.184892][T11920] ACPI: PM: Restoring platform NVS memory [ 258.199698][T11920] Enabling non-boot CPUs ... [ 258.199844][T11920] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 258.204430][T11920] CPU1 is up [ 258.204723][T11920] ACPI: PM: Waking up from system sleep state S3 [ 258.231768][ T4498] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 258.379314][T11920] OOM killer enabled. [ 258.379330][T11920] Restarting tasks: Starting [ 258.402139][T11920] Restarting tasks: Done [ 258.402198][T11920] random: crng reseeded on system resumption [ 258.416572][T11920] PM: suspend exit [ 258.696163][T11975] --map-set only usable from mangle table [ 258.769892][T11980] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1819'. [ 258.853146][T11978] loop7: detected capacity change from 0 to 512 [ 258.891874][T11980] netlink: 'syz.6.1819': attribute type 2 has an invalid length. [ 258.916099][T11978] EXT4-fs (loop7): 1 truncate cleaned up [ 258.921531][T11986] loop6: detected capacity change from 0 to 128 [ 258.925053][T11986] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.925387][T11986] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.935385][T11978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.955716][T11978] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.1818: bg 0: block 465: padding at end of block bitmap is not set [ 258.959592][T11978] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 258.959716][T11978] EXT4-fs (loop7): This should not happen!! Data will be lost [ 258.959716][T11978] [ 258.959742][T11978] EXT4-fs (loop7): Total free blocks count 0 [ 258.959790][T11978] EXT4-fs (loop7): Free/Dirty block details [ 258.959801][T11978] EXT4-fs (loop7): free_blocks=0 [ 258.959811][T11978] EXT4-fs (loop7): dirty_blocks=5 [ 258.959823][T11978] EXT4-fs (loop7): Block reservation details [ 258.959833][T11978] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 258.997635][ T4962] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.046980][T11992] FAULT_INJECTION: forcing a failure. [ 259.046980][T11992] name failslab, interval 1, probability 0, space 0, times 0 [ 259.047102][T11992] CPU: 1 UID: 0 PID: 11992 Comm: syz.6.1822 Not tainted syzkaller #0 PREEMPT(lazy) [ 259.047136][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.047153][T11992] Call Trace: [ 259.047161][T11992] [ 259.047171][T11992] __dump_stack+0x1d/0x30 [ 259.047201][T11992] dump_stack_lvl+0x95/0xd0 [ 259.047297][T11992] dump_stack+0x15/0x1b [ 259.047324][T11992] should_fail_ex+0x262/0x280 [ 259.047350][T11992] ? io_submit_one+0xcf/0x1350 [ 259.047389][T11992] should_failslab+0x8c/0xb0 [ 259.047462][T11992] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 259.047493][T11992] ? should_fail_ex+0xdb/0x280 [ 259.047513][T11992] ? io_submit_one+0xcf/0x1350 [ 259.047569][T11992] io_submit_one+0xcf/0x1350 [ 259.047608][T11992] __se_sys_io_submit+0xfb/0x280 [ 259.047669][T11992] __x64_sys_io_submit+0x43/0x50 [ 259.047704][T11992] x64_sys_call+0x221c/0x2550 [ 259.047749][T11992] do_syscall_64+0x112/0x360 [ 259.047779][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.047802][T11992] RIP: 0033:0x7fa42753e159 [ 259.047823][T11992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.047895][T11992] RSP: 002b:00007fa425f97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 259.047921][T11992] RAX: ffffffffffffffda RBX: 00007fa4277c5fa0 RCX: 00007fa42753e159 [ 259.047937][T11992] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 00007fa425f66000 [ 259.047964][T11992] RBP: 00007fa425f97090 R08: 0000000000000000 R09: 0000000000000000 [ 259.047977][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.047990][T11992] R13: 00007fa4277c6038 R14: 00007fa4277c5fa0 R15: 00007ffd88ac6a68 [ 259.048052][T11992] [ 259.130012][T12004] loop5: detected capacity change from 0 to 512 [ 259.256070][T12009] loop6: detected capacity change from 0 to 1024 [ 259.257018][T12009] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 259.261113][T12009] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 259.289245][T12009] loop6: detected capacity change from 0 to 4096 [ 259.349743][T12009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.362946][T12009] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.1827: corrupted inode contents [ 259.363189][T12009] EXT4-fs error (device loop6): ext4_dirty_inode:6731: inode #15: comm syz.6.1827: mark_inode_dirty error [ 259.368272][T12009] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.1827: corrupted inode contents [ 