last executing test programs: 2m0.422894404s ago: executing program 32 (id=173): r0 = socket(0x1d, 0x2, 0x6) close_range(r0, r0, 0x2) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xe0476654) r1 = fsopen(&(0x7f0000000300)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000340)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='\x00', 0x0, 0x0) close(0xffffffffffffffff) unshare(0x60040000) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x10000000) r2 = socket(0x1a, 0x80000, 0x403) write(r2, &(0x7f00000004c0), 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) listen(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) close_range(r1, r2, 0x2) fadvise64(r4, 0x401, 0xffffffff, 0x3) shutdown(r3, 0x1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x18) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0xfffffffffffffe9e}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x42) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @timestamp, @sack_perm, @window={0x3, 0x7, 0xfffc}, @timestamp, @mss={0x2, 0x7}, @timestamp, @sack_perm], 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvlan0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x3, 0x6}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000169000/0x11000)=nil, 0x11000, 0x0, 0x20010, r6, 0x0) 1m38.7886623s ago: executing program 33 (id=382): add_key$keyring(0x0, &(0x7f0000001200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(0x0, 0xfe7c07a8874f64cc) r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7fe, 0x0, 0x1, 0xf}, 0x20) fgetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '{.\xae)#{^\'*\x00'}, &(0x7f0000000100)=""/55, 0x37) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000240)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) unshare(0x2040400) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x58}}, 0x0) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x8002, &(0x7f0000000080)={[{@block_validity}, {@data_ordered}, {@nojournal_checksum}, {@mb_optimize_scan}, {@test_dummy_encryption_v1}]}, 0xfc, 0x4de, &(0x7f0000001580)="$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") pipe2$9p(&(0x7f0000000c80), 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000cc0)='.\x00', 0x0, &(0x7f0000000d00)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', 0x101c0ca, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x1, 0x2d8, &(0x7f0000001240)="$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") syz_open_dev$usbfs(0x0, 0x20000007c, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001540)='mountinfo\x00') lseek(r4, 0x10001, 0x0) 1m19.067108299s ago: executing program 34 (id=612): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000010480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d1f05000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r0], 0x40c}}, 0x0) 54.261111852s ago: executing program 6 (id=949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3e, 0x2, 0xfffb, 0x400, 0x4}, {0x6, 0x1, 0x9, 0x3, 0x6}, 0x2, 0x7fff, 0x3ab}}, @TCA_TBF_RATE64={0xc, 0x4, 0xdddb96c4de27568a}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', r3, 0x40, 0x0, 0x9, 0x80, {{0x45, 0x4, 0x2, 0x0, 0x114, 0x65, 0x0, 0x6, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x35}, {[@lsrr={0x83, 0x2b, 0x55, [@empty, @loopback, @rand_addr=0x64010102, @multicast1, @remote, @multicast1, @rand_addr=0x64010102, @loopback, @multicast2, @local]}, @generic={0x88, 0x10, "f47c97f4a14959dc2c2fd3cfc9dc"}, @lsrr={0x83, 0x1f, 0x65, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xd7, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1]}, @ssrr={0x89, 0x27, 0x76, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @rand_addr=0x64010102, @local, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x2c, 0x36, 0x1, 0xd, [{@rand_addr=0x64010100, 0x80}, {@loopback, 0x4}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x4}, {@empty, 0x4}]}, @timestamp_prespec={0x44, 0x2c, 0xa6, 0x3, 0x0, [{@rand_addr=0x64010100, 0xfffff000}, {@multicast1, 0xffff}, {@local}, {@broadcast, 0x4}, {@remote, 0x10000}]}, @generic={0x7, 0xf, "4b1949b9b1f175114aa35ff811"}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 51.547236338s ago: executing program 6 (id=953): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x1, &(0x7f00000001c0)=@raw=[@generic={0x95}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.42212133s ago: executing program 6 (id=954): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44000000100001042abd7000feffffff00000000", @ANYRES32=r1, @ANYBLOB="00000100ca0107001c0037800b00010067726574617000000c000280080000400000000005002700fc"], 0x44}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 51.380651621s ago: executing program 6 (id=956): add_key$keyring(0x0, &(0x7f0000001200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(0x0, 0xfe7c07a8874f64cc) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000840)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000900)={'veth1_vlan\x00', 0x200}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @random="0242ac110002"}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x50}}, 0x0) r7 = perf_event_open(&(0x7f0000000b40)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x0, 0x0, r2, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r2) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x200000, &(0x7f0000000440)=ANY=[@ANYRES8=r8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000480)="$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") r9 = socket$inet6(0xa, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r10, &(0x7f00000001c0)='n', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000080)=0x1, 0x23) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 50.582677661s ago: executing program 6 (id=967): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0xf}, 0x80, 0x1224, 0xffffffff, 0x8, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./myproc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r2 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x80000000, 0x2, 0x0, 0x0, 0x6a0a65d351a03541, 0x7}, 0x9c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000003c0)={0x8, 'pimreg\x00', {'hsr0\x00'}, 0x7bf}) r3 = creat(&(0x7f0000000400)='./myproc/interrupts\x00', 0x20) lseek(r3, 0x2000000008, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) memfd_create(0x0, 0x2) syz_emit_ethernet(0x52, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000000000000000600ffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000024590e7d361bf48a5db270f156fd000451000000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a00)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1d, 0x0, 0x4, 0x7fff, 0x800, 0x6795}, {0xa, 0x2, 0x7ff, 0x2008, 0x40, 0xffffff81}, 0x3, 0xd6d2, 0xd11}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000b80)={0x3ffffffffffffe96, &(0x7f0000000bc0)=[{0x4000, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x72, 0x0, 0x7fff0001}]}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@empty, 0x4e20, 0x9, 0x4e21, 0x9e, 0xa, 0x20, 0x0, 0x29, r5}, {0x2, 0x5, 0xd, 0x100000001, 0xfffffffffffff001, 0x7fffffffffffffff, 0x7, 0x100000000}, {0xfffffffffffffff9, 0x0, 0xffffffffffffffff, 0x6}, 0xfffffffe, 0x6e6bb6, 0x2, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x3, 0x2, 0x2, 0x3, 0x4, 0x7}}, 0xe8) rt_sigpending(0x0, 0xfffffffffffffcc9) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1ff) mount(0x0, 0x0, 0x0, 0x40000, 0x0) 49.900595857s ago: executing program 6 (id=974): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000004c0)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000540)="09000000e7001400a888d97bfbf788a83baa88a8000088a800a888a800990000", 0x20, 0x4800, &(0x7f0000000580)={0x11, 0x0, r1, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 49.831793079s ago: executing program 35 (id=974): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000004c0)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000540)="09000000e7001400a888d97bfbf788a83baa88a8000088a800a888a800990000", 0x20, 0x4800, &(0x7f0000000580)={0x11, 0x0, r1, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 46.150910939s ago: executing program 7 (id=1020): fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000280)='./bus\x00', 0x141b42, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xd132}) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="9601"], 0x6e8a) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000000400)=0xb) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0x1000, 0x800000000000000) splice(r1, 0x0, r7, 0x0, 0x80, 0x8) write$tun(r2, &(0x7f0000000300)=ANY=[], 0x107c) syz_mount_image$msdos(&(0x7f00000114c0), &(0x7f0000011500)='./file0\x00', 0x10000, &(0x7f0000000000)={[{@nodots}, {@dots}, {@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x30}}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@dots}, {@fat=@uid={'uid', 0x3d, r0}}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@nocase}, {@fat=@gid}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x200000000000}}, {@nodots}, {@nodots}, {@nodots}, {@fat=@showexec}], [{@dont_measure}, {@measure}, {@appraise_type}, {@subj_type}, {@smackfsroot={'smackfsroot', 0x3d, 'uid'}}, {@uid_eq={'uid', 0x3d, r0}}, {@obj_user}, {@smackfshat={'smackfshat', 0x3d, 'quiet'}}, {@obj_user={'obj_user', 0x3d, 'nfs=stale_rw'}}, {@obj_role={'obj_role', 0x3d, 'gid'}}]}, 0x1, 0x1f7, &(0x7f0000011700)="$eJzs3c9qE0EYAPAvMc0f8dCbIAgrHvRU1CeoSAUxIFRy0FtBT+bUXlIv7WP4Cr6XDyA95SIj6e520zaNIZBdrb/fJV/mmy8zs5tscslsityP+9+i329Fezd2Y9qK7WhH6TQAgNtkmlL8TLmm5wIA1GOF7/9fNU8JANiw9x8+vn05HO7tZ1k/4ux0MpqMzh87ef71m+Hes+zcdlV1NpmM7lzkn2dXfzvM8ltxt8i/yOuzi3Q3IkbdePo4z89yr94Ns8v1vfi04bUDAAAAAAAAAAAAAAAAAAAAAEBTHkZWWri/z87O1fygyOfP5vYH6lyu78SDsqXaHiid1LEoAAAAAAAAAAAAAAAAAAAA+MccHX/9cjAefz6sgl5EzLd0FvS5OWgVL7xS5+aDdqxXPiiWucagreIQbXaBg8Und5UgOn/L2Vk3yGoYa7D08KY0CxZ/CsptMW4s70bE8tGf7K87+WlKafz90eHRcaSDZW/+6hrRq/WKBAAAAAAAAAAAAAAAAAAA/6+5f31f029iQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQgOr+/7PgesvS4CQi7sUfO5djbUW/0bUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe/0OAAD//3y+IV8=") 45.617632992s ago: executing program 7 (id=1029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf, 0xa}, {0xd, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 44.967332377s ago: executing program 7 (id=1033): socket$inet6(0xa, 0x6, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x10518, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0xffff, 0x0, 0x6845, 0x1004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x4008834) openat$incfs(0xffffffffffffffff, 0x0, 0x40000, 0x0) creat(&(0x7f0000000480)='./file0\x00', 0x0) r2 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) creat(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) r6 = socket(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000500)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x9, 0x1c, 0x67, 0x0, 0xfc, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x15, 0x4, 0x0, @private=0xa010101}}}}}, 0x0) sendto$packet(r6, &(0x7f0000000540)="01154e00010000112233445588fbca01000116", 0x13, 0x44011, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) lseek(r4, 0x1, 0x3) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x60, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54109, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'caif0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 44.656411075s ago: executing program 7 (id=1038): syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x21081e, &(0x7f0000000a00)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000280)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000046680d65c0", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x8) r2 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x6) syz_clone(0x4208000, 0x0, 0xfffffecc, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f000001a1c0)=""/102400, 0x19000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, 0x0, 0x0) inotify_init1(0x80000) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f000001a100)={0x81, 0xffffffff, 0x20000}, 0x10) write(r2, &(0x7f000001a140)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r2, &(0x7f000001a180)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') writev(r6, &(0x7f000001a200), 0x0) syz_clone(0x8280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000f40)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f80)={0x8, 0x0, 0x1002, 0x4000000005, 0x2, 0xa5, 0x5, 0x5, 0x4}) 44.43917703s ago: executing program 7 (id=1040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40884}, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000140), 0x4) bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000300), 0x204, 0x2) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000780)=""/248, &(0x7f0000000880)=0xf8) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000c80)={0x284, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd2}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x201}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x4, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd5c}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe83}]}, @TIPC_NLA_NODE={0x1b4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xc4, 0x3, "2a5bb3e489438301feddb1547cc648a178a8f8029c2a61f371c4e330437c9beff1b9d73108679bfe7aa15cfdaa7e5b6056bc450c032c0eba76627ed077b5dc9365089b1762aebd11a637b1e8c9b221e17f7831ee16a0642a48f9133dde5ea2b16ab56f859a352bd029958499fa82728a42d75a8e926e4adbef40d770d18634208991f2d0c60039c3b2b363dd6ea6d426ea3cf7000fe4b2c34e69bc7c390e7d63e33753d9735927a3d696ea0eef5f752b7d4674ebd780e45fa1cfecd0f169d583"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0xfffffffffffffe37, 0x4, {'gcm(aes)\x00', 0x20, "00c8e74f8a39a7e65a391ff97ea4621630862adf148be977df57cf96480a351e"}}, @TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "de63ca0ed54ccc870b3368a0d9341f026002b25d4baf4c7277a76c2b6a354607edee"}}, @TIPC_NLA_NODE_ADDR={0x0, 0x1, 0xb1b}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4c801}, 0x4040040) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000900)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r6, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) sendmsg$key(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="02130800020000002abd7000feefdf25"], 0x10}}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0) 43.840460925s ago: executing program 7 (id=1047): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x4000001) 43.789897976s ago: executing program 36 (id=1047): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x4000001) 24.172532103s ago: executing program 3 (id=1291): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) write(0xffffffffffffffff, &(0x7f00000000c0)='10 1 1\x00', 0x7) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000000)="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", 0xfc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x4000890) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000220)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0x20400, 0x20400}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000300)="38000000240001060100000000000000000000000200000000000100ffffffff0000000008000100657473000c0002800500010004000000", 0x38) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r7, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r7, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e61, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000880}, 0x40) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000280)={{0x3, 0x3, 0x6, 0x0, 0x2}, 0x5, 0x3f8}) r9 = dup(r8) open$dir(&(0x7f00000001c0)='./sys/bus/netdevsim/new_device\x00', 0x101, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, 0x0, 0x40000d0) write(r6, &(0x7f0000000380)="38000000240001060100000000000000000000000400000000000100ffffffff0000000008000100657473000c0002800500010004000000", 0x38) 23.936182368s ago: executing program 3 (id=1296): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xfb, 0xa0000000000000}, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24008801) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000f0ffffffffffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x11}], 0x1) syz_io_uring_setup(0xa99, &(0x7f0000000000)={0x0, 0xc4d8, 0x1, 0x1, 0x8000293}, &(0x7f00000000c0), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010828bd70000000cd6d00004c00", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100004"], 0x30}, 0x1, 0xffffa888}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000180), 0x8) listen(r6, 0x5) accept(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000020000000", @ANYRES32=r3, @ANYBLOB="00000000f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d808a6a0aa9f9313aaf8e443a5a0eea2f5639353f1ef9ba5e8ce02a9622"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40000}, 0x840) timer_settime(0x0, 0x0, 0x0, 0x0) 22.354877626s ago: executing program 3 (id=1318): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = geteuid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x8, 0xf, 0x102}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x19, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5, r3}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54edffbc7000ffdbdf0700000000000000001100002000044e217f7e020080802c00"/53, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\b\x00)\x00\x00\b\x00'], 0x54}}, 0x20004400) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6}, &(0x7f0000000bc0), &(0x7f0000000c00)=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c40)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={r7, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000cc0)={@local, @random="d92691707f35", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c184620753684186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 22.224809509s ago: executing program 3 (id=1320): syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x21081e, &(0x7f0000000a00)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000280)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000046680d65c0", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x8) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) syz_clone(0x4208000, 0x0, 0xfffffecc, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f000001a1c0)=""/102400, 0x19000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x0) inotify_init1(0x80000) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x2711, @local}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000f40)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f80)={0x8, 0x0, 0x1002, 0x4000000005, 0x2, 0xa5, 0x5, 0x5, 0x4}) 22.066191463s ago: executing program 3 (id=1321): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) (rerun: 64) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000001280), &(0x7f00000012c0)=0xc) (async, rerun: 32) sendto$packet(r0, &(0x7f0000000080)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a8", 0x18, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000001300)=@in4={0x21, 0x4, 0x2, 0x10, {0x2d, 0x4e20, @remote}}, 0x24) sendmsg$nl_route(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x5f}}, 0x0) 21.532420286s ago: executing program 3 (id=1328): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000003c0)={'nat\x00', 0x2, [{}, {0x20}]}, 0x48) 21.492211187s ago: executing program 37 (id=1328): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000003c0)={'nat\x00', 