259.369375][T12009] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.1827: mark_inode_dirty error [ 259.370821][T12009] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.1827: corrupted inode contents [ 259.371993][T12009] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.1827: mark_inode_dirty error [ 259.375563][T12009] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.1827: corrupted inode contents [ 259.376644][T12009] EXT4-fs error (device loop6): ext4_truncate:4721: inode #15: comm syz.6.1827: mark_inode_dirty error [ 259.377438][T12009] EXT4-fs error (device loop6) in ext4_setattr:6247: Corrupt filesystem [ 259.384947][T12009] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.1827: corrupted inode contents [ 259.442903][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.050435][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.053459][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 260.053487][ T29] audit: type=1400 audit(1788210642.398:3140): avc: denied { write } for pid=4962 comm="syz-executor" name="298" dev="tmpfs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 260.053589][ T29] audit: type=1400 audit(1788210642.398:3141): avc: denied { remove_name } for pid=4962 comm="syz-executor" name="file1" dev="tmpfs" ino=1649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 260.063621][ T29] audit: type=1400 audit(1788210642.398:3142): avc: denied { write } for pid=4962 comm="syz-executor" name="298" dev="tmpfs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 260.063657][ T29] audit: type=1400 audit(1788210642.398:3143): avc: denied { write } for pid=4962 comm="syz-executor" name="298" dev="tmpfs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 260.063694][ T29] audit: type=1400 audit(1788210642.398:3144): avc: denied { write } for pid=4962 comm="syz-executor" name="298" dev="tmpfs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 260.063734][ T29] audit: type=1400 audit(1788210642.398:3145): avc: denied { write } for pid=4962 comm="syz-executor" name="298" dev="tmpfs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 260.063881][ T29] audit: type=1400 audit(1788210642.398:3146): avc: denied { rmdir } for pid=4962 comm="syz-executor" name="298" dev="tmpfs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 260.471899][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1831'. [ 260.471947][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1831'. [ 261.307509][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.309459][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.314387][T12026] PM: suspend entry (deep) [ 261.386449][ T4485] Filesystems sync: 0.071 seconds [ 261.439136][T12026] Freezing user space processes [ 261.440685][T11970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.444124][T12026] Freezing user space processes completed (elapsed 0.004 seconds) [ 261.444163][T12026] OOM killer disabled. [ 261.444171][T12026] Freezing remaining freezable tasks [ 261.446872][T12026] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 261.447050][T12026] printk: Suspending console(s) (use no_console_suspend to debug) [ 261.489271][T12026] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 261.489318][T12026] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 261.489352][T12026] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 261.499324][T12026] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 261.499913][T12026] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 261.499956][T12026] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 261.500054][T12026] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 261.500081][T12026] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 261.500108][T12026] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 261.500218][T12026] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 261.500489][T12026] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 261.500553][T12026] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 261.500587][T12026] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 261.500688][T12026] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 261.500717][T12026] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 261.500810][T12026] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 261.538882][ T4463] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 262.184112][T12026] ACPI: PM: Preparing to enter system sleep state S3 [ 262.184222][T12026] ACPI: PM: Saving platform NVS memory [ 262.184272][T12026] Disabling non-boot CPUs ... [ 262.188463][T12026] smpboot: CPU 1 is now offline [ 262.193756][T12026] ACPI: PM: Low-level resume complete [ 262.193873][T12026] ACPI: PM: Restoring platform NVS memory [ 262.207738][T12026] Enabling non-boot CPUs ... [ 262.207938][T12026] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 262.211982][T12026] CPU1 is up [ 262.212167][T12026] ACPI: PM: Waking up from system sleep state S3 [ 262.235143][ T8783] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 262.404343][T12026] OOM killer enabled. [ 262.404433][T12026] Restarting tasks: Starting [ 262.422401][T12026] Restarting tasks: Done [ 262.422453][T12026] random: crng reseeded on system resumption [ 262.427818][T12026] PM: suspend exit [ 262.549175][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.549425][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.568500][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.568638][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.712922][T12054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.713014][T12054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.722860][T12054] PM: suspend entry (deep) [ 262.832691][ T8015] Filesystems sync: 0.109 seconds [ 262.877079][T12057] loop7: detected capacity change from 0 to 512 [ 262.918533][T12054] Freezing user space processes [ 262.920952][T12057] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.925715][T12057] EXT4-fs (loop7): orphan cleanup on readonly fs [ 262.927457][T12057] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4223: comm syz.7.1839: Allocating blocks 41-42 which overlap fs metadata [ 262.927507][T12057] loop7: lost filesystem error report for type 5 error -117 [ 262.929887][T12057] EXT4-fs (loop7): Remounting filesystem read-only [ 262.929934][T12057] Quota error (device loop7): write_blk: dquota write failed [ 262.930005][T12057] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 262.930268][T12057] EXT4-fs (loop7): 1 truncate cleaned up [ 262.932926][T12057] EXT4-fs (loop7): pa ffff88810a588380: logic 1, phys. 41, len 23 [ 262.934025][T12057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.937751][T12054] Freezing user space processes completed (elapsed 0.019 seconds) [ 262.937765][T12054] OOM killer disabled. [ 262.937771][T12054] Freezing remaining freezable tasks [ 262.939345][T12054] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 262.939508][T12054] printk: Suspending console(s) (use no_console_suspend to debug) [ 262.995238][T12054] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 262.995283][T12054] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 262.995447][T12054] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 262.995473][T12054] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 262.995499][T12054] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 262.995586][T12054] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 262.996035][T12054] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 262.996064][T12054] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 262.996227][T12054] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 262.996255][T12054] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 262.996347][T12054] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 262.996465][T12054] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 262.996542][T12054] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 262.996588][T12054] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 262.996625][T12054] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 262.996801][T12054] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 263.034078][ T4427] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 263.684996][T12054] ACPI: PM: Preparing to enter system sleep state S3 [ 263.685172][T12054] ACPI: PM: Saving platform NVS memory [ 263.685224][T12054] Disabling non-boot CPUs ... [ 263.689353][T12054] smpboot: CPU 1 is now offline [ 263.693794][T12054] ACPI: PM: Low-level resume complete [ 263.693865][T12054] ACPI: PM: Restoring platform NVS memory [ 263.705546][T12054] Enabling non-boot CPUs ... [ 263.705684][T12054] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 263.710261][T12054] CPU1 is up [ 263.710517][T12054] ACPI: PM: Waking up from system sleep state S3 [ 263.743943][ T4487] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 263.898168][T12054] OOM killer enabled. [ 263.898185][T12054] Restarting tasks: Starting [ 263.906019][T12054] Restarting tasks: Done [ 263.906178][T12054] random: crng reseeded on system