0x2, [{}, {0x20}]}, 0x48) 19.008023618s ago: executing program 4 (id=1348): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, 0x0, 0x20060000) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x180, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000300)="38000000240001060100000000000000000000000200000000000100ffffffff0000000008000100657473000c0002800500010004", 0x35) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="91cfdf", 0x3}], 0x1}, 0x200000000000000) 18.888876721s ago: executing program 4 (id=1350): perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x489d}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2c, 0x3, 0x0) recvmsg$kcm(r0, 0x0, 0x12001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000e00)="$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") uname(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000600)=""/77, 0x4d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x3}, 0x1}], 0x1, 0x20, 0x0) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x811) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000080), 0x0, 0x2000000}, 0x20) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000540)={0x7, 0x7, 0x4, 0x4, 0xfff}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="01000080"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 18.616881947s ago: executing program 4 (id=1352): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) geteuid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x8, 0xf, 0x102}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x19, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4, r2}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54edffbc7000ffdbdf0700000000000000001100002000044e217f7e020080802c00"/53, @ANYRES32=0x0, @ANYBLOB='\b\x00)\x00\x00\b\x00\x00'], 0x54}}, 0x20004400) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r5}, &(0x7f0000000bc0), &(0x7f0000000c00)=r6}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={r6, r8, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000cc0)={@local, @random="d92691707f35", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c184620753684186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 18.447443441s ago: executing program 4 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0xc) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xb65c97, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x60042, 0x1) close(r0) r1 = socket(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$cgroup_pid(r0, 0x0, 0x0) move_mount(r0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000b00)='./file0/../file0\x00', 0x12) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x11050ca, 0x0) umount2(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000740)="$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") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000300)=0x3, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000340)=""/24, &(0x7f0000000380)=0x18) syz_mount_image$vfat(&(0x7f00000009c0), &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000b00)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0x1, &(0x7f00000003c0)) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x1c0, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @remote, [0xff000000, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'netpci0\x00', 'vxcan1\x00', {0xff}, {}, 0x32, 0x1, 0x0, 0x40}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="2800000007060300000000ff01000000000000050900020073797a3100000000050001000700000020892652189b7232e0e46b491e29db7695826f1900e34a111023c3fa56dafb8f3efac5e0fd5326f28b82ed988263280adfd3a03ec5b5025d5924669f62de278a4c7ea25fefd963439741a229f79bbe3719f9fbe1eba9aaf08544c96236415f38b4a104b6322407000000b15d9252a1231a02f44cc97389614eed6040ce1521e3bd39de8c57a558e91f"], 0x28}, 0x1, 0x0, 0x0, 0x842}, 0x40) 18.146974459s ago: executing program 4 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001500010027bd700000000000027809ff", @ANYRES32=r1, @ANYBLOB="1400030076657468300000000000000000000000decc81a539d3e4c38dbceb895dd9ca107a7358aba51fc46c7f7de940fc3d86117a075aae4cf276d359245902de21dda75c155bb0debdf9ab78531a03b9cb3fb1a0985b0c9d77"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)='01:80:c2:00:00$00', 0x11) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000580), 0x318, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb"], 0x0) recvmmsg(r4, &(0x7f0000000600), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000640)=0x3, 0xac5) syz_clone3(&(0x7f0000000680)={0x23800000, &(0x7f0000000700)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000740)=0x0) io_submit(r7, 0x1, &(0x7f0000000780)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x7, r6, 0x0}]) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f0000000200)=0x200000) 17.668486311s ago: executing program 4 (id=1364): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = geteuid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x8, 0xf, 0x102}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x19, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5, r3}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54edffbc7000ffdbdf0700000000000000001100002000044e217f7e020080802c00"/53, @ANYRES32=r2, @ANYBLOB='\b\x00)\x00\x00\b\x00\x00'], 0x54}}, 0x20004400) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6}, &(0x7f0000000bc0), &(0x7f0000000c00)=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c40)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={r7, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000cc0)={@local, @random="d92691707f35", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c184620753684186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 17.668262281s ago: executing program 38 (id=1364): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = geteuid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x8, 0xf, 0x102}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x19, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5, r3}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54edffbc7000ffdbdf0700000000000000001100002000044e217f7e020080802c00"/53, @ANYRES32=r2, @ANYBLOB='\b\x00)\x00\x00\b\x00\x00'], 0x54}}, 0x20004400) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6}, &(0x7f0000000bc0), &(0x7f0000000c00)=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c40)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={r7, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000cc0)={@local, @random="d92691707f35", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c184620753684186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 12.668417582s ago: executing program 8 (id=1439): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x811) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setreuid(0xee01, 0xee01) ioctl$RNDCLEARPOOL(r2, 0x5206, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) close(0x3) 12.416145428s ago: executing program 8 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000240)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = timerfd_create(0x0, 0x80800) timerfd_settime(r5, 0x3, &(0x7f0000000000), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xffff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3b9ac9ff, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x5a6c103, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x4}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000940)={&(0x7f0000001000)={[{&(0x7f00000006c0)="5e15c57bfcd4475df7ad9847018b388dadf62986155160a006bef73d9dca09797dbce1dd76ac685d09657a5a0302f642db3de4702a11acb4c6467762b210e37b2b19905d071c742131f941b725223b806f1e2dc9054edf8c06a5e00a876044221bba4cba4243fb880bad94ad367424f104410a560c41aa63b31f54e65733e1697dc58ebcb0da5bed1689f96c00c082e540cb8477ec6dc6d9777467935d1f884b55240a2bc9257e4ad26d2a4eca9bebb0634f09119fc07e0c6c6f787e28fb1de0aef7350db16c407dee98424a93a6a1d902d972308f5fd3", 0xd7, 0x1}, {&(0x7f00000007c0)="4b060424ab31a4e566f2bef62214dfd8965d76f92dcfc4c6bcced9c7047641d1f434534343e2d0ab125ef5dd00db2ab7556f323f6fe3bb49153952821332dc7701af21654e447e72738c5628b5517c324b715ea6dbeac231d4f55e6883cb01ad97413bd7e203a942752d2ecff00c8303989473a79c73ae0adacf9d714451bb3e015e2e8b1993e9ff2935fa5cde9a89a68d4f3c3bd6cbb58726f2bdd0d8c90211845aefb4004f5384b749d2fa4ad30b820995de93cf7fa992128e2f85f0409011987af78c507e31688e423e766a6d7cd5e7878f271ce20fab9e66509f92701f923bf6f2612fb6abe3f5d77a18a23810b124aac5fb0f", 0xf5}, {&(0x7f00000008c0)="8819613f92799c1b4f4e0f5a02ac4ffa24a8e97bfec1966107a3b9403d05616e4b8e3d4cb74b13c422033fe62ab2bd4efe5495f4ddb96860ed1c6508c359892b6284c48ee3cc038329e2d747c791941d43517e06d3c10c790961bde4141453df2753a55ba6f7daea3ccf", 0x6a, 0x1}]}, 0x3, 0x1}, 0x1) timerfd_settime(r5, 0x3, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x4, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 12.31776675s ago: executing program 8 (id=1445): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = accept(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80) fcntl$setstatus(r1, 0x4, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000d00)={'filter\x00', 0x4f8, '\x00'/1272}, &(0x7f0000001200)=0x51c) 12.297461901s ago: executing program 8 (id=1446): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0xc) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xb65c97, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x60042, 0x1) close(r0) r1 = socket(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$cgroup_pid(r0, 0x0, 0x0) move_mount(r0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000b00)='./file0/../file0\x00', 0x12) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x11050ca, 0x0) umount2(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000740)="$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") 11.826324032s ago: executing program 8 (id=1451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x30}}, 0x0) 11.592429928s ago: executing program 8 (id=1454): bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x10, 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="050000000000000006112c00000000008510000002000000850000005000000095000000000000009500a50500000000"], &(0x7f0000000e40)='GPL\x00', 0x4, 0x29e, &(0x7f0000000e80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) 11.582428948s ago: executing program 39 (id=1454): bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x10, 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="050000000000000006112c00000000008510000002000000850000005000000095000000000000009500a50500000000"], &(0x7f0000000e40)='GPL\x00', 0x4, 0x29e, &(0x7f0000000e80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) 7.107382697s ago: executing program 5 (id=1510): openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x4) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x80}}}}}}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000e, 0x3032, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x7, 0xe0, "b5d320f86fefa80008a6b550b793e1311effb5e470a18c95eaaed3acef20965c5c281e1c082feb960aa03cb72844933111377f18cc5242169f257fe29a1c34d54538cabe11416fa17cac305db16479e1d03ad59a114c7c9db39313e4c0a06f47370e5c048fc8cbe8ad9897efe08b4f1e71275961a8ac56b30d57a21a008d9c13c60dcd4a62b88c59ec6a78fc0daf4fe1d5ac73a283ce552132c102a45c7281e008ab18a6d0a8a96af1694df0f9c46ce985e5c0310af8fc0a239cd2b8367d8862e9dc02cd8f6a6c5d0d368c29fbaa13079d230afd7be8a3ff6b7193022f030cf1"}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x40}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8815}, 0x8000) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000400)={0x2}) connect$l2tp(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) io_uring_setup(0x7122, &(0x7f00000004c0)={0x0, 0xd270, 0x400, 0x3, 0x800038b}) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000540)=0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000640)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000680)={0x5, 0x3, 0x6, 0x3, 0x6, 0x6, 0x3, 0x9, 0x10}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000008c0)=0x2) capset(&(0x7f0000001040)={0x20080522}, &(0x7f0000001080)={0x0, 0x0, 0x40013, 0x0, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x1) 6.121299341s ago: executing program 9 (id=1521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'vxcan1\x00'}}, 0x1e) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)=0x0) r4 = timerfd_create(0x9, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000580)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) r7 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$netlink(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000760001"], 0x18}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="09001af30000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0109000000"], 0x5) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000340)=@ethtool_rxfh_indir={0x39, 0x7, [0x0, 0xfffff81c, 0x2, 0x8, 0x8, 0x0, 0x7fffffff]}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x12a}, 0x0) 4.336856664s ago: executing program 9 (id=1525): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0x80000000, 0x2, 0x0, 0x0, 0x6a0a65d351a03541, 0x7}, 0x9c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000000c0)={0x8, 'pimreg\x00', {'hsr0\x00'}, 0x7bf}) lseek(0xffffffffffffffff, 0x2000000008, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0x0, 0x300]}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 4.329387885s ago: executing program 1 (id=1526): socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x10000, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4e142, 0x2e) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) preadv2(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/179, 0xb3}], 0x2, 0x709, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x3, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x204, 0x4, 0x43a1bd76, 0x9, 0x9, 0x40000006, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000804) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x26040, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 4.277434566s ago: executing program 5 (id=1527): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x1b83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f0000000280)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f0000000640)="$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") 4.255792346s ago: executing program 9 (id=1528): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3f}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000140)='@,-&,$\x00', 0x20000007) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000180)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}}, 0x4040850) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xe761}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000004c0)=0xfffefffd, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(r3, 0x0, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}}, 0x8040) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x121) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x4, &(0x7f00000007c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6}]}, &(0x7f0000000800)='GPL\x00', 0x4, 0x3e0, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000a80), 0x0, 0x10, &(0x7f0000000ac0), 0x76}, 0x48) 4.067715621s ago: executing program 2 (id=1531): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000180)='10000', 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000280)={0xffffeffc, 0x0, 0x4, 0xb, 0x4f, "05418107009188b7e3d85b1b6f6ff88c6b00", 0x2, 0x40140020}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000480)=0x85) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x52b, &(0x7f0000000b80)="$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") open(&(0x7f0000000140)='./file0\x00', 0x402, 0xa27b734c1a0bdb7) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0104b84e0ea00000000007a8700000000000000000000001000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x1000000000004]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x106, 0x40, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x24040000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000400)={[{@grpquota}, {@norecovery}, {@resuid}, {@delalloc}, {@dioread_nolock}, {@nobh}, {@acl}, {@noauto_da_alloc}]}, 0x81, 0x5e0, &(0x7f0000002500)="$eJzs3c1vFVUbAPBnbj/oB+/bQoyKC2liDCRKSwsYYlzA1pAGo3HjxkoLIgUaWqNFE0qCGxPjxhgTVy7E/0KJbFnpyoUbV4aEqGFp4jVzO1N627kt/bqDzO+XXO7MOfdwzvT2uXPm9Jy5AVTWUPpPLWJfRMwkEQPJwlJeZ2SZQ4uvu//Xx2fSRxL1+ut/JJFkafnrk+y5PyvcExE//ZjE3o7V9c7OX70wMT09dSXbH5m7ODMyO3/10PmLE+emzk1dGntp7Pixo8eOjx7e1HFdK0g7deO9DwY+HX/r26//Tka/+3U8iRPxavbC5cexXYZiqPEzSVZn9R/f7spK0pH9nix/i5POEhvEhuTvX1dEPBUD0REP3ryB+OS1UhsH7Kh6ElEHKioR/1BReT8gv7ZfeR1cK6VXArTDvZOLAwCr479zcWwwehpjA333k1g+rJNExOZG5prtjog7t8dvnL09fiN2aBwOKLZwPSKeLor/pBH/g9ETg434rzXFf9ovOL343LuV+lcOFYt/aJ/F+O9ZM/6jRfy/nT2n6e9ssv6hB5vv9jbF/5Y+VgAAAAAAAKCSbp2MiBeL/v5fW5r/EwXzf/oj4sQ21D+0Yn/13/9rd7ehGqDAvZMRrxTO/63ls38HO7Kt/zXmA3QlZ89PTx2OiP9HxMHo2pXuj65Rx6HP9n7VKm8om/+XP9L672RzAbN23O3c1VxmcmJuYqvHDUTcux7xTOH832Tp/J8UnP/Tz4OZh6xj7/M3T7fKWz/+gZ1S/ybiQOH5/8FdK5K1788x0ugPjOS9gtWe/ejz71vVv9n4d4sJ2Lr0/N+3dvwPJsvv1zO78TqOzHfWW+Vttv/fnbzRuOVMd5b24cTc3JXRiO7kVEea2pQ+tvE2w+Moj4c8XtL4P/jc2uN/Rf3/3ohYWPF/J382rynOPflP/2+t2qP/D+VJ439yQ+f/jW+M3Rz8oVX9D3f+P9o41x/MUoz/waIv8zDtbk4vCMfOoqx2txcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHge1iNgdSW14abtWGx6O6I+IJ6KvNn15du6Fs5ffvzSZ5jW+/7+Wf9PvwOJ+kn///+Cy/bEV+0ciYk9EfNHR29gfPnN5erLsgwcAAAAAAAAAAAAAAAAAAIBHRH+L9f+p3zvKbh2w4zrLbgBQmoL4/7mMdgDtVxD/fWW0A2g//X+oLvEP1SX+obrEP1SX+IfqEv9QXeIfAAAAAAAeK3v23/oliYiFl3sbj1R3ltdVasuAnVYruwFAadziB6rL1B+oLtf4QLJOfk/LQuuVXMvMmS0UBgAAAAAAAAAAAIDKObDP+n+oKuv/obqs/4fqytf/7y+5HUD7ucYHYp2V/IXr/9ctBQAAAAAAAAAAAABsp9n5qxcmpqenrth489FoRjs36vX6tfS34FFpz398I58Kv9N11SJiE8XztX4PV6q8zyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDZvwEAAP//Yooi5g==") syz_pidfd_open(r2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = dup(r4) setsockopt$packet_int(r5, 0x112, 0x7, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.987991393s ago: executing program 5 (id=1532): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100f123000018000b80140001800c000100636f756e746572"], 0x80}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/mtrr\x00', 0x20002, 0x0) ioctl(r1, 0x400c4d06, &(0x7f0000000340)) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"], 0x10a0}, 0x34004054) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socket(0x1, 0x2, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x100000, 0x1}, 0x10) dup3(r3, r4, 0x0) 3.876302336s ago: executing program 9 (id=1533): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/135, 0x87}], 0x2, 0x0, 0x9) read$msr(r1, &(0x7f0000000ec0)=""/4096, 0x1000) perf_event_open(&(0x7f0000000e40)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f0000000340), 0x1}, 0x80d4, 0x35, 0x6, 0x8, 0x10000, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x200, @loopback}, 0x1c) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x1, 0x5, 0x9) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$netlink(0x10, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x8040) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r10 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000000a40)={&(0x7f0000000a80)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="671723d7c6012c", 0x7}, {&(0x7f0000000b40)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df50fad553", 0x25}], 0x2}, 0x24008b88) sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000780)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) r11 