resumption [ 263.912055][T12054] PM: suspend exit [ 263.975183][T12066] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 264.077777][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.733313][T12102] loop6: detected capacity change from 0 to 512 [ 264.734961][T12102] EXT4-fs (loop6): invalid #clusters per group: 95 [ 264.945111][T12110] loop6: detected capacity change from 0 to 512 [ 264.952461][T12110] EXT4-fs: Ignoring removed orlov option [ 264.979043][T12110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.060361][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.693287][T12136] loop6: detected capacity change from 0 to 512 [ 265.708772][T12136] EXT4-fs (loop6): 1 truncate cleaned up [ 265.711881][T12136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.715833][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 265.715861][ T29] audit: type=1400 audit(1788210648.057:3150): avc: denied { write } for pid=12135 comm="syz.6.1861" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.287460][T12138] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 267.218808][T12080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.269220][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.279986][T12149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.280183][T12149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.294096][T12149] PM: suspend entry (deep) [ 267.301965][T12156] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1865'. [ 267.325219][T12159] loop6: detected capacity change from 0 to 512 [ 267.331295][ T29] audit: type=1400 audit(1788210649.677:3151): avc: denied { append } for pid=12161 comm="syz.7.1867" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 267.358129][T12156] netlink: 'syz.8.1865': attribute type 2 has an invalid length. [ 267.386262][T12159] EXT4-fs (loop6): 1 truncate cleaned up [ 267.388495][T12159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.393999][T12159] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1864: bg 0: block 465: padding at end of block bitmap is not set [ 267.394942][T12159] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 267.395024][T12159] EXT4-fs (loop6): This should not happen!! Data will be lost [ 267.395024][T12159] [ 267.402122][ T29] audit: type=1400 audit(1788210649.737:3152): avc: denied { write } for pid=12157 comm="syz.6.1864" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.430056][ T4425] Filesystems sync: 0.135 seconds [ 267.508059][T12149] Freezing user space processes [ 267.509237][T12142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.793870][T12149] Freezing user space processes completed (elapsed 0.285 seconds) [ 267.793915][T12149] OOM killer disabled. [ 267.793923][T12149] Freezing remaining freezable tasks [ 267.796419][T12149] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 267.796542][T12149] printk: Suspending console(s) (use no_console_suspend to debug) [ 267.837905][T12149] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 267.838035][T12149] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 267.838281][T12149] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 267.838314][T12149] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 267.849871][T12149] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 267.849964][T12149] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 267.850070][T12149] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 267.850187][T12149] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 267.850278][T12149] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 267.850319][T12149] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 267.850664][T12149] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 267.850785][T12149] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 267.850814][T12149] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 267.850910][T12149] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 267.850939][T12149] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 267.851039][T12149] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 267.887558][ T4412] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 268.527221][T12149] ACPI: PM: Preparing to enter system sleep state S3 [ 268.527512][T12149] ACPI: PM: Saving platform NVS memory [ 268.527566][T12149] Disabling non-boot CPUs ... [ 268.532078][T12149] smpboot: CPU 1 is now offline [ 268.538759][T12149] ACPI: PM: Low-level resume complete [ 268.538838][T12149] ACPI: PM: Restoring platform NVS memory [ 268.551829][T12149] Enabling non-boot CPUs ... [ 268.552007][T12149] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 268.556224][T12149] CPU1 is up [ 268.556417][T12149] ACPI: PM: Waking up from system sleep state S3 [ 268.578388][ T4425] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 268.723597][T12149] OOM killer enabled. [ 268.723617][T12149] Restarting tasks: Starting [ 268.754569][T12149] Restarting tasks: Done [ 268.754661][T12149] random: crng reseeded on system resumption [ 268.758088][T12149] PM: suspend exit [ 268.816216][T12179] FAULT_INJECTION: forcing a failure. [ 268.816216][T12179] name failslab, interval 1, probability 0, space 0, times 0 [ 268.816262][T12179] CPU: 1 UID: 0 PID: 12179 Comm: syz.8.1871 Not tainted syzkaller #0 PREEMPT(lazy) [ 268.816287][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.816300][T12179] Call Trace: [ 268.816315][T12179] [ 268.816325][T12179] __dump_stack+0x1d/0x30 [ 268.816358][T12179] dump_stack_lvl+0x95/0xd0 [ 268.816387][T12179] dump_stack+0x15/0x1b [ 268.816460][T12179] should_fail_ex+0x262/0x280 [ 268.816493][T12179] ? nf_tables_newrule+0xd68/0x16d0 [ 268.816533][T12179] should_failslab+0x8c/0xb0 [ 268.816644][T12179] __kmalloc_noprof+0xd0/0x4d0 [ 268.816677][T12179] ? nf_tables_newrule+0xd68/0x16d0 [ 268.816783][T12179] nf_tables_newrule+0xd68/0x16d0 [ 268.816964][T12179] nfnetlink_rcv+0xbf7/0x1740 [ 268.817128][T12179] netlink_unicast+0x5a9/0x680 [ 268.817214][T12179] netlink_sendmsg+0x5be/0x6f0 [ 268.817324][T12179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.817485][T12179] ____sys_sendmsg+0x532/0x580 [ 268.817700][T12179] ___sys_sendmsg+0x195/0x1e0 [ 268.817885][T12179] __x64_sys_sendmsg+0xd4/0x160 [ 268.818004][T12179] x64_sys_call+0x22ab/0x2550 [ 268.818128][T12179] do_syscall_64+0x112/0x360 [ 268.818221][T12179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.818367][T12179] RIP: 0033:0x7f981bb7e159 [ 268.818414][T12179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.818491][T12179] RSP: 002b:00007f981a5d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.818559][T12179] RAX: ffffffffffffffda RBX: 00007f981be05fa0 RCX: 00007f981bb7e159 [ 268.818603][T12179] RDX: 0000000004000800 RSI: 0000200000000680 RDI: 0000000000000003 [ 268.818640][T12179] RBP: 00007f981a5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 268.818752][T12179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.818797][T12179] R13: 00007f981be06038 R14: 00007f981be05fa0 R15: 00007ffef6c38be8 [ 268.818863][T12179] [ 268.857424][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.927502][T12193] loop6: detected capacity change from 0 to 512 [ 268.960025][T12186] sctp: [Deprecated]: syz.5.1870 (pid 12186) Use of int in max_burst socket option deprecated. [ 268.960025][T12186] Use struct sctp_assoc_value instead [ 268.960115][T12180] sctp: [Deprecated]: syz.5.1870 (pid 12180) Use of int in max_burst socket option deprecated. [ 268.960115][T12180] Use struct sctp_assoc_value instead [ 269.685663][T12216] loop5: detected capacity change from 0 to 512 [ 269.699607][T12216] EXT4-fs (loop5): 1 truncate cleaned up [ 269.701377][T12216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.705741][ T29] audit: type=1400 audit(1788210652.054:3153): avc: denied { write } for pid=12215 comm="syz.5.1878" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.709680][T12216] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1878: bg 0: block 465: padding at end of block bitmap is not set [ 269.710426][T12216] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 269.710551][T12216] EXT4-fs (loop5): This should not happen!! Data will be lost [ 269.710551][T12216] [ 269.793129][T12221] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1879'. [ 269.795538][T12221] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1879'. [ 269.824280][T12221] netlink: 'syz.6.1879': attribute type 2 has an invalid length. [ 270.340074][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.340175][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.348643][T12235] PM: suspend entry (deep) [ 270.367455][ T6002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.411685][ T4457] Filesystems sync: 0.062 seconds [ 270.433461][T12235] Freezing user space processes [ 270.434711][T12182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.451217][T12235] Freezing user space processes completed (elapsed 0.017 seconds) [ 270.451279][T12235] OOM killer disabled. [ 270.451289][T12235] Freezing remaining freezable tasks [ 270.455776][T12235] Freezing