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r11, 0x29, 0x4b, &(0x7f0000000c00)=0x2, 0x4) sendmmsg$inet6(r11, &(0x7f0000000c40)=[{{&(0x7f0000000c80)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYRES8=r4], 0x28}}], 0x1, 0x0) 3.679110831s ago: executing program 5 (id=1535): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x1a0, 0x43, 0xa0, 0x1a0, 0x98, 0x288, 0x178, 0x178, 0x288, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0xff, 0x0, 'wg2\x00', 'ip6erspan0\x00'}, 0x12a, 0x178, 0x1a0, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [0xff000000, 0xff000000, 0xff, 0xffffff00], @ipv4=@multicast1, [0xff, 0xffffffff, 0xffffff00, 0xffffff00], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff000000, 0xff000000], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xff], 0x1, 0x8, 0x3a, 0x4e22, 0x4e23, 0x4e22, 0x4e21, 0x0, 0x80}, 0x40, 0x90}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x380) r3 = gettid() r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x8, 0x800) readv(r4, &(0x7f0000001900)=[{&(0x7f0000001b00)=""/234, 0xea}], 0x1) rt_sigqueueinfo(r3, 0x21, &(0x7f0000001c00)={0x33, 0x40000021, 0xfffffffb}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000001a00)=@ethtool_regs={0x4, 0x5, 0xc0, "c6f73d47d37518df69b6c94a0a26bb6c302495705af7f4ea6f0c1c6624d564c387813077eda2ad5dfcd5c52aaff59cc6b6832045b62e52ccc0731b335f1526f76caf691afa60730df9f02f9e12ded1ce68f5c06bc31f63f8e7a0a42f7d3323f2951cd7f8b61e46f3849fe31895dce55bf95f759ccb4a9a4db9ab7605de0eae5bcc5fe8555ffe2385b8c2e7807ada834a7073868190b2d7979c9fb5d9e10f9f5d1d1e6ede4efa71eccf7871ca17c8374269a75f675ec8b2a5582afbde6074a4ce"}}) setpriority(0x1, r3, 0x2000000000000000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=ANY=[@ANYBLOB="28010000031401002abd7000fe7a16250900020073797a300000000008004100727865001400330076657468315f746f5f626f6e640000000900020073797a315e"], 0x128}, 0x1, 0x0, 0x0, 0x40840}, 0x20000800) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001c80)={0x28, r5, 0xb589de7b26d064b1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) preadv2(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/250, 0xfa}, {&(0x7f0000001180)=""/219, 0xdb}, {&(0x7f0000001280)=""/109, 0x6d}], 0x4, 0xba4, 0x32cb, 0x1c) 3.522383054s ago: executing program 9 (id=1537): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x2424, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000880)={[{@nogrpid}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) gettid() sendto$inet6(r4, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r4, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xe, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x804808, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES8=r5, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r5, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55b, &(0x7f0000000c40)="$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") openat$rtc(0xffffffffffffff9c, &(0x7f00000011c0), 0x40000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3.464317055s ago: executing program 5 (id=1538): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8400, &(0x7f0000000080)={[{}, {@showassoc}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uid}, {@map_normal}, {@nocompress}], [{@flag='rw'}]}, 0x0, 0x69d, &(0x7f00000002c0)="$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") r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) setregid(0xffffffffffffffff, r1) setresgid(0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.319072349s ago: executing program 5 (id=1539): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xc) shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$kcm(0x1e, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) (rerun: 64) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000280)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r4, &(0x7f00000003c0)={&(0x7f0000000400)=@ieee802154={0x24, @short={0x2, 0x0, 0x555d}}, 0x80, 0x0}, 0x20048051) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x420040, 0x0) mkdirat(r7, &(0x7f00000004c0)='./file0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) (async) r9 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r9, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="97452a300c00"/17, 0x11}, {&(0x7f00000000c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) 3.312386769s ago: executing program 2 (id=1540): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0xe6, 0xf8, 0xff, 0x0, 0x4, 0x600, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7d2, 0x1, @perf_bp={&(0x7f0000000040), 0x16}, 0x102120, 0xfffffffffffffffc, 0x81, 0x4, 0x401, 0x36, 0x3, 0x0, 0x5, 0x0, 0xfff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f00000002c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@bsdgroups}]}, 0x2, 0x54d, &(0x7f0000000d40)="$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") perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x3fffffffc}, 0x800, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x12d}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x90) syz_open_dev$sg(0x0, 0x0, 0x401) r1 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r1, 0x1) poll(&(0x7f0000000300)=[{r1, 0x1210}], 0x1, 0x1ff8) sendto$inet(r1, &(0x7f0000000340)='^', 0x34000, 0x0, &(0x7f0000000400)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xef0b669fef2c8e9d) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r3 = getpgid(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0xa, '&\'\x00\x00\x00\x00\x00\x00\x00\x00'}}) prlimit64(r3, 0xe, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0xc, 0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x9, 0x5, 0x0, 0xfffffff9}]}) r5 = open(&(0x7f0000000580)='./file1\x00', 0x14e142, 0x90) pwritev2(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3) 3.189518722s ago: executing program 1 (id=1542): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000280)={'bridge_slave_0\x00', @random="010000201000"}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 2.935187828s ago: executing program 1 (id=1544): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000002480)={&(0x7f0000002400)=[{0x0}, {&(0x7f0000000740)="ded3b7e9fb2d8c26bd1f811400eaeba42c7518b3fc37fed253297001a43baf01eebf7ce1060263cf0fe199bead64eeeededb294f6cc6910dc7a969f3adda180574d7", 0x42}, {&(0x7f0000001100)="5b01b8f245ed6905ad9d289b44069ea27e4f550d281c7b7f0bdc4a6e25965a4e335127ff9b67a1e51579101bc0bc291e236da7582d7f5efb68b47b1804a51f27b12c988b1fe4719b5fd71bf2c8f302c258d5bca77acd37dd5025c11d09ace0afb2fc175c4d547228b691f225ab3936e1027ff2d4762d81c1532f27ef5856917eab9744e24b79f89c880252ac85928e2b1a69d1f3125dc13077677a9526580a277c432f93ba846000ff73e3c45898753f8a1b215e661d18fecdaa53785133fa902fe256d659b1b9eaf0f26c3f1b5a22a874fded8a55ec23aee9ebcdfff226330e6ab57c1410a45020d0b6e7b32c65fb66b609e6947853a9aba4dd2faedb0d193070a9200e5016db22233a59d715c5a0277c4342dd7567692c98f231b851a8a30f95aaa68079a056be95efa0a6c9b83a6398b4af814f7a35c5553a8384e792b025acf4c75a38a40aaa122968ebed8e2472495832a15e59b1ef2e9ac9203509c15891963c07875c550fdd0a4207c3ed9da6e3a202e92de196981262fb92984f3be7d1dc209b9483853de8a0743325cb79bb582e56ddb7679df23a8b844fba654fe42958163dbd940c60d1d107b9b302ec4d4bbf22034aa4808d8c253102466c99602a2f479676191a50fc9ffd7de952d8354030d115523ab7bc4dbf024dd9da07879662dcc8b3a459ea3ff6b37769e6d30d266f2a5400db0a7cb804968f6fdfedddddaef030fa990d196ab2a0a4b285fef6d50f7283c6e5c784e6648165093c5d60c57269a0c562b0393679692af65584d1acae9257dba24ec905e30c216f59f9549a07775ba89d0a597c4f1d5a75d0ce0714be1603525c39cbd6650aa29b29997f73024a788fc75f5f8d56360d26d4ac3fa7e6a3652303dc61eb2779679e1d3cd1f70ba19d50cec6ac11237ebb4ec16d5f5478354d1af37feef264b979d844f22ae7f0ba75c12902fdca557d4c43bc28a7b9e600900bf5715c8593ef106693b29f4a631b7057bccc361f7f4add3c7c4e9cdf1c03bec4f8db6e7f248e56d37ad183cd85131d8e4bd73fbe9f6b87e0670522f06856ee2575d5d051ba8cd9d0730d50515602e4d961db09f09bc8ef28e41e78f8ff0c574e1397dac3be2bf1d8ac152dd82be5cc347fcfb77752a39dbf2ce4d15eb2fdbe8de811992504785b502963ee8729c3a3fc2bc21f80ec9738876ac0b05e809cf0ae5248af36acfef9678e003fb135cd661a2d7e5d06303d1f683b5015c3b6e0c0dff8f3f751be0f87b5cae342ea4d671d067ac171508bce4320d880d586a78df11886931be695a8664dfee619541bd36df2259d91175b4fa608fdb73c821a9118cf731831979375b2560415ba3ef6ed87ed60044e67c89ab2fe043a96414c4c4851ee55df991a11e32c78631f7900b898424a36c30ef357b3214c362ab22362ca842c3e11ca42ef26ed304c2f7b06a5138232d6a6a258743fdcbcc0590f73594d8859ee682e229e0f5cc14448a73f95837169639479c13b1444b0e2565eaa413707ec3b1d7679a07c77c7b37a343a7bb162e7d25090d87be14124378a5db17dc47e06a87a23167b071875479e5e4eb1968abc6cb362d650b07e6584d54e24b8934ce1b265c18895465cc59c15882d57a5228f312a71bbe805dd3a9c8ff07da543bf5544c6555dad3d9c1a2c1adcfe02368e23df0f6b04ef1d361c06fbd86a1f26ca2bf074f621fdead0a17d2b3fcd9321e02ed2a687cda19c860344bca0e25c118bc9c1f076e13038cf3bd531a1e3e99d16179a670318d55fa59ad7b798ae4ed28bc1382828c86d30f814771e1a6c9824f487290867488f32e216d806157b97b109f48e5c3a9168dbd38e5b0bbc2ae4b10954900de879ffda8baa5d2465abfd5a7c4cd7e2b808170f8f1634afdb72c7cf83df2cfabde20181e37de9a3e38a29a12637b8230b1cb14c544f7589e0609556255a109815ec05a3eb37ed409d6ba600aa219630718dc8285d94935d0133f1ed131c982ab7642555724097fbc886ebe58e3328", 0x597}, {&(0x7f0000002100)="865aac9a54197fe13613b732b20326e90a68453aeba3c92dafd8f6b3232f543c77", 0x21}, {&(0x7f0000002200)="5434636014012618bc5bb8440867a86f61484a0117aa1cab7e1155eb2aae952dbcf20a06bd0d939c59eb77cd52ec6c55e062a7813d062ba15ffb17532018bbddf53589c80f1ea6371aa6adbfa93148c36cc58f8a5ef6c55e19df78d76a12be511148fbb5", 0x64}, {&(0x7f00000023c0)="f678fdbbc6202b", 0x7}], 0x6, 0x1, 0x0, 0x5, 0x0, 0x900, 0x7, 0x9}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000d000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a80), 0x407f, r1, 0x4}, 0x38) 2.288308464s ago: executing program 2 (id=1545): arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x5) r0 = socket(0x21, 0x800, 0x10003) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x10000000, 0x3, 0x3, 0x40008, r3, 0x4, '\x00', r2, r3, 0x4, 0x2, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xa, 0x9, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000000c0)={r5, 0x0, &(0x7f0000000100)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, 0x0, &(0x7f0000000180)=""/53}, 0x20) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000001c0)) memfd_create(&(0x7f0000000240)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r6, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffb, 0xffffffffffffff55, 0x2c, @scatter={0x6, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000480)=""/38, 0x26}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000640)=""/254, 0xfe}, {&(0x7f0000000800)=""/136, 0x88}]}, 0x0, 0x0, 0x2, 0x70, 0xffffffffffffffff, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x4, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 2.160489267s ago: executing program 1 (id=1546): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000040100000900010073797a30000000000700"], 0x30}}, 0x0) 2.019349401s ago: executing program 2 (id=1548): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 2.017623431s ago: executing program 1 (id=1549): capset(&(0x7f0000000940)={0x20071026}, &(0x7f0000000980)={0x200000, 0x200000, 0x0, 0x0, 0x400000, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x2284, 0x0) (fail_nth: 1) 1.856001415s ago: executing program 1 (id=1551): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_STATUS={0x8}]}, 0x60}}, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000000840)=""/102400, 0xffffff8c, 0x200000) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xe, &(0x7f0000019b00)=ANY=[@ANYBLOB="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"], &(0x7f000001a680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f000001a6c0), 0xfffffedf, 0x10, &(0x7f000001a700), 0xffffffffffffff24, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000019840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)={0x34, r4, 0x701, 0x10000, 0x25dfdbfd, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044841}, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000019940)={&(0x7f0000019980), 0xc, &(0x7f00000199c0)={&(0x7f0000019a00)={0xfc, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4080}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setns(0xc9, 0x0) syz_clone(0xa802400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.072345974s ago: executing program 2 (id=1554): openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000180)={[{@grpjquota}]}, 0xfe, 0x2a4, &(0x7f00000003c0)="$eJzs3bFrJFUcB/DfzO4mxjuOUxsrEUREA+EsBMFGGw8O5BARQQ9O5LRRLkJM2qyVjYW9SiqbIFYaBRuxCTb+AVFTxMYmWBgUTDGyO7Oy2Ww2s+7srGQ/H9jZN5s3eW/Jft9MmJl9AcytqxHxbEQ0ImI5IloRkfRXeDh/XC1Wt5Z2b0dk2Uu/J916+Xqut92liGhHxNMRzd7PNnZeO/hz7/pjH663Hv1s59Wlut5fv8OD/ReOPr35wVc3ntxIi9cuF8/976NKyZDXmknE/dNo7H8iaZasuDjljnCOL37q5P6BiHikm/9WpEVkP1pb+L4VT3wyfLuFo3r7CUxDlrU6+8B2BsydtHsMnKQrEZGX03RlJT+G/7mRxDura+8tv7W6fvfOrEcq4FxfHmfZ6BpJO/+/d//5bxa/vjSQ/98aef5LeaqKDgN16+T/5Re3f+mUjxqz7g1Qg297hU7+l1/ffDzkHy6UMifX5B8umrInXuUf5tlY+U/r6RMwplHZHXF9lf0/zC/5h/lVNv/tGvsEVKTVKwxP8OT7/7+KKwj/exeBul3pLh3/w/wayH9xyUBxt2q5g/7rb955e3odBKp2q1fozz8AMF+yxRnfgAzMzKzHHwAAAAAAAAAAAAAAAAAA4LStpd3bvUddbf7wccThc/m0Rf3t59MWNIppR+7pLu/9Izkxu1Ey1mxHw92acPtJfV7x3dc3R8z3MMyVX6ttv/xfZKG7/PGhqtvPvX9y9czp8DbvRrQ7la81m6c//0nZaW/O/P33nbNh641yDVQlGVh/5pV62x90vD3b9m/sRXzXGX+uDRv/0niw+zx8/Lnc/xXL8e9Heizv/j1J7wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjTPwEAAP//d/F4Hg==") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f00000008c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x2141, 0x59) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) creat(&(0x7f0000000680)='./file0\x00', 0xecf86c37d53049cc) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r1, &(0x7f0000000700)='Vo', 0x2) (async, rerun: 64) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, @perf_bp={0x0, 0xc}, 0x2c00, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000550001002abd70000200000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESHEX=0x0, @ANYBLOB="00020200e0000001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) 853.311589ms ago: executing program 9 (id=1556): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0xe6, 0xf8, 0xff, 0x0, 0x4, 0x600, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7d2, 0x1, @perf_bp={&(0x7f0000000040), 0x16}, 0x102120, 0xfffffffffffffffc, 0x81, 0x4, 0x401, 0x36, 0x3, 0x0, 0x5, 0x0, 0xfff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f00000002c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@bsdgroups}]}, 0x2, 0x54d, &(0x7f0000000d40)="$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") perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x3fffffffc}, 0x800, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x12d}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x90) syz_open_dev$sg(0x0, 0x0, 0x401) r1 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r1, 0x1) poll(&(0x7f0000000300)=[{r1, 0x1210}], 0x1, 0x1ff8) sendto$inet(r1, &(0x7f0000000340)='^', 0x34000, 0x0, &(0x7f0000000400)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xef0b669fef2c8e9d) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r3 = getpgid(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0xa, '&\'\x00\x00\x00\x00\x00\x00\x00\x00'}}) prlimit64(r3, 0xe, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0xc, 0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x9, 0x5, 0x0, 0xfffffff9}]}) r5 = open(&(0x7f0000000580)='./file1\x00', 0x14e142, 0x90) pwritev2(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3) 736.292022ms ago: executing program 2 (id=1558): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400, 0x10000, 0xfffffffb, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20004000) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000004840)={'syzkaller1\x00', 0xc201}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000004ac0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004f80)={0x5, 0x3, &(0x7f0000004b40)=ANY=[@ANYBLOB="1800000000001200000000000000000095", @ANYRESOCT=r1], &(0x7f0000004c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setrlimit(0x7, &(0x7f0000004c80)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000004cc0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000004900)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000004d40), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000004d80)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000004dc0), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000004e00)={'syzkaller0\x00', 0xca58c30f81b6079f}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000004e40)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000004e80)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000004f00)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000004a80), r3) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004980), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004a00)={&(0x7f0000004a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000004880)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000048c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000040087300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)=""/111, 0x6f}], 0x1, &(0x7f0000004780)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}, @rdma_args={0x48, 0x114, 0x1, {{0xc, 0x9}, {&(0x7f0000000000)=""/226, 0xe2}, &(0x7f0000004640)=[{&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000400)=""/247, 0xf7}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/45, 0x2d}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/71, 0x47}], 0xa, 0x9, 0x5}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000004700)=""/60, 0x3c}, &(0x7f0000004740), 0x1}}], 0x90, 0x40080}, 0x4000802) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) 589.946575ms ago: executing program 0 (id=1561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x400000000000000, 0x24000841}, 0x4041080) 419.99957ms ago: executing program 0 (id=1562): syz_io_uring_complete(0x0, 0x0) (async) r0 = syz_io_uring_complete(0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x2370, 0x7f, 0x9, 0x379a, 0x7, 0x1, 0xd7, 0x5, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) poll(&(0x7f0000000100)=[{r0, 0x4}, {r0, 0x2}, {r0, 0x8000}, {r0, 0x20}], 0x4, 0x10) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000180)={r2, 0xffffffffffffffff}, &(0x7f00000001c0)=0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'veth0_to_hsr\x00', 0x4}, 0x18) pipe2(&(0x7f0000000240), 0x800) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x1407, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x5c}}, 0x4040040) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f00000003c0)={0x90002000}) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f00000003c0)={0x90002000}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1d, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x0, 0x1, 0x4, 0x0, 0x7, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x3, 0x8, 0x0, 0x6, 0xffffffffffffffff}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x143a}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xf, 0x400, 0xffffffa1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r7, r3], &(0x7f00000007c0)=[{0x2, 0x3, 0x0, 0x2}, {0x3, 0x1, 0x5, 0x2}, {0x4, 0x5, 0x6, 0xa}, {0x1, 0x2, 0x7}], 0x10, 0x51cf}, 