remaining freezable tasks completed (elapsed 0.004 seconds) [ 270.455862][T12235] printk: Suspending console(s) (use no_console_suspend to debug) [ 270.504493][T12235] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 270.504523][T12235] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 270.504550][T12235] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 270.504658][T12235] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 270.504745][T12235] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 270.504975][T12235] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 270.505011][T12235] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 270.513681][T12235] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 270.513781][T12235] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 270.513814][T12235] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 270.514062][T12235] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 270.514323][T12235] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 270.514373][T12235] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 270.514446][T12235] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 270.514472][T12235] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 270.514539][T12235] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 270.554247][ T4540] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 271.193942][T12235] ACPI: PM: Preparing to enter system sleep state S3 [ 271.194127][T12235] ACPI: PM: Saving platform NVS memory [ 271.194179][T12235] Disabling non-boot CPUs ... [ 271.198334][T12235] smpboot: CPU 1 is now offline [ 271.204609][T12235] ACPI: PM: Low-level resume complete [ 271.204675][T12235] ACPI: PM: Restoring platform NVS memory [ 271.217703][T12235] Enabling non-boot CPUs ... [ 271.218064][T12235] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 271.222726][T12235] CPU1 is up [ 271.222924][T12235] ACPI: PM: Waking up from system sleep state S3 [ 271.257934][ T74] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 271.418713][T12235] OOM killer enabled. [ 271.418731][T12235] Restarting tasks: Starting [ 271.426948][T12235] Restarting tasks: Done [ 271.427008][T12235] random: crng reseeded on system resumption [ 271.428661][T12235] PM: suspend exit [ 271.508483][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.508761][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.526971][T12253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.527130][T12253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.529481][T12251] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 271.529551][T12251] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.529661][T12251] vhci_hcd vhci_hcd.0: Device attached [ 271.531918][T12257] vhci_hcd: cannot find the pending unlink 4096 [ 271.536031][T12250] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 271.536178][T12250] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.544963][T12250] vhci_hcd vhci_hcd.0: Device attached [ 271.578124][ T29] audit: type=1400 audit(1788210653.890:3154): avc: denied { ioctl } for pid=12248 comm="syz.5.1887" path="socket:[32426]" dev="sockfs" ino=32426 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.587420][T12246] PM: suspend entry (deep) [ 271.601960][T12253] PM: suspend entry (deep) [ 271.601999][T12253] PM: suspend exit [ 271.643236][ T29] audit: type=1400 audit(1788210653.990:3155): avc: denied { ioctl } for pid=12247 comm="syz.1.1889" path="socket:[32405]" dev="sockfs" ino=32405 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.707956][ T3361] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 271.729229][T12259] vhci_hcd: connection closed [ 271.729453][ T4528] vhci_hcd vhci_hcd.1: stop threads [ 271.729474][ T4528] vhci_hcd vhci_hcd.1: release socket [ 271.729516][ T4528] vhci_hcd vhci_hcd.1: disconnect device [ 271.729550][T12257] vhci_hcd: connection closed [ 271.741061][ T4528] vhci_hcd vhci_hcd.1: stop threads [ 271.741083][ T4528] vhci_hcd vhci_hcd.1: release socket [ 271.741106][ T4528] vhci_hcd vhci_hcd.1: disconnect device [ 271.744054][T12268] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1890'. [ 271.744669][T12268] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1890'. [ 271.758289][T12268] netlink: 'syz.5.1890': attribute type 2 has an invalid length. [ 271.780091][ T3361] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 271.780170][ T3361] usb 3-1: enqueue for inactive port 0 [ 271.780236][ T3361] usb 3-1: enqueue for inactive port 0 [ 271.780317][ T3361] usb 3-1: enqueue for inactive port 0 [ 271.817259][ T4422] Filesystems sync: 0.229 seconds [ 271.832533][T12270] loop5: detected capacity change from 0 to 512 [ 271.848689][ T3361] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 271.858676][T12246] Freezing user space processes [ 271.864427][T12246] Freezing user space processes completed (elapsed 0.005 seconds) [ 271.864464][T12246] OOM killer disabled. [ 271.864471][T12246] Freezing remaining freezable tasks [ 272.884419][T12246] Freezing remaining freezable tasks completed (elapsed 1.019 seconds) [ 272.884492][T12246] printk: Suspending console(s) (use no_console_suspend to debug) [ 272.959753][T12246] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 272.959803][T12246] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 272.959906][T12246] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 272.959946][T12246] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 272.960523][T12246] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 272.960680][T12246] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 272.960746][T12246] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 272.960791][T12246] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 272.960856][T12246] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 272.960909][T12246] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 272.960969][T12246] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 272.961125][T12246] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 272.961155][T12246] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 272.961196][T12246] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 272.961259][T12246] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 272.961350][T12246] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 272.998020][ T4422] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 273.637123][T12246] ACPI: PM: Preparing to enter system sleep state S3 [ 273.637296][T12246] ACPI: PM: Saving platform NVS memory [ 273.637379][T12246] Disabling non-boot CPUs ... [ 273.641994][T12246] smpboot: CPU 1 is now offline [ 273.648228][T12246] ACPI: PM: Low-level resume complete [ 273.648294][T12246] ACPI: PM: Restoring platform NVS memory [ 273.661543][T12246] Enabling non-boot CPUs ... [ 273.661743][T12246] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 273.666012][T12246] CPU1 is up [ 273.666200][T12246] ACPI: PM: Waking up from system sleep state S3 [ 273.713101][ T4433] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 273.873850][T12246] OOM killer enabled. [ 273.873866][T12246] Restarting tasks: Starting [ 273.888936][T12246] Restarting tasks: Done [ 273.888988][T12246] random: crng reseeded on system resumption [ 273.892907][T12246] PM: suspend exit [ 273.947580][T12275] Cannot find del_set index 2 as target [ 273.999745][T12275] loop6: detected capacity change from 0 to 1024 [ 274.025589][T12275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.030056][ T29] audit: type=1400 audit(1788210656.374:3156): avc: denied { write } for pid=12274 comm="syz.6.1892" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.030065][T12275] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.1892: missing EA_INODE flag [ 274.030098][ T29] audit: type=1400 audit(1788210656.374:3157): avc: denied { link } for pid=12274 comm="syz.6.1892" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 274.040209][T12275] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1892: error while reading EA inode 11 err=-117 [ 274.042248][T12275] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 274.253756][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.257330][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.279010][T12290] PM: suspend entry (deep) [ 274.362440][ T2199] Filesystems sync: 0.082 seconds [ 274.405541][T12290] Freezing user space processes [ 274.614951][T12290] Freezing user space processes completed (elapsed 0.209 seconds) [ 274.615087][T12290] OOM killer disabled. [ 274.615095][T12290] Freezing remaining freezable tasks [ 274.617604][T12290] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 274.617766][T12290] printk: Suspending console(s) (use no_console_suspend to debug) [ 274.664010][T12290] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 274.664086][T12290] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 274.664413][T12290] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 274.675220][T12290] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 