0x94) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x15, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x4, 0x0, 0x1, 0x9, 0x7, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='syzkaller\x00', 0x6, 0x6e, &(0x7f00000009c0)=""/110, 0x41100, 0x2, '\x00', r10, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[r3], &(0x7f0000000b00)=[{0x1, 0x5, 0x6, 0x2}, {0x0, 0x5, 0xe, 0xb}, {0x0, 0x3, 0xd, 0xa}, {0x3, 0x4, 0xe, 0xc}, {0x4, 0x2, 0x3, 0x5}, {0x3, 0x3, 0x7, 0x9}, {0x4, 0x3, 0x8, 0x8}, {0x5, 0x3, 0x4, 0xc}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x2, 0x9, 0x6}], 0x10, 0x8ad}, 0x94) write$binfmt_script(r0, &(0x7f0000000c80)={'#! ', './file0', [{0x20, 'cpuset.effective_mems\x00'}, {}, {0x20, '\\^\x00'}, {0x20, '^@&/%$*((#'}, {0x20, '\xa6'}], 0xa, "dfe92fcb99b7fb86af8ffa8e5592c72c7489856012b9ece5f00fa059c4d5f5fe09d849f51aee31d8bcb6699471b68bb7f9de560987428caf22c0f7b33a5967fb68308c2f47f8bd56304e63f69fe40fd41dfc0e840f8de3927c1ad9115bc1215accc363a0b94a233fa10f2ab7133b28dc626f6bb8d677c845a021607b97d1906b053f1c26e1658c7964ebdeb27ccabb1cae964eb54c60d984be18f7f4ecf3946762af3c66d265493d3ea76e299a27dfe7bf6dfada3697a83a387d669df0c15122c8499cf812af48c8ba"}, 0xfd) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000d80)={0x26d, 0x4, 0x0, 0x6, 0x364, 0x2, 0x2, 0x5, r1}, &(0x7f0000000dc0)=0x20) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000d80)={0x26d, 0x4, 0x0, 0x6, 0x364, 0x2, 0x2, 0x5, r1}, &(0x7f0000000dc0)=0x20) dup(r4) (async) r12 = dup(r4) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000e00)=0x8, 0x4) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000e00)=0x8, 0x4) dup(r12) (async) r13 = dup(r12) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r13, 0x84, 0x6, &(0x7f0000000e40)={r11, @in6={{0xa, 0x4e23, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f00)={'ipvlan0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f80)={0x0, r7, 0x0, 0x2, &(0x7f0000000f40)='*\x00'}, 0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000fc0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000fc0)={'vxcan0\x00'}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r12) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000001300)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f00000010c0)={0x1cc, r14, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x48}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "b8e6f97aec356ee6abdbf9720f7ed2"}, @NL80211_ATTR_FILS_ERP_REALM={0xe1, 0xfa, "82d34ac9b8c85ceabeb65ad777886297d8db48e6417b25afe3c843319ac7333fee63c6a8ac4a6f26cdc4df198d112dd5be0dae1f0174c33e8dabf1851f22e5ba37660609e7a5a68217ef2d2100720de8e0a56110efb6f7ebd783a029f84cdb89ef54249d864eea678be06330ff1c4965c4611e128ba543f4ebeee51d2e26787d4a7f98f233830865abe772376c8cdbd3bd4ba793a36c83d77e20f7fafd8ef9975aaf62e200b238ced3f1bd8e3c53fe5c63e89adf64b2d3abc9bd8155b37966ed17a10f6f3dd304bf0671a3b0a84b763960f31545738a4d0bf0703055ac"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "e6a0f4679885e20267cac933d89e682f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "bfa31e"}, @NL80211_ATTR_FILS_ERP_RRK={0x87, 0xfc, "a53089b3a64dc458d282d518fb6a45557161c43ff463595e01789a5b2664b3fe8e12de9dc04419fc492f0264d1e70dc9e1fef8eedb450178119640ff619f9d7cd1a3d391d813d068f603f4a91445bc56fac802b75a665ea76496723e2fb5dba3f6b030d20a2e4350907384493c8d267219986c3c4c120de94abf1ad6550c7b39cde4f6"}]]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) 412.82936ms ago: executing program 0 (id=1563): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000040000000800"], 0x48) unshare(0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x158) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000780)={0x2, 0x4e25, @empty}, 0x10) sendmsg$rds(r1, &(0x7f00000007c0)={&(0x7f0000000800)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000880)=""/4, 0xd000}], 0x1, &(0x7f00000008c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x86d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x6}, 0x2400, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000440)={0x0, @empty, @dev}, &(0x7f0000000480)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/kmsg\x00', 0x60000, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000600)={0x1f}, &(0x7f0000000640)={0x0, 0x3938700}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0xa800}, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@orlov}, {@i_version}, {@init_itable}]}, 0x1, 0x753, &(0x7f00000017c0)="$eJzs3E9rHPUbAPBnpknTP+lv8wMP4kmoWKF0k6b+uUY8Fwp9ATVsJiFkkg3ZTW1ioK0HD4KgIqj0ou/AiyJ4KX0RInhT8CD4J40Hb5HZ7CZ2u5smNOnU+PnAZJ/vd3bneZ7s8GUHdjaA/6zniz9JxHBEXImISns+jYjjrehExK2t591fX6ttrK/VktjcvPp7UrysNdc5VtJ+PB2tl8SzEXFvMOL8Ow/nbayszk3mebbUHo825xdHGyurF2bnJ2eymWxhfGzs0qVXx195eezAen3/7S9/e++bNzpVTiUx0eo7uvo4SFv/k8GY6JpfOIxkJUrKLgAAgD0pPucfi4iB1qfUShxrRQAAAMBRsjm0CQAAABx5SZRdAQAAAHC4Ot8DuL++VutsT/L7B7++HhEjO/cWb2znH2jdQxxxIgYj4tRG8sCdCcnWy+Cx3LodEXcnepz/Sfv826ehnbD7znX3SD997hbrz0Sv9S/dXn+ix/oz0PnthMfUWf82Hlr/dvIf67P+XdlLglsRQ0vnvuub/3bEcwO98ifb+ZM++d/cY49fDf/wY799m19EnIve+f+Za5ffhxidns2z9t+eOc5+ffP8bv2f6pc/2b3/xT32/9Od8Zl+a0mR/6Wzu7//vfIX58QH7TrSiPiw/ViMP+rK8eK9sc9263+qT/+Pev8/73fQmw8Ov3139ed+TwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBe0ogYjiStbsdpWq1GnI6IZ+JUmtcbzfPT9eWFqWJfxEgMptOzeTYWEZWtcVKML7binfF41/hSRPw/Ij6unGyNq7V6PlV28wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGw7HRHDkaTViEgj4s9KmlarZVcFAAAAHLiRsgsAAAAADp3rfwAAADj69nP9f/sQ6wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOtCuXLxfb5sb6Wq0YT11fWZ6rX78wlTXmqvPLtWqtvrRYnanXZ/KsWqvPP+p4eb2++FosLN8YbWaN5mhjZfXafH15oXltdn5yJruWDT6RrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiv4daWpNWISFtxmlarEWciYiQGk+nZPBuLiP9FxPeVwaFifLHsogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhwjZXVuck8z5YeDM60d/fYdUSCk+0On5Z6BIKnKihxUQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDSNldW5yTzPlhplVwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC50l+SiCi2c5UXhrv3Hk/+qrQeI+KtO1c/uTHZbC5dLOb/2J5vftqeHy+jfgAAAKBb5zq9fR2fll0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw79FYWZ2bzPNs6RCDTq7NoXJ7BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9ufvAAAA///908Kw") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x2, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)='nfs\x00', 0xf9fdffffffffffff, &(0x7f0000000240)='vers=4.0,sec=krb5p,addr=127.0.0.1,port=20000\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 150.233676ms ago: executing program 0 (id=1564): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x56e0f4cf, 0x40}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000010500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc800000000c0a010100000000000100000a0000060900020073797a31000000000900010073797a31000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140000000000000100014000180090001006c61737400"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044060) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 49.089849ms ago: executing program 0 (id=1565): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0xf9ffff0000000000, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000f88900000000000000ffff69f95586c60883ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000f2ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000fe"]}, 0x108) 0s ago: executing program 0 (id=1566): syz_io_uring_setup(0x2d64, &(0x7f0000000580)={0x0, 0x100577, 0x20, 0x0, 0x42}, &(0x7f0000000400), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x6, 0x8400) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000001c0)={0x0, 0x4, 0x1}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0xc, &(0x7f0000000140)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4141) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000440)={0x9, 0x7, 0x100}) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x408, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xe}, 0x10c118, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfdfd, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffeffff, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): 0] audit: type=1400 audit(1791867391.828:6437): avc: denied { read write } for pid=7368 comm="syz.3.1025" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 135.971762][ T7369] netlink: 'syz.3.1025': attribute type 21 has an invalid length. [ 135.972458][ T7369] veth1_macvtap: left promiscuous mode [ 135.972479][ T7369] macsec0: entered promiscuous mode [ 136.548515][ T7385] team0: Port device team_slave_0 removed [ 136.635660][ T7391] FAULT_INJECTION: forcing a failure. [ 136.635660][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 136.635693][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.2.1032 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.635809][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.635822][ T7391] Call Trace: [ 136.635829][ T7391] [ 136.635838][ T7391] __dump_stack+0x1d/0x30 [ 136.635864][ T7391] dump_stack_lvl+0x95/0xd0 [ 136.635886][ T7391] dump_stack+0x15/0x1b [ 136.635933][ T7391] should_fail_ex+0x262/0x280 [ 136.635965][ T7391] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 136.636000][ T7391] should_failslab+0x8c/0xb0 [ 136.636092][ T7391] __kmalloc_noprof+0xd0/0x4d0 [ 136.636124][ T7391] ? avc_has_perm_noaudit+0xac/0x160 [ 136.636152][ T7391] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 136.636232][ T7391] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 136.636367][ T7391] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 136.636432][ T7391] ? selinux_capable+0x31/0x40 [ 136.636472][ T7391] ? security_capable+0x7b/0x90 [ 136.636504][ T7391] ? ns_capable+0x80/0xb0 [ 136.636601][ T7391] genl_rcv_msg+0x42f/0x470 [ 136.636631][ T7391] ? __pfx_tipc_nl_bearer_set+0x10/0x10 [ 136.636710][ T7391] netlink_rcv_skb+0x11e/0x220 [ 136.636734][ T7391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.636772][ T7391] genl_rcv+0x28/0x40 [ 136.636801][ T7391] netlink_unicast+0x5a9/0x680 [ 136.636909][ T7391] netlink_sendmsg+0x5be/0x6f0 [ 136.636940][ T7391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.636982][ T7391] ____sys_sendmsg+0x532/0x580 [ 136.637017][ T7391] ___sys_sendmsg+0x195/0x1e0 [ 136.637051][ T7391] __x64_sys_sendmsg+0xd4/0x160 [ 136.637147][ T7391] x64_sys_call+0x22ab/0x2550 [ 136.637222][ T7391] do_syscall_64+0x112/0x360 [ 136.637248][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.637273][ T7391] RIP: 0033:0x7fe9c7cde1d9 [ 136.637292][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.637341][ T7391] RSP: 002b:00007fe9c6737028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.637374][ T7391] RAX: ffffffffffffffda RBX: 00007fe9c7f65fa0 RCX: 00007fe9c7cde1d9 [ 136.637389][ T7391] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 136.637431][ T7391] RBP: 00007fe9c6737090 R08: 0000000000000000 R09: 0000000000000000 [ 136.637447][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.637521][ T7391] R13: 00007fe9c7f66038 R14: 00007fe9c7f65fa0 R15: 00007ffc630f6d28 [ 136.637540][ T7391] [ 136.789989][ T7403] loop3: detected capacity change from 0 to 1764 [ 136.827097][ T7394] ip6tnl0: Caught tx_queue_len zero misconfig [ 136.967542][ T7413] loop7: detected capacity change from 0 to 512 [ 137.031112][ T7413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.031306][ T7413] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.086523][ T7415] loop4: detected capacity change from 0 to 1024 [ 137.126086][ T7415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.126257][ T7415] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.176107][ T5838] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 137.177113][ T5838] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 137.272797][ T7416] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20002 [ 137.338377][ T7410] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 137.338405][ T7410] SELinux: failed to load policy [ 137.341117][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.405216][ T6178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.716570][ T7449] loop4: detected capacity change from 0 to 1764 [ 137.731921][ T7449] ISOFS: unable to read i-node block [ 137.731936][ T7449] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 137.773769][ T7456] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.805603][ T7467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7467 comm=syz.4.1045 [ 137.863152][ T7456] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.026437][ T7456] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.053524][ T7476] loop4: detected capacity change from 0 to 256 [ 138.080048][ T7456] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.154387][ T7486] batadv_slave_1: entered promiscuous mode [ 138.167091][ T7470] __nla_validate_parse: 3 callbacks suppressed [ 138.167137][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1049'. [ 138.213181][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 138.233957][ T7456] bridge_slave_1: left allmulticast mode [ 138.233984][ T7456] bridge_slave_1: left promiscuous mode [ 138.234125][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.250748][ T7456] bridge_slave_0: left allmulticast mode [ 138.250887][ T7456] bridge_slave_0: left promiscuous mode [ 138.251097][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.347419][ T7493] loop8: detected capacity change from 0 to 512 [ 138.348945][ T7493] EXT4-fs: Ignoring removed bh option [ 138.349002][ T7493] EXT4-fs: inline encryption not supported [ 138.349358][ T7493] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.363719][ T7493] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 138.363858][ T7493] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1054: bg 0: block 248: padding at end of block bitmap is not set [ 138.363888][ T7493] loop8: lost filesystem error report for type 5 error -117 [ 138.364038][ T7493] EXT4-fs error (device loop8): ext4_acquire_dquot:7070: comm syz.8.1054: Failed to acquire dquot type 1 [ 138.364063][ T7493] loop8: lost filesystem error report for type 5 error -28 [ 138.364722][ T7493] EXT4-fs (loop8): 1 truncate cleaned up [ 138.365097][ T7493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 138.367759][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1054'. [ 138.431274][ T7456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.488640][ T7456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.511167][ T7456] bond0 (unregistering): Released all slaves [ 138.521801][ T7487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.542848][ T7487] batadv_slave_1 (unregistering): left promiscuous mode [ 138.544901][ T7487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.583244][ T7456] hsr_slave_0: left promiscuous mode [ 138.585819][ T7456] hsr_slave_1: left promiscuous mode [ 138.586475][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.586845][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.615753][ T7499] loop4: detected capacity change from 0 to 256 [ 138.631841][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.631862][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.652881][ T7456] veth1_macvtap: left promiscuous mode [ 138.652987][ T7456] veth0_macvtap: left promiscuous mode [ 138.653037][ T7456] veth1_vlan: left promiscuous mode [ 138.653060][ T7456] veth0_vlan: left promiscuous mode [ 138.657233][ T7499] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.663521][ T29] net_ratelimit: 12 callbacks suppressed [ 138.663538][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.701753][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 138.704543][ T7501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1056'. [ 138.794456][ T7456] team0 (unregistering): Port device team_slave_1 removed [ 138.830857][ T7505] loop2: detected capacity change from 0 to 512 [ 138.862279][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.862809][ T7505] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.862872][ T7505] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 138.863123][ T7505] EXT4-fs (loop2): Invalid default hash set in the superblock [ 138.902941][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.972291][ T4070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.131286][ T3025] 8021q: adding VLAN 0 to HW filter on device eth9 [ 139.132141][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 139.132837][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.132871][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.132999][ T7472] bridge_slave_0: entered allmulticast mode [ 139.133445][ T7472] bridge_slave_0: entered promiscuous mode [ 139.135448][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.135482][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.135698][ T7472] bridge_slave_1: entered allmulticast mode [ 139.136352][ T7472] bridge_slave_1: entered promiscuous mode [ 139.152559][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.157902][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.173490][ T7472] team0: Port device team_slave_0 added [ 139.174540][ T7472] team0: Port device team_slave_1 added [ 139.200404][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.200420][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.200449][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.201213][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.201225][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.201333][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.253844][ T7472] hsr_slave_0: entered promiscuous mode [ 139.254502][ T7472] hsr_slave_1: entered promiscuous mode [ 139.254747][ T7472] debugfs: 'hsr0' already exists in 'hsr' [ 139.254761][ T7472] Cannot create hsr debugfs directory [ 139.512343][ T7472] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 139.696616][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.801328][ T7148] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 139.828674][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.829565][ T3025] 8021q: adding VLAN 0 to HW filter on device eth10 [ 139.875399][ T7472] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 139.878271][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.908846][ T7472] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 139.925716][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.930894][ T7472] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 139.954872][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.077418][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 140.183507][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.214878][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.229876][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.229915][ T7456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.259687][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.259728][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.311875][ T3025] 8021q: adding VLAN 0 to HW filter on device eth11 [ 140.314813][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1069'. [ 140.382779][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.382894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.414249][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 140.414267][ T30] audit: type=1400 audit(1791867396.478:6579): avc: denied { name_bind } for pid=7596 comm="syz.3.1070" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 140.424230][ T30] audit: type=1400 audit(1791867396.488:6580): avc: denied { read } for pid=7596 comm="syz.3.1070" path="socket:[20255]" dev="sockfs" ino=20255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.468406][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.468736][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.470858][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.607663][ T7589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.613273][ T7589] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.716568][ T30] audit: type=1400 audit(1791867396.778:6581): avc: denied { write } for pid=7609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.720534][ T7621] set_capacity_and_notify: 3 callbacks suppressed [ 140.720553][ T7621] loop3: detected capacity change from 0 to 512 [ 140.786901][ T7621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.787160][ T7621] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.873201][ T30] audit: type=1400 audit(1791867396.938:6582): avc: denied { setattr } for pid=7587 comm="syz.4.1067" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.874637][ T30] audit: type=1400 audit(1791867396.938:6583): avc: denied { write } for pid=7641 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.004284][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.029187][ T3025] 8021q: adding VLAN 0 to HW filter on device eth12 [ 141.093564][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.267924][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.320677][ T7662] loop4: detected capacity change from 0 to 256 [ 141.335614][ T7662] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.416777][ T7662] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 141.416895][ T7662] FAT-fs (loop4): Filesystem has been set read-only [ 141.483071][ T7472] veth0_vlan: entered promiscuous mode [ 141.493366][ T7472] veth1_vlan: entered promiscuous mode [ 141.530352][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 141.547529][ T7472] veth0_macvtap: entered promiscuous mode [ 141.555514][ T7472] veth1_macvtap: entered promiscuous mode [ 141.586697][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.598424][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.662850][ T7451] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.663024][ T7451] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.663060][ T7451] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.663092][ T7451] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.667294][ T30] audit: type=1400 audit(1791867397.728:6584): avc: denied { mounton } for pid=7472 comm="syz-executor" path="/root/syzkaller.vzAVoA/syz-tmp" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 141.667331][ T30] audit: type=1400 audit(1791867397.728:6585): avc: denied { mount } for pid=7472 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.703794][ T30] audit: type=1400 audit(1791867397.768:6586): avc: denied { mounton } for pid=7472 comm="syz-executor" path="/root/syzkaller.vzAVoA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 141.707445][ T30] audit: type=1400 audit(1791867397.768:6587): avc: denied { mounton } for pid=7472 comm="syz-executor" path="/root/syzkaller.vzAVoA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 141.726088][ T30] audit: type=1400 audit(1791867397.788:6588): avc: denied { mounton } for pid=7472 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 142.290753][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1088'. [ 142.290776][ T7704] tipc: Invalid UDP bearer configuration [ 142.290785][ T7704] tipc: Enabling of bearer rejected, failed to enable media [ 142.364319][ T7698] loop4: detected capacity change from 0 to 512 [ 142.799897][ T7677] loop3: detected capacity change from 0 to 8192 [ 143.077232][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 143.096908][ T7734] bond3: entered allmulticast mode [ 143.097079][ T7734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.345502][ T7737] loop9: detected capacity change from 0 to 512 [ 143.468108][ T7744] team0: No ports can be present during mode change [ 143.736301][ T7759] loop4: detected capacity change from 0 to 512 [ 143.747373][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1108'. [ 143.766924][ T7761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.782981][ T7761] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 143.782981][ T7761] program syz.8.1108 not setting count and/or reply_len properly [ 143.827206][ T7759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.827306][ T7759] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.868859][ T3379] net_ratelimit: 5 callbacks suppressed [ 143.868879][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.979017][ T7771] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 143.985491][ T7771] loop9: detected capacity change from 0 to 512 [ 144.106383][ T7771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.106490][ T7771] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.118007][ T7771] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 2 (only 1 groups) [ 144.172067][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 144.219707][ T7472] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.617561][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 144.619271][ T24] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.687084][ T7791] fido_id[7791]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.717018][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.880505][ T7804] FAULT_INJECTION: forcing a failure. [ 144.880505][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 144.880571][ T7804] CPU: 1 UID: 0 PID: 7804 Comm: syz.2.1122 Not tainted syzkaller #0 PREEMPT(lazy) [ 144.880597][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.880609][ T7804] Call Trace: [ 144.880632][ T7804] [ 144.880642][ T7804] __dump_stack+0x1d/0x30 [ 144.880718][ T7804] dump_stack_lvl+0x95/0xd0 [ 144.880746][ T7804] dump_stack+0x15/0x1b [ 144.880773][ T7804] should_fail_ex+0x262/0x280 [ 144.880837][ T7804] should_failslab+0x8c/0xb0 [ 144.880877][ T7804] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 144.880941][ T7804] ? set_normalized_timespec64+0xe0/0x110 [ 144.881020][ T7804] ? __d_alloc+0x34/0x320 [ 144.881118][ T7804] ? __d_alloc+0x34/0x320 [ 144.881217][ T7804] __d_alloc+0x34/0x320 [ 144.881248][ T7804] d_alloc_parallel+0x4f/0xce0 [ 144.881283][ T7804] ? __rcu_read_unlock+0x4e/0x70 [ 144.881410][ T7804] ? __d_lookup+0x30c/0x340 [ 144.881452][ T7804] lookup_open+0x214/0x10d0 [ 144.881490][ T7804] ? inode_permission+0x1da/0x3b0 [ 144.881558][ T7804] path_openat+0x415/0x10d0 [ 144.881595][ T7804] do_file_open+0x16c/0x290 [ 144.881640][ T7804] do_sys_openat2+0xa0/0x130 [ 144.881771][ T7804] __x64_sys_openat+0xf2/0x120 [ 144.881805][ T7804] x64_sys_call+0x1f72/0x2550 [ 144.881909][ T7804] do_syscall_64+0x112/0x360 [ 144.881946][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.882028][ T7804] RIP: 0033:0x7fe9c7cde1d9 [ 144.882068][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.882095][ T7804] RSP: 002b:00007fe9c6737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.882119][ T7804] RAX: ffffffffffffffda RBX: 00007fe9c7f65fa0 RCX: 00007fe9c7cde1d9 [ 144.882154][ T7804] RDX: 00000000001451c2 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 144.882172][ T7804] RBP: 00007fe9c7d75888 R08: 0000000000000000 R09: 0000000000000000 [ 144.882267][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.882281][ T7804] R13: 00007fe9c7f66038 R14: 00007fe9c7f65fa0 R15: 00007ffc630f6d28 [ 144.882302][ T7804] [ 144.911642][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.061780][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.190605][ T7813] loop2: detected capacity change from 0 to 512 [ 145.191350][ T7813] FAT-fs (loop2): bogus number of FAT sectors [ 145.191366][ T7813] FAT-fs (loop2): Can't find a valid FAT filesystem [ 145.227700][ T7813] loop2: detected capacity change from 0 to 256 [ 145.249520][ T7807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.257106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.397432][ T7825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1127'. [ 145.423785][ T7831] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1130'. [ 145.438118][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 145.438135][ T30] audit: type=1400 audit(1791867401.508:6689): avc: denied { ioctl } for pid=7830 comm="syz.4.1130" path="socket:[21750]" dev="sockfs" ino=21750 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.451855][ T7829] loop3: detected capacity change from 0 to 512 [ 145.501413][ T7829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.501554][ T7829] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.516866][ T30] audit: type=1400 audit(1791867401.568:6690): avc: denied { write } for pid=7828 comm="syz.3.1129" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.558229][ T7829] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #18: comm syz.3.1129: corrupted inode contents [ 145.558267][ T7829] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 145.558368][ T7829] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #18: comm syz.3.1129: mark_inode_dirty error [ 145.558396][ T7829] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 145.558491][ T7829] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #18: comm syz.3.1129: corrupted inode contents [ 145.558563][ T7829] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 145.558648][ T7829] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #18: comm syz.3.1129: mark_inode_dirty error [ 145.558675][ T7829] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 145.558746][ T7829] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2965: inode #18: comm syz.3.1129: mark inode dirty (error -117) [ 145.558843][ T7829] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 145.558908][ T7829] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 145.630986][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.738111][ T30] audit: type=1400 audit(1791867401.808:6691): avc: denied { bind } for pid=7838 comm="syz.8.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.739035][ T30] audit: type=1400 audit(1791867401.808:6692): avc: denied { read write } for pid=7838 comm="syz.8.1134" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 145.739140][ T30] audit: type=1400 audit(1791867401.808:6693): avc: denied { open } for pid=7838 comm="syz.8.1134" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 145.739394][ T7844] vxcan0: tx address claim with dest, not broadcast [ 145.739434][ T30] audit: type=1400 audit(1791867401.808:6694): avc: denied { write } for pid=7838 comm="syz.8.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.856583][ T30] audit: type=1400 audit(1791867401.918:6695): avc: denied { read } for pid=7838 comm="syz.8.1134" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.921178][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.039033][ T7858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.047304][ T7837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.076439][ T7837] batman_adv: batadv0: Interface deactivated: macvlan2 [ 146.079996][ T7847] tipc: Started in network mode [ 146.080111][ T7847] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 146.080291][ T7847] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 146.080493][ T7847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.080629][ T7847] tipc: Enabled bearer , priority 10 [ 146.082993][ T7452] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.087275][ T7452] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.087379][ T7452] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.087490][ T7452] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.160702][ T7868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.160820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.161233][ T7868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.313709][ T7874] loop9: detected capacity change from 0 to 512 [ 146.314096][ T7874] ext4: Unknown parameter 'smackfsfloor' [ 146.479017][ T7881] loop4: detected capacity change from 0 to 128 [ 146.480901][ T7881] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.481218][ T7881] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.792643][ T30] audit: type=1400 audit(1791867402.848:6696): avc: denied { create } for pid=7888 comm="syz.8.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.792678][ T30] audit: type=1400 audit(1791867402.848:6697): avc: denied { bind } for pid=7888 comm="syz.8.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.082677][ T7862] tipc: Node number set to 1 [ 147.342266][ T7898] FAULT_INJECTION: forcing a failure. [ 147.342266][ T7898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.342300][ T7898] CPU: 1 UID: 0 PID: 7898 Comm: syz.3.1146 Not tainted syzkaller #0 PREEMPT(lazy) [ 147.342342][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.342357][ T7898] Call Trace: [ 147.342365][ T7898] [ 147.342448][ T7898] __dump_stack+0x1d/0x30 [ 147.342478][ T7898] dump_stack_lvl+0x95/0xd0 [ 147.342500][ T7898] dump_stack+0x15/0x1b [ 147.342524][ T7898] should_fail_ex+0x262/0x280 [ 147.342558][ T7898] should_fail+0xb/0x20 [ 147.342623][ T7898] should_fail_usercopy+0x1a/0x20 [ 147.342652][ T7898] _copy_from_user+0x1c/0xb0 [ 147.342687][ T7898] ___sys_sendmsg+0xc1/0x1e0 [ 147.342764][ T7898] __x64_sys_sendmsg+0xd4/0x160 [ 147.342954][ T7898] x64_sys_call+0x22ab/0x2550 [ 147.343023][ T7898] do_syscall_64+0x112/0x360 [ 147.343055][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.343081][ T7898] RIP: 0033:0x7f01d1a7e1d9 [ 147.343096][ T7898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.343114][ T7898] RSP: 002b:00007f01d04d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.343134][ T7898] RAX: ffffffffffffffda RBX: 00007f01d1d05fa0 RCX: 00007f01d1a7e1d9 [ 147.343148][ T7898] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 147.343242][ T7898] RBP: 00007f01d04d7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.343260][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.343272][ T7898] R13: 00007f01d1d06038 R14: 00007f01d1d05fa0 R15: 00007ffce3f7ab58 [ 147.343291][ T7898] [ 147.610349][ T7452] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.748726][ T30] audit: type=1400 audit(1791867403.808:6698): avc: denied { connect } for pid=7906 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.850689][ T7908] loop3: detected capacity change from 0 to 128 [ 147.865639][ T7908] FAT-fs (loop3): Directory bread(block 1048) failed [ 147.865670][ T7908] FAT-fs (loop3): Directory bread(block 1049) failed [ 147.865691][ T7908] FAT-fs (loop3): Directory bread(block 1050) failed [ 147.865784][ T7908] FAT-fs (loop3): Directory bread(block 1051) failed [ 147.865804][ T7908] FAT-fs (loop3): Directory bread(block 1052) failed [ 147.865826][ T7908] FAT-fs (loop3): Directory bread(block 1053) failed [ 147.865848][ T7908] FAT-fs (loop3): Directory bread(block 1054) failed [ 147.865947][ T7908] FAT-fs (loop3): Directory bread(block 1055) failed [ 148.194323][ T7933] loop4: detected capacity change from 0 to 512 [ 148.222274][ T7933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.222386][ T7933] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.305663][ T7939] loop9: detected capacity change from 0 to 512 [ 148.346297][ T7939] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.388486][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.400714][ T7939] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 148.404363][ T7939] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.1156: bg 0: block 248: padding at end of block bitmap is not set [ 148.404423][ T7939] loop9: lost filesystem error report for type 5 error -117 [ 148.410295][ T7939] EXT4-fs error (device loop9): ext4_acquire_dquot:7070: comm syz.9.1156: Failed to acquire dquot type 1 [ 148.410377][ T7939] loop9: lost filesystem error report for type 5 error -28 [ 148.412106][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 148.412137][ C0] EXT4-fs (loop9): last error at time 1791867404: ext4_acquire_dquot:7070 [ 148.426551][ T7939] EXT4-fs (loop9): 1 truncate cleaned up [ 148.446849][ T7939] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 148.511271][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1156'. [ 148.549791][ T7946] loop3: detected capacity change from 0 to 8192 [ 148.560498][ T7946] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.727422][ T7970] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 148.729039][ T6680] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 148.761146][ T7472] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 148.761385][ T7451] EXT4-fs error (device loop9): ext4_release_dquot:7106: comm kworker/u8:23: Failed to release dquot type 1 [ 148.761420][ T7451] loop9: lost filesystem error report for type 5 error -117 [ 149.040029][ T7995] loop4: detected capacity change from 0 to 512 [ 149.060613][ T7995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.060794][ T7995] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.132411][ C1] net_ratelimit: 16 callbacks suppressed [ 149.132431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.136061][ T7864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.190891][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.212432][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 149.377619][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1174'. [ 149.395397][ T8019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.395516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.401721][ T8019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.401889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.402534][ T7076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.463170][ T8017] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1174'. [ 149.463329][ T8017] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1174'. [ 149.463380][ T8017] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1174'. [ 149.540773][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1176'. [ 149.572740][ T8035] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 149.608127][ T8038] loop3: detected capacity change from 0 to 512 [ 149.624283][ T8038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.624481][ T8038] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.638126][ T8041] 9p: Bad value for 'rfdno' [ 149.716471][ T8035] loop4: detected capacity change from 0 to 512 [ 149.721622][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1181'. [ 149.733324][ T8035] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 149.783904][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.833664][ T8035] EXT4-fs (loop4): 1 orphan inode deleted [ 149.835322][ T8036] team0: Port device team_slave_0 removed [ 149.844186][ T8035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.846508][ T8035] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.852671][ T7456] EXT4-fs error (device loop4): ext4_release_dquot:7106: comm kworker/u8:28: Failed to release dquot type 1 [ 149.885237][ T8054] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1187'. [ 149.950894][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1190'. [ 149.968469][ T8061] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1191'. [ 149.968496][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1191'. [ 150.075139][ T8033] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.109859][ T8069] loop4: detected capacity change from 0 to 512 [ 150.118280][ T8069] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1194: iget: bad i_size value: 38620345925642 [ 150.118429][ T8069] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.119401][ T8069] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1194: couldn't read orphan inode 15 (err -117) [ 150.119470][ T8069] loop4: lost filesystem error report for type 5 error -117 [ 150.142422][ T8069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.175639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.179304][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.538973][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 150.538988][ T30] audit: type=1400 audit(1791867406.598:6720): avc: denied { mount } for pid=8090 comm="syz.9.1196" name="/" dev="hugetlbfs" ino=22579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 150.659779][ T8097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.659852][ T8097] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.660850][ T30] audit: type=1400 audit(1791867406.718:6721): avc: denied { write } for pid=8096 comm="syz.2.1198" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.813521][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.913936][ T8104] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 150.940419][ T8104] EXT4-fs (loop8): 1 orphan inode deleted [ 150.940963][ T8104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.966084][ T8104] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.966484][ T7454] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 150.966579][ T7454] EXT4-fs error (device loop8): ext4_release_dquot:7106: comm kworker/u8:26: Failed to release dquot type 1 [ 151.016996][ T30] audit: type=1400 audit(1791867407.078:6722): avc: denied { write } for pid=8103 comm="syz.8.1201" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.068927][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.132282][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.220866][ T30] audit: type=1400 audit(1791867407.278:6723): avc: denied { kexec_image_load } for pid=8109 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 151.273516][ T8111] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 151.304120][ T8113] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 151.305880][ T8113] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.311149][ T30] audit: type=1400 audit(1791867407.368:6724): avc: denied { write } for pid=8112 comm="syz.2.1204" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.370684][ T30] audit: type=1400 audit(1791867407.408:6725): avc: denied { bind } for pid=8117 comm="syz.4.