274.675274][T12290] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 274.675382][T12290] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 274.675411][T12290] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 274.675461][T12290] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 274.675489][T12290] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 274.675591][T12290] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 274.675699][T12290] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 274.675788][T12290] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 274.675816][T12290] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 274.675903][T12290] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 274.675931][T12290] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 274.675997][T12290] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 274.714349][ T6162] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 275.366641][T12290] ACPI: PM: Preparing to enter system sleep state S3 [ 275.366806][T12290] ACPI: PM: Saving platform NVS memory [ 275.366865][T12290] Disabling non-boot CPUs ... [ 275.371293][T12290] smpboot: CPU 1 is now offline [ 275.378184][T12290] ACPI: PM: Low-level resume complete [ 275.378249][T12290] ACPI: PM: Restoring platform NVS memory [ 275.391492][T12290] Enabling non-boot CPUs ... [ 275.391655][T12290] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 275.396206][T12290] CPU1 is up [ 275.396392][T12290] ACPI: PM: Waking up from system sleep state S3 [ 275.398083][ T4513] ================================================================== [ 275.398122][ T4513] BUG: KCSAN: data-race in acpi_ut_status_exit / acpi_ut_track_stack_ptr [ 275.398164][ T4513] [ 275.398172][ T4513] read to 0xffffffff8961d8c8 of 4 bytes by task 4515 on cpu 1: [ 275.398189][ T4513] acpi_ut_track_stack_ptr+0x5f/0xd0 [ 275.398212][ T4513] acpi_get_handle+0x40/0x180 [ 275.398230][ T4513] acpi_has_method+0x46/0x80 [ 275.398264][ T4513] acpi_pci_set_power_state+0x5d/0x190 [ 275.398305][ T4513] pci_power_up+0x40/0x3b0 [ 275.398330][ T4513] pci_pm_power_up_and_verify_state+0x29/0x130 [ 275.398373][ T4513] pci_pm_resume_noirq+0xcb/0x320 [ 275.398400][ T4513] dpm_run_callback+0x53/0x2f0 [ 275.398428][ T4513] device_resume_noirq+0x851/0x880 [ 275.398458][ T4513] async_resume_noirq+0x2c/0x40 [ 275.398486][ T4513] async_run_entry_fn+0x52/0x180 [ 275.398516][ T4513] process_scheduled_works+0x56a/0xa50 [ 275.398546][ T4513] worker_thread+0x569/0x750 [ 275.398572][ T4513] kthread+0x223/0x270 [ 275.398588][ T4513] ret_from_fork+0x146/0x330 [ 275.398613][ T4513] ret_from_fork_asm+0x1a/0x30 [ 275.398636][ T4513] [ 275.398641][ T4513] write to 0xffffffff8961d8c8 of 4 bytes by task 4513 on cpu 0: [ 275.398655][ T4513] acpi_ut_status_exit+0xfe/0x120 [ 275.398677][ T4513] acpi_ns_get_node_unlocked+0x2a4/0x2d0 [ 275.398707][ T4513] acpi_ns_get_node+0x76/0xc0 [ 275.398736][ T4513] acpi_get_handle+0xfd/0x180 [ 275.398752][ T4513] acpi_has_method+0x46/0x80 [ 275.398778][ T4513] acpi_pci_set_power_state+0x5d/0x190 [ 275.398808][ T4513] pci_power_up+0x40/0x3b0 [ 275.398826][ T4513] pci_pm_power_up_and_verify_state+0x29/0x130 [ 275.398853][ T4513] pci_pm_resume_noirq+0xcb/0x320 [ 275.398880][ T4513] dpm_run_callback+0x53/0x2f0 [ 275.398908][ T4513] device_resume_noirq+0x851/0x880 [ 275.398941][ T4513] async_resume_noirq+0x2c/0x40 [ 275.398968][ T4513] async_run_entry_fn+0x52/0x180 [ 275.398998][ T4513] process_scheduled_works+0x56a/0xa50 [ 275.399024][ T4513] worker_thread+0x569/0x750 [ 275.399051][ T4513] kthread+0x223/0x270 [ 275.399067][ T4513] ret_from_fork+0x146/0x330 [ 275.399092][ T4513] ret_from_fork_asm+0x1a/0x30 [ 275.399115][ T4513] [ 275.399118][ T4513] value changed: 0x00000003 -> 0x00000004 [ 275.399127][ T4513] [ 275.399131][ T4513] Reported by Kernel Concurrency Sanitizer on: [ 275.399140][ T4513] CPU: 0 UID: 0 PID: 4513 Comm: kworker/u8:114 Not tainted syzkaller #0 PREEMPT(lazy) [ 275.399163][ T4513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.399176][ T4513] Workqueue: async async_run_entry_fn [ 275.399206][ T4513] ================================================================== [ 275.450821][ T4410] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 275.640328][T12290] OOM killer enabled. [ 275.640348][T12290] Restarting tasks: Starting [ 275.660906][T12290] Restarting tasks: Done [ 275.660958][T12290] random: crng reseeded on system resumption [ 275.665038][T12290] PM: suspend exit [ 275.692696][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.