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.370721][ T30] audit: type=1400 audit(1791867407.408:6726): avc: denied { listen } for pid=8117 comm="syz.4.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.400882][ T30] audit: type=1400 audit(1791867407.438:6727): avc: denied { bind } for pid=8115 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.460960][ T30] audit: type=1400 audit(1791867407.518:6728): avc: denied { create } for pid=8115 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 151.511814][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.611826][ T8133] set_capacity_and_notify: 3 callbacks suppressed [ 151.611846][ T8133] loop2: detected capacity change from 0 to 1024 [ 151.614225][ T8133] EXT4-fs: Ignoring removed bh option [ 151.614543][ T8133] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 151.650609][ T8133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.671120][ T8104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.674999][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.722886][ T8143] netlink: 'syz.2.1214': attribute type 10 has an invalid length. [ 151.723593][ T8143] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 151.950759][ T8160] af_packet: tpacket_rcv: packet too big, clamped from 134 to 4294967286. macoff=82 [ 151.968439][ T8163] loop8: detected capacity change from 0 to 164 [ 152.068040][ T8170] IPVS: Scheduler module ip_vs_sip not found [ 152.164957][ T8183] ./dev/sda1: Can't lookup blockdev [ 152.242830][ T8199] ip6erspan0: entered allmulticast mode [ 152.451319][ T8226] netlink: 'syz.2.1240': attribute type 29 has an invalid length. [ 152.463188][ T8226] netlink: 'syz.2.1240': attribute type 29 has an invalid length. [ 152.506108][ T8230] loop2: detected capacity change from 0 to 512 [ 152.544015][ T8230] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.547176][ T8230] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 152.547565][ T8230] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1241: bg 0: block 248: padding at end of block bitmap is not set [ 152.547593][ T8230] loop2: lost filesystem error report for type 5 error -117 [ 152.548122][ T8230] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.1241: Failed to acquire dquot type 1 [ 152.548473][ T8230] loop2: lost filesystem error report for type 5 error -28 [ 152.550207][ T8230] EXT4-fs (loop2): 1 truncate cleaned up [ 152.551116][ T8230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 152.669994][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 152.682202][ T7101] EXT4-fs error (device loop2): ext4_release_dquot:7106: comm kworker/u8:20: Failed to release dquot type 1 [ 152.682242][ T7101] loop2: lost filesystem error report for type 5 error -117 [ 152.711195][ T8240] loop2: detected capacity change from 0 to 512 [ 152.740193][ T8240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.740500][ T8240] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.770245][ T8243] loop8: detected capacity change from 0 to 2048 [ 152.818076][ T8243] Alternate GPT is invalid, using primary GPT. [ 152.818254][ T8243] loop8: p1 p2 p3 [ 152.837961][ T2986] Alternate GPT is invalid, using primary GPT. [ 152.838072][ T2986] loop8: p1 p2 p3 [ 153.577365][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.873724][ T8303] loop2: detected capacity change from 0 to 512 [ 153.908302][ T8303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.908377][ T8303] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.977500][ T8307] loop8: detected capacity change from 0 to 512 [ 153.979896][ T8307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.008821][ T8307] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.1251: iget: bad i_size value: 38620345925642 [ 154.008874][ T8307] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.009038][ T8307] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1251: couldn't read orphan inode 15 (err -117) [ 154.009139][ T8307] loop8: lost filesystem error report for type 5 error -117 [ 154.009654][ T8307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.105151][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.154030][ T8310] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.1251: bg 0: block 5: invalid block bitmap [ 154.154314][ T8310] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 154.154343][ T8310] EXT4-fs (loop8): This should not happen!! Data will be lost [ 154.154343][ T8310] [ 154.154359][ T8310] EXT4-fs (loop8): Total free blocks count 0 [ 154.154431][ T8310] EXT4-fs (loop8): Free/Dirty block details [ 154.154445][ T8310] EXT4-fs (loop8): free_blocks=0 [ 154.154521][ T8310] EXT4-fs (loop8): dirty_blocks=1 [ 154.154532][ T8310] EXT4-fs (loop8): Block reservation details [ 154.154546][ T8310] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 154.177975][ T9] net_ratelimit: 12 callbacks suppressed [ 154.177994][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.271641][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 154.334042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.337956][ T7862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.750205][ T7148] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.779025][ T8320] FAULT_INJECTION: forcing a failure. [ 154.779025][ T8320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.779063][ T8320] CPU: 0 UID: 0 PID: 8320 Comm: syz.8.1254 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.779160][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.779176][ T8320] Call Trace: [ 154.779185][ T8320] [ 154.779194][ T8320] __dump_stack+0x1d/0x30 [ 154.779268][ T8320] dump_stack_lvl+0x95/0xd0 [ 154.779297][ T8320] dump_stack+0x15/0x1b [ 154.779328][ T8320] should_fail_ex+0x262/0x280 [ 154.779392][ T8320] should_fail+0xb/0x20 [ 154.779422][ T8320] should_fail_usercopy+0x1a/0x20 [ 154.779453][ T8320] set_fd_set+0x29/0x90 [ 154.779479][ T8320] core_sys_select+0x5aa/0x730 [ 154.779522][ T8320] __se_sys_pselect6+0x23f/0x2a0 [ 154.779630][ T8320] __x64_sys_pselect6+0x78/0x90 [ 154.779659][ T8320] x64_sys_call+0x1dfc/0x2550 [ 154.779692][ T8320] do_syscall_64+0x112/0x360 [ 154.779751][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.779783][ T8320] RIP: 0033:0x7f8a5780e1d9 [ 154.779803][ T8320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.779828][ T8320] RSP: 002b:00007f8a56267028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 154.779919][ T8320] RAX: ffffffffffffffda RBX: 00007f8a57a95fa0 RCX: 00007f8a5780e1d9 [ 154.779938][ T8320] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 154.779954][ T8320] RBP: 00007f8a578a5888 R08: 0000200000000200 R09: 0000200000000280 [ 154.779972][ T8320] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 154.779989][ T8320] R13: 00007f8a57a96038 R14: 00007f8a57a95fa0 R15: 00007fff4c44d528 [ 154.780145][ T8320] [ 155.207765][ T8326] log_tg_check: 55 callbacks suppressed [ 155.207784][ T8326] xt_LOG: prefix is not null-terminated [ 155.209901][ T8326] ip6t_srh: unknown srh match flags 5802 [ 155.237046][ T8326] loop8: detected capacity change from 0 to 512 [ 155.311445][ T8326] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 155.311945][ T8326] EXT4-fs (loop8): orphan cleanup on readonly fs [ 155.346250][ T8326] EXT4-fs warning (device loop8): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 155.382273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.403197][ T8326] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 155.417404][ T8326] EXT4-fs error (device loop8): __ext4_iget:5592: inode #16: block 127754: comm syz.8.1255: invalid block [ 155.417529][ T8326] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.433241][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 155.433271][ C0] EXT4-fs (loop8): initial error at time 1791867411: __ext4_iget:5592: inode 16: block 127754 [ 155.433319][ C0] EXT4-fs (loop8): last error at time 1791867411: __ext4_iget:5592: inode 16: block 127754 [ 155.458754][ T8326] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1255: couldn't read orphan inode 16 (err -117) [ 155.458890][ T8326] loop8: lost filesystem error report for type 5 error -117 [ 155.463980][ T8326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.517466][ T7862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.553269][ T8219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.630582][ T8334] loop3: detected capacity change from 0 to 512 [ 155.645802][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 155.645818][ T30] audit: type=1326 audit(1791867411.708:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.4.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e4ae1d9 code=0x7ffc0000 [ 155.646552][ T30] audit: type=1326 audit(1791867411.708:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.4.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e4ae1d9 code=0x7ffc0000 [ 155.646646][ T30] audit: type=1326 audit(1791867411.708:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.4.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e4ae1d9 code=0x7ffc0000 [ 155.647894][ T30] audit: type=1326 audit(1791867411.708:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.4.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9e6e4ae1d9 code=0x7ffc0000 [ 155.648146][ T30] audit: type=1326 audit(1791867411.708:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.4.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e4ae1d9 code=0x7ffc0000 [ 155.648442][ T30] audit: type=1326 audit(1791867411.708:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.4.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e4ae1d9 code=0x7ffc0000 [ 155.648603][ T30] audit: type=1326 audit(1791867411.708:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.4.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e4ae1d9 code=0x7ffc0000 [ 155.649238][ T30] audit: type=1326 audit(1791867411.708:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.4.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e6e4ae1d9 code=0x7ffc0000 [ 155.649463][ T30] audit: type=1326 audit(1791867411.708:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.4.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e4ae1d9 code=0x7ffc0000 [ 155.649739][ T30] audit: type=1326 audit(1791867411.708:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.4.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e4ae1d9 code=0x7ffc0000 [ 155.706753][ T8346] loop2: detected capacity change from 0 to 512 [ 155.727833][ T8334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.727915][ T8334] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.735619][ T8346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.735699][ T8346] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.975289][ T7148] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.252127][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.412152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.451934][ T8354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.478834][ T8368] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 156.522840][ T8368] EXT4-fs (loop8): 1 orphan inode deleted [ 156.531557][ T8368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.531586][ T7452] EXT4-fs error (device loop8): ext4_release_dquot:7106: comm kworker/u8:24: Failed to release dquot type 1 [ 156.531614][ T7452] loop8: lost filesystem error report for type 5 error -117 [ 156.543395][ T8368] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.570636][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.608024][ T8375] __nla_validate_parse: 4 callbacks suppressed [ 156.608050][ T8375] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1269'. [ 156.608377][ T7862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.698024][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.747596][ T7148] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.773835][ T8388] set_capacity_and_notify: 2 callbacks suppressed [ 156.773855][ T8388] loop3: detected capacity change from 0 to 512 [ 156.795839][ T8388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.796056][ T8388] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.872177][ T8402] tipc: Started in network mode [ 156.872255][ T8402] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 156.872303][ T8402] tipc: Enabled bearer , priority 0 [ 156.886091][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.968525][ T8414] loop8: detected capacity change from 0 to 512 [ 156.998333][ T8414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.998480][ T8414] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.080030][ T8426] loop2: detected capacity change from 0 to 4096 [ 157.091115][ T8426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.203847][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1284'. [ 157.203875][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1284'. [ 157.203931][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1284'. [ 157.212236][ T4070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.301092][ T8445] netlink: 'syz.8.1290': attribute type 29 has an invalid length. [ 157.310882][ T8443] loop3: detected capacity change from 0 to 512 [ 157.330077][ T8443] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.355744][ T8445] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20000 [ 157.462268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.617292][ T7864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.689708][ T8461] netlink: 'syz.3.1296': attribute type 3 has an invalid length. [ 157.689730][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 157.787955][ T8467] random: crng reseeded on system resumption [ 157.804030][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 158.182878][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.206284][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.502918][ T8485] netlink: 192436 bytes leftover after parsing attributes in process `syz.9.1303'. [ 158.684941][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 158.690753][ T4070] tipc: Node number set to 43690 [ 158.762196][ T8495] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1309'. [ 158.762321][ T8495] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1309'. [ 158.901154][ T8503] loop8: detected capacity change from 0 to 512 [ 158.945112][ T8503] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 158.988874][ T8500] xt_hashlimit: size too large, truncated to 1048576 [ 159.124295][ T8511] loop8: detected capacity change from 0 to 512 [ 159.124587][ T8511] msdos: Unknown parameter 'trusted.' [ 159.180429][ T8511] loop8: detected capacity change from 0 to 512 [ 159.292701][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 159.301441][ T8519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52360 sclass=netlink_route_socket pid=8519 comm=syz.8.1319 [ 159.392540][ T8527] loop3: detected capacity change from 0 to 512 [ 159.430455][ T8527] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.542219][ C1] net_ratelimit: 3 callbacks suppressed [ 159.542240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.545767][ T3307] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 159.545987][ T3307] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 159.607757][ T8520] loop8: detected capacity change from 0 to 32768 [ 159.634971][ T8520] loop8: p1 p3 < > [ 159.842309][ T7858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.007522][ T8546] loop8: detected capacity change from 0 to 512 [ 160.048268][ T8548] netlink: 'syz.9.1327': attribute type 30 has an invalid length. [ 160.068512][ T8546] EXT4-fs (loop8): 1 truncate cleaned up [ 160.090458][ T8548] bond1: option arp_missed_max: invalid value (0) [ 160.090481][ T8548] bond1: option arp_missed_max: allowed values 1 - 255 [ 160.096245][ T8548] bond1 (unregistering): Released all slaves [ 160.123056][ T7456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.196002][ T7456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.235585][ T7456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.258303][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.290885][ T7456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.572226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.594744][ T7456] bridge_slave_1: left allmulticast mode [ 160.594827][ T7456] bridge_slave_1: left promiscuous mode [ 160.594961][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.600546][ T7456] bridge_slave_0: left allmulticast mode [ 160.600648][ T7456] bridge_slave_0: left promiscuous mode [ 160.600766][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.604277][ T8540] loop2: p1 p2 p3 p4 [ 160.604463][ T8540] loop2: p1 start 65792 is beyond EOD, truncated [ 160.604486][ T8540] loop2: p2 size 590592 extends beyond EOD, truncated [ 160.680327][ T8540] loop2: p3 start 524042 is beyond EOD, truncated [ 160.680354][ T8540] loop2: p4 start 131072 is beyond EOD, truncated [ 160.858819][ T7456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.873174][ T7456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.875240][ T7456] bond0 (unregistering): Released all slaves [ 160.918868][ T8576] FAULT_INJECTION: forcing a failure. [ 160.918868][ T8576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.918903][ T8576] CPU: 1 UID: 0 PID: 8576 Comm: syz.2.1332 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.918933][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.918976][ T8576] Call Trace: [ 160.919012][ T8576] [ 160.919022][ T8576] __dump_stack+0x1d/0x30 [ 160.919052][ T8576] dump_stack_lvl+0x95/0xd0 [ 160.919076][ T8576] dump_stack+0x15/0x1b [ 160.919173][ T8576] should_fail_ex+0x262/0x280 [ 160.919208][ T8576] should_fail+0xb/0x20 [ 160.919308][ T8576] should_fail_usercopy+0x1a/0x20 [ 160.919395][ T8576] _copy_from_iter+0xcc/0xe70 [ 160.919426][ T8576] ? __alloc_skb+0x516/0x6f0 [ 160.919522][ T8576] ? __alloc_skb+0x209/0x6f0 [ 160.919546][ T8576] netlink_sendmsg+0x4a4/0x6f0 [ 160.919571][ T8576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.919613][ T8576] ____sys_sendmsg+0x532/0x580 [ 160.919653][ T8576] ___sys_sendmsg+0x195/0x1e0 [ 160.919692][ T8576] __x64_sys_sendmsg+0xd4/0x160 [ 160.919801][ T8576] x64_sys_call+0x22ab/0x2550 [ 160.919831][ T8576] do_syscall_64+0x112/0x360 [ 160.919874][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.919901][ T8576] RIP: 0033:0x7fe9c7cde1d9 [ 160.919919][ T8576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.919948][ T8576] RSP: 002b:00007fe9c6716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.919970][ T8576] RAX: ffffffffffffffda RBX: 00007fe9c7f66090 RCX: 00007fe9c7cde1d9 [ 160.919988][ T8576] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000004 [ 160.920004][ T8576] RBP: 00007fe9c6716090 R08: 0000000000000000 R09: 0000000000000000 [ 160.920018][ T8576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.920031][ T8576] R13: 00007fe9c7f66128 R14: 00007fe9c7f66090 R15: 00007ffc630f6d28 [ 160.920067][ T8576] [ 160.966584][ T7456] tipc: Disabling bearer [ 160.966615][ T7456] tipc: Left network mode [ 161.050209][ T7456] hsr_slave_0: left promiscuous mode [ 161.055558][ T7456] hsr_slave_1: left promiscuous mode [ 161.056165][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.056186][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.067568][ T7456] veth1_vlan: left promiscuous mode [ 161.067599][ T7456] veth0_vlan: left promiscuous mode [ 161.253275][ T7456] team0 (unregistering): Port device team_slave_1 removed [ 161.317320][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 161.317340][ T30] audit: type=1400 audit(1791867417.378:6968): avc: denied { create } for pid=8590 comm="syz.2.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 161.384145][ T30] audit: type=1400 audit(1791867417.448:6969): avc: denied { write } for pid=8582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.388531][ T8597] FAULT_INJECTION: forcing a failure. [ 161.388531][ T8597] name failslab, interval 1, probability 0, space 0, times 0 [ 161.388620][ T8597] CPU: 1 UID: 0 PID: 8597 Comm: syz.4.1338 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.388687][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.388699][ T8597] Call Trace: [ 161.388706][ T8597] [ 161.388713][ T8597] __dump_stack+0x1d/0x30 [ 161.388738][ T8597] dump_stack_lvl+0x95/0xd0 [ 161.388766][ T8597] dump_stack+0x15/0x1b [ 161.388787][ T8597] should_fail_ex+0x262/0x280 [ 161.388815][ T8597] should_failslab+0x8c/0xb0 [ 161.388867][ T8597] __kvmalloc_node_noprof+0x168/0x5c0 [ 161.388957][ T8597] ? xt_alloc_table_info+0x40/0x80 [ 161.388982][ T8597] ? selinux_capable+0x31/0x40 [ 161.389067][ T8597] ? xt_alloc_table_info+0x40/0x80 [ 161.389097][ T8597] xt_alloc_table_info+0x40/0x80 [ 161.389124][ T8597] do_ip6t_set_ctl+0x648/0x990 [ 161.389148][ T8597] ? kstrtoull+0x119/0x150 [ 161.389174][ T8597] ? __rcu_read_unlock+0x4e/0x70 [ 161.389227][ T8597] nf_setsockopt+0x199/0x1b0 [ 161.389377][ T8597] ipv6_setsockopt+0x11a/0x130 [ 161.389440][ T8597] tcp_setsockopt+0x98/0xb0 [ 161.389477][ T8597] sock_common_setsockopt+0x69/0x80 [ 161.389510][ T8597] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 161.389568][ T8597] __sys_setsockopt+0x184/0x200 [ 161.389599][ T8597] __x64_sys_setsockopt+0x64/0x80 [ 161.389628][ T8597] x64_sys_call+0x248f/0x2550 [ 161.389761][ T8597] do_syscall_64+0x112/0x360 [ 161.389854][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.389880][ T8597] RIP: 0033:0x7f9e6e4ae1d9 [ 161.390080][ T8597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.390128][ T8597] RSP: 002b:00007f9e6cf07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.390149][ T8597] RAX: ffffffffffffffda RBX: 00007f9e6e735fa0 RCX: 00007f9e6e4ae1d9 [ 161.390164][ T8597] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 161.390176][ T8597] RBP: 00007f9e6cf07090 R08: 0000000000000628 R09: 0000000000000000 [ 161.390348][ T8597] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.390365][ T8597] R13: 00007f9e6e736038 R14: 00007f9e6e735fa0 R15: 00007fffe8dec5f8 [ 161.390406][ T8597] [ 161.456192][ T8600] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.545937][ T30] audit: type=1400 audit(1791867417.608:6970): avc: denied { write } for pid=8604 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.644420][ T30] audit: type=1400 audit(1791867417.688:6971): avc: denied { connect } for pid=8599 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.644457][ T30] audit: type=1400 audit(1791867417.688:6972): avc: denied { ioctl } for pid=8599 comm="syz.2.1337" path="socket:[23494]" dev="sockfs" ino=23494 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.644485][ T30] audit: type=1400 audit(1791867417.688:6973): avc: denied { read } for pid=8599 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.646209][ T3025] 8021q: adding VLAN 0 to HW filter on device eth13 [ 161.713988][ T7456] IPVS: stop unused estimator thread 0... [ 161.877448][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.877498][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.877600][ T8555] bridge_slave_0: entered allmulticast mode [ 161.878241][ T8555] bridge_slave_0: entered promiscuous mode [ 161.879959][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.879993][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.880119][ T8555] bridge_slave_1: entered allmulticast mode [ 161.880706][ T8555] bridge_slave_1: entered promiscuous mode [ 161.897021][ T8555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.898299][ T8555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.937777][ T8555] team0: Port device team_slave_0 added [ 161.938757][ T8555] team0: Port device team_slave_1 added [ 161.987627][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.987644][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.987679][ T8555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.989621][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.989637][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.989673][ T8555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.148641][ T8555] hsr_slave_0: entered promiscuous mode [ 162.151213][ T8555] hsr_slave_1: entered promiscuous mode [ 162.151679][ T8555] debugfs: 'hsr0' already exists in 'hsr' [ 162.151696][ T8555] Cannot create hsr debugfs directory [ 162.194688][ T30] audit: type=1400 audit(1791867418.258:6974): avc: denied { write } for pid=8624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.301909][ T3025] 8021q: adding VLAN 0 to HW filter on device eth14 [ 162.323803][ T30] audit: type=1400 audit(1791867418.338:6975): avc: denied { write } for pid=8647 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.545962][ T30] audit: type=1400 audit(1791867418.608:6976): avc: denied { write } for pid=8652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.610750][ T30] audit: type=1400 audit(1791867418.668:6977): avc: denied { write } for pid=8669 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.668034][ T8555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.670613][ T8555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.671123][ T8555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.697786][ T8555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.699031][ T3025] 8021q: adding VLAN 0 to HW filter on device eth15 [ 162.701758][ T8555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.718065][ T8555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.718835][ T8555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.724365][ T8555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.758556][ T8681] set_capacity_and_notify: 2 callbacks suppressed [ 162.758586][ T8681] loop4: detected capacity change from 0 to 256 [ 162.818726][ T8555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.838583][ T8555] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.851206][ T7451] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.851245][ T7451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.865313][ T7451] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.865355][ T7451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.030637][ T8694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12048 sclass=netlink_route_socket pid=8694 comm=syz.9.1351 [ 163.147196][ T3025] 8021q: adding VLAN 0 to HW filter on device eth16 [ 163.190134][ T8716] 9p: Bad value for 'rfdno' [ 163.222805][ T8716] loop4: detected capacity change from 0 to 128 [ 163.368299][ T8555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.589328][ T8555] veth0_vlan: entered promiscuous mode [ 163.603467][ T8555] veth1_vlan: entered promiscuous mode [ 163.636666][ T8555] veth0_macvtap: entered promiscuous mode [ 163.641768][ T8555] veth1_macvtap: entered promiscuous mode [ 163.681928][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.697849][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.712436][ T7451] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.712598][ T7451] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.712635][ T7451] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.712682][ T7451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.776730][ T8761] __nla_validate_parse: 5 callbacks suppressed [ 163.776752][ T8761] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1362'. [ 163.776772][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 163.842300][ T8765] loop8: detected capacity change from 0 to 128 [ 164.017944][ T7076] bridge_slave_1: left allmulticast mode [ 164.017968][ T7076] bridge_slave_1: left promiscuous mode [ 164.018096][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.020490][ T7076] bridge_slave_0: left allmulticast mode [ 164.020514][ T7076] bridge_slave_0: left promiscuous mode [ 164.020697][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.071406][ T8787] loop2: detected capacity change from 0 to 128 [ 164.140362][ T8787] vfat: Unknown parameter '@.¥—Þ{ …B/9”Nɨ�FFÔ$Í÷a}ÞgÞW|&î_{|·TðÒ«ªPÜ($5u ¥£¶¹ö1ÄQukê÷…o~ºzýÆÙ\ne͘ÕìúŸcÌÒÏÏïÝòËËêÂÆÓ¥g1í¥nî¿Ï¼Ý‹îý°ÿiýNÑ3EÏ”+Uc™ÍJ¥jm:¶Ù*z¥´1WÛòlS' [ 164.171894][ T8792] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 164.171924][ T8792] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 164.173855][ T8792] vhci_hcd vhci_hcd.0: Device attached [ 164.201133][ T7076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.203345][ T7076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.225808][ T7076] bond0 (unregistering): Released all slaves [ 164.228037][ T7076] bond1 (unregistering): Released all slaves [ 164.236756][ T7076] bond2 (unregistering): Released all slaves [ 164.245017][ T7076] bond3 (unregistering): Released all slaves [ 164.283494][ T7076] tipc: Left network mode [ 164.302727][ T7076] hsr_slave_0: left promiscuous mode [ 164.303104][ T7076] hsr_slave_1: left promiscuous mode [ 164.303521][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.303847][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.330799][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1369'. [ 164.330887][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1369'. [ 164.339874][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 164.358420][ T8803] loop1: detected capacity change from 0 to 164 [ 164.384198][ T8803] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 164.412477][ T4493] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 164.472711][ T7076] team0 (unregistering): Port device team_slave_1 removed [ 164.567876][ T8787] loop2: detected capacity change from 0 to 512 [ 164.698580][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1373'. [ 164.698609][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1373'. [ 164.756782][ T8795] vhci_hcd: connection reset by peer [ 164.759977][ T7456] vhci_hcd vhci_hcd.1: stop threads [ 164.760001][ T7456] vhci_hcd vhci_hcd.1: release socket [ 164.760078][ T7456] vhci_hcd vhci_hcd.1: disconnect device [ 164.805150][ T8838] loop8: detected capacity change from 0 to 2048 [ 164.808805][ T8838] EXT4-fs: Ignoring removed orlov option [ 164.808828][ T8838] EXT4-fs: Ignoring removed i_version option [ 164.855711][ T8838] EXT4-fs mount: 8 callbacks suppressed [ 164.855730][ T8838] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.855855][ T8838] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.869272][ T8838] No source specified [ 164.942497][ T8838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.980319][ T7076] IPVS: stop unused estimator thread 0... [ 165.041937][ T8860] loop2: detected capacity change from 0 to 512 [ 165.057871][ T8860] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.090934][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.090973][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.091208][ T8779] bridge_slave_0: entered allmulticast mode [ 165.091651][ T8779] bridge_slave_0: entered promiscuous mode [ 165.121946][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.129525][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.129768][ T8779] bridge_slave_1: entered allmulticast mode [ 165.130626][ T8779] bridge_slave_1: entered promiscuous mode [ 165.185668][ T8779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.188462][ T8779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.235298][ T8779] team0: Port device team_slave_0 added [ 165.236252][ T8779] team0: Port device team_slave_1 added [ 165.262825][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.262842][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.262874][ T8779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.263416][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.263428][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.263514][ T8779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.394126][ T8892] netlink: 'syz.1.1384': attribute type 10 has an invalid length. [ 165.411515][ T8779] hsr_slave_0: entered promiscuous mode [ 165.411882][ T8779] hsr_slave_1: entered promiscuous mode [ 165.415011][ T8779] debugfs: 'hsr0' already exists in 'hsr' [ 165.415032][ T8779] Cannot create hsr debugfs directory [ 165.714254][ T8931] ./dev/sda1: Can't open blockdev [ 165.831255][ T8779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.834100][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.834656][ T8779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.846332][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.847225][ T8779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.854998][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.857326][ T8779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.866941][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.999856][ T8968] loop1: detected capacity change from 0 to 512 [ 166.000373][ T8968] EXT4-fs: test_dummy_encryption option not supported [ 166.026206][ T8779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.053250][ T8779] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.062039][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.062078][ T7454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.070921][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.070966][ T7456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.082297][ T8971] loop8: detected capacity change from 0 to 128 [ 166.103972][ T8971] FAT-fs (loop8): bogus number of FAT structure [ 166.103990][ T8971] FAT-fs (loop8): Can't find a valid FAT filesystem [ 166.134723][ T8974] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.138523][ T8974] ext4 filesystem being mounted at /322/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.230657][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.274833][ T8985] ip6t_rt: address list match requested but addrnr is 0 [ 166.364230][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 166.364289][ T30] audit: type=1400 audit(1791867422.428:7124): avc: denied { write } for pid=8969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.377177][ T8999] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1397'. [ 166.436952][ T8779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.446264][ T9011] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 166.455209][ T9011] bond1 (unregistering): Released all slaves [ 166.485140][ T30] audit: type=1400 audit(1791867422.548:7125): avc: denied { write } for pid=9012 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.621261][ T8779] veth0_vlan: entered promiscuous mode [ 166.636050][ T8779] veth1_vlan: entered promiscuous mode [ 166.719814][ T8779] veth0_macvtap: entered promiscuous mode [ 166.726391][ T8779] veth1_macvtap: entered promiscuous mode [ 166.745842][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.750990][ T30] audit: type=1400 audit(1791867422.808:7126): avc: denied { write } for pid=9025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.755488][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.790086][ T30] audit: type=1400 audit(1791867422.858:7127): avc: denied { setopt } for pid=9053 comm="syz.1.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.826121][ T7101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.830650][ T7101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.830828][ T7101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.831055][ T7101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.831594][ T30] audit: type=1400 audit(1791867422.888:7128): avc: denied { write } for pid=9057 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.855541][ T30] audit: type=1400 audit(1791867422.918:7129): avc: denied { shutdown } for pid=9053 comm="syz.1.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.875897][ T9054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.876917][ T9054] EXT4-fs warning (device loop1): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 166.876960][ T9054] EXT4-fs warning (device loop1): ext4_multi_mount_protect:313: MMP failure info: last update time: 72057595707060727, last update node: , last update device: loop14 [ 167.074929][ T30] audit: type=1400 audit(1791867423.138:7130): avc: denied { connect } for pid=9070 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.087864][ T30] audit: type=1400 audit(1791867423.138:7131): avc: denied { read } for pid=9070 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.153469][ T30] audit: type=1400 audit(1791867423.208:7132): avc: denied { write } for pid=9062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.203256][ T9074] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 167.247091][ T30] audit: type=1400 audit(1791867423.308:7133): avc: denied { write } for pid=9092 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.296527][ T9074] EXT4-fs (loop1): 1 orphan inode deleted [ 167.308780][ T9074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.327304][ T7456] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:28: Failed to release dquot type 1 [ 167.342720][ T9074] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.381665][ T9107] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.381860][ T9107] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.580507][ T7148] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.741310][ T9134] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1424'. [ 167.821138][ T9080] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.917443][ T9145] FAULT_INJECTION: forcing a failure. [ 167.917443][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 167.917479][ T9145] CPU: 1 UID: 0 PID: 9145 Comm: syz.1.1427 Not tainted syzkaller #0 PREEMPT(lazy) [ 167.917571][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.917639][ T9145] Call Trace: [ 167.917648][ T9145] [ 167.917657][ T9145] __dump_stack+0x1d/0x30 [ 167.917716][ T9145] dump_stack_lvl+0x95/0xd0 [ 167.917742][ T9145] dump_stack+0x15/0x1b [ 167.917785][ T9145] should_fail_ex+0x262/0x280 [ 167.917845][ T9145] should_failslab+0x8c/0xb0 [ 167.917878][ T9145] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 167.917940][ T9145] ? __d_alloc+0x34/0x320 [ 167.918015][ T9145] ? __d_alloc+0x34/0x320 [ 167.918045][ T9145] ? delete_node+0x22a/0x5d0 [ 167.918070][ T9145] __d_alloc+0x34/0x320 [ 167.918100][ T9145] ? d_alloc_pseudo+0x13/0x80 [ 167.918152][ T9145] d_alloc_pseudo+0x1e/0x80 [ 167.918321][ T9145] alloc_path_pseudo+0xa4/0x140 [ 167.918349][ T9145] alloc_file_pseudo+0x55/0x120 [ 167.918380][ T9145] anon_inode_getfd+0xbf/0x190 [ 167.918408][ T9145] btf_new_fd+0x5eb/0x6a0 [ 167.918441][ T9145] bpf_btf_load+0x116/0x130 [ 167.918475][ T9145] __sys_bpf+0xbce/0xc30 [ 167.918505][ T9145] ? do_futex+0x2e0/0x460 [ 167.918612][ T9145] __x64_sys_bpf+0x69/0x80 [ 167.918639][ T9145] x64_sys_call+0xf26/0x2550 [ 167.918667][ T9145] do_syscall_64+0x112/0x360 [ 167.918692][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.918735][ T9145] RIP: 0033:0x7f5ae21ce1d9 [ 167.918753][ T9145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.918772][ T9145] RSP: 002b:00007f5ae0c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.918792][ T9145] RAX: ffffffffffffffda RBX: 00007f5ae2455fa0 RCX: 00007f5ae21ce1d9 [ 167.918805][ T9145] RDX: 0000000000000028 RSI: 00002000000006c0 RDI: 0000000000000012 [ 167.918884][ T9145] RBP: 00007f5ae2265888 R08: 0000000000000000 R09: 0000000000000000 [ 167.918901][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.918935][ T9145] R13: 00007f5ae2456038 R14: 00007f5ae2455fa0 R15: 00007ffc0d5b8028 [ 167.918983][ T9145] [ 168.204280][ T9138] set_capacity_and_notify: 6 callbacks suppressed [ 168.204301][ T9138] loop8: detected capacity change from 0 to 512 [ 168.284385][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 168.288558][ T9165] macvtap0: entered promiscuous mode [ 168.296055][ T9165] macvtap0: left promiscuous mode [ 168.296453][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1429'. [ 168.325539][ T9138] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 168.325886][ T9138] System zones: 1-12 [ 168.359365][ T9138] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.1425: missing EA_INODE flag [ 168.359456][ T9138] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 168.362308][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 168.362331][ C1] EXT4-fs (loop8): initial error at time 1791867424: ext4_xattr_inode_iget:437: inode 12 [ 168.362396][ C1] EXT4-fs (loop8): last error at time 1791867424: ext4_xattr_inode_iget:437: inode 12 [ 168.368117][ T9138] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1425: error while reading EA inode 12 err=-117 [ 168.368248][ T9138] loop8: lost filesystem error report for type 5 error -117 [ 168.374273][ T9138] EXT4-fs (loop8): 1 orphan inode deleted [ 168.390683][ T9165] macvtap0: entered promiscuous mode [ 168.392732][ T9138] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.400311][ T9165] macvtap0: left promiscuous mode [ 168.524664][ T9183] loop2: detected capacity change from 0 to 512 [ 168.560483][ T9183] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.1435: bad orphan inode 15 [ 168.560516][ T9183] loop2: lost filesystem error report for type 5 error -117 [ 168.560657][ T9183] ext4_test_bit(bit=14, block=5) = 0 [ 168.561036][ T9183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.592421][ T9172] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.619662][ T3025] 8021q: adding VLAN 0 to HW filter on device eth1 [ 168.659093][ T7148] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.723896][ T9172] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.783053][ T9183] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1435: inode has both inline data and extents flags [ 168.813893][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.848039][ T9172] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.886758][ T9207] loop2: detected capacity change from 0 to 512 [ 168.900283][ T9207] EXT4-fs: Ignoring removed bh option [ 169.004931][ T9207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.005272][ T9207] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.056318][ T9172] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.101712][ T3025] 8021q: adding VLAN 0 to HW filter on device eth2 [ 169.151326][ T9227] __nla_validate_parse: 1 callbacks suppressed [ 169.151432][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1442'. [ 169.193262][ T9227] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 169.221947][ T9230] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1443'. [ 169.272063][ T7451] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.300304][ T7456] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.302211][ T7456] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.302253][ T7456] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.324155][ T9237] 9p: Bad value for 'rfdno' [ 169.386229][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 169.407190][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.463645][ T9232] loop0: detected capacity change from 0 to 512 [ 169.494754][ T9232] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 169.533824][ T4493] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 169.600966][ T3025] 8021q: adding VLAN 0 to HW filter on device eth3 [ 169.638436][ T9232] EXT4-fs (loop0): 1 orphan inode deleted [ 169.644507][ T9263] syzkaller1: entered promiscuous mode [ 169.644528][ T9263] syzkaller1: entered allmulticast mode [ 169.663603][ T7076] EXT4-fs error (device loop0): ext4_release_dquot:7106: comm kworker/u8:8: Failed to release dquot type 1 [ 169.663627][ T7076] loop0: lost filesystem error report for type 5 error -117 [ 169.683247][ T9237] loop8: detected capacity change from 0 to 128 [ 169.804884][ T7148] tipc: Resetting bearer [ 169.819873][ T7148] tipc: Disabling bearer [ 169.824292][ T9232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.825051][ T9232] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.858876][ T9232] EXT4-fs (loop0): shut down requested (2) [ 169.891530][ T9232] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 169.993857][ T7451] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.999983][ T3025] 8021q: adding VLAN 0 to HW filter on device eth4 [ 170.047646][ T7451] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.179873][ T7451] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.264494][ T7451] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.294467][ T9320] loop2: detected capacity change from 0 to 512 [ 170.333283][ T9320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.333382][ T9320] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.407437][ T7451] bridge_slave_1: left allmulticast mode [ 170.407463][ T7451] bridge_slave_1: left promiscuous mode [ 170.407631][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.408315][ T7451] bridge_slave_0: left allmulticast mode [ 170.408335][ T7451] bridge_slave_0: left promiscuous mode [ 170.408527][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.475918][ T8779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.584164][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 170.644337][ T7451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.645727][ T7451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.647714][ T7451] bond0 (unregistering): Released all slaves [ 170.653863][ T7451] bond1 (unregistering): Released all slaves [ 170.681024][ T9344] bridge_slave_1: left allmulticast mode [ 170.681049][ T9344] bridge_slave_1: left promiscuous mode [ 170.681146][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.694119][ T9344] bridge_slave_0: left allmulticast mode [ 170.694140][ T9344] bridge_slave_0: left promiscuous mode [ 170.694357][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.741506][ T7451] tipc: Left network mode [ 170.782085][ T7451] hsr_slave_0: left promiscuous mode [ 170.783163][ T7451] hsr_slave_1: left promiscuous mode [ 170.783600][ T7451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.783612][ T7451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.785686][ T7451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.785698][ T7451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.814801][ T7451] veth1_macvtap: left promiscuous mode [ 170.814829][ T7451] veth0_macvtap: left promiscuous mode [ 170.814874][ T7451] veth1_vlan: left promiscuous mode [ 170.814988][ T7451] veth0_vlan: left promiscuous mode [ 171.018056][ T7451] team0 (unregistering): Port device team_slave_1 removed [ 171.141907][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.296622][ T9389] veth1_macvtap: left promiscuous mode [ 171.325185][ T7451] IPVS: stop unused estimator thread 0... [ 171.375293][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 171.375309][ T30] audit: type=1326 audit(1791867424.439:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.2.1470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7cde1d9 code=0x7ffc0000 [ 171.375826][ T30] audit: type=1326 audit(1791867424.439:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.2.1470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7cde1d9 code=0x7ffc0000 [ 171.376684][ T30] audit: type=1326 audit(1791867424.439:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.2.1470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7cde1d9 code=0x7ffc0000 [ 171.376717][ T30] audit: type=1326 audit(1791867424.439:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.2.1470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7cde1d9 code=0x7ffc0000 [ 171.380827][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1471'. [ 171.380855][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1471'. [ 171.380902][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1471'. [ 171.414386][ T30] audit: type=1400 audit(1791867424.449:7219): avc: denied { write } for pid=9403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.423012][ T30] audit: type=1326 audit(1791867424.439:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.2.1470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe9c7cde1d9 code=0x7ffc0000 [ 171.448407][ T30] audit: type=1400 audit(1791867424.489:7220): avc: denied { write } for pid=9426 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.459299][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1471'. [ 171.459325][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1471'. [ 171.459369][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1471'. [ 171.464241][ T30] audit: type=1326 audit(1791867424.529:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.2.1470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c7cde1d9 code=0x7ffc0000 [ 171.464324][ T30] audit: type=1326 audit(1791867424.529:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.2.1470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe9c7cddf42 code=0x7ffc0000 [ 171.464354][ T30] audit: type=1326 audit(1791867424.529:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.2.1470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe9c7cddfd7 code=0x7ffc0000 [ 171.518377][ T9431] loop1: detected capacity change from 0 to 512 [ 171.531826][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1471'. [ 171.579380][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.579416][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.579495][ T9305] bridge_slave_0: entered allmulticast mode [ 171.579995][ T9305] bridge_slave_0: entered promiscuous mode [ 171.584608][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.584650][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.584785][ T9305] bridge_slave_1: entered allmulticast mode [ 171.589435][ T9305] bridge_slave_1: entered promiscuous mode [ 171.617799][ T9431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.618206][ T9431] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.640914][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.663812][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.735372][ T9305] team0: Port device team_slave_0 added [ 171.736394][ T9305] team0: Port device team_slave_1 added [ 171.827988][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.828004][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.828039][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.830058][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.830074][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.830105][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.835246][ T8555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.913223][ T9305] hsr_slave_0: entered promiscuous mode [ 171.916271][ T9305] hsr_slave_1: entered promiscuous mode [ 171.916653][ T9305] debugfs: 'hsr0' already exists in 'hsr' [ 171.916668][ T9305] Cannot create hsr debugfs directory [ 172.095587][ T9305] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.151596][ T9460] loop0: detected capacity change from 0 to 512 [ 172.160841][ T9305] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.195511][ T9460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.195619][ T9460] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.245015][ T9305] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.281731][ T9471] loop2: detected capacity change from 0 to 512 [ 172.307826][ T9305] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.377179][ T9471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 172.377213][ T9471] System zones: 1-12 [ 172.377478][ T9471] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.1479: missing EA_INODE flag [ 172.377505][ T9471] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.377701][ T9471] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1479: error while reading EA inode 12 err=-117 [ 172.377729][ T9471] loop2: lost filesystem error report for type 5 error -117 [ 172.377870][ T9471] EXT4-fs (loop2): 1 orphan inode deleted [ 172.378216][ T9471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.421184][ T9305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.480525][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.481440][ T9305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.483589][ T9481] loop1: detected capacity change from 0 to 512 [ 172.513267][ T9481] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 172.518737][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.524962][ T9305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.540431][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.543900][ T9305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.569398][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.713264][ T9481] EXT4-fs (loop1): 1 orphan inode deleted [ 172.720202][ T9481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.729247][ T9481] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.754964][ T7451] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:23: Failed to release dquot type 1 [ 172.765987][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.772980][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.796468][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.808063][ T7451] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.808099][ T7451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.820636][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.820677][ T7076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.901267][ T9305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.081798][ T8779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.218390][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.236535][ T9552] loop2: detected capacity change from 0 to 128 [ 173.260960][ T9552] syz.2.1486: attempt to access beyond end of device [ 173.260960][ T9552] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 173.354181][ T8555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.543643][ T9305] veth0_vlan: entered promiscuous mode [ 173.546304][ T9305] veth1_vlan: entered promiscuous mode [ 173.570950][ T9305] veth0_macvtap: entered promiscuous mode [ 173.578744][ T9305] veth1_macvtap: entered promiscuous mode [ 173.593128][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.603646][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.623317][ T7076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.623941][ T7076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.624197][ T7076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.624337][ T7076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.750686][ T9610] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 173.756474][ T9613] xt_hashlimit: size too large, truncated to 1048576 [ 174.141507][ T9654] loop1: detected capacity change from 0 to 512 [ 174.153780][ T9654] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 174.236714][ T9660] loop2: detected capacity change from 0 to 256 [ 174.252118][ T9672] loop5: detected capacity change from 0 to 736 [ 174.331890][ T9682] __nla_validate_parse: 178 callbacks suppressed [ 174.331912][ T9682] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1509'. [ 174.331931][ T9682] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1509'. [ 174.362439][ T9682] netlink: 'syz.5.1509': attribute type 5 has an invalid length. [ 174.362473][ T9682] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1509'. [ 174.420824][ T3025] 8021q: adding VLAN 0 to HW filter on device eth5 [ 174.422365][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 174.451470][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 174.651808][ T9702] Falling back ldisc for ttyS3. [ 174.803161][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1515'. [ 176.086137][ T9725] loop0: detected capacity change from 0 to 512 [ 176.092850][ T9725] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.1522: iget: bad i_size value: 38620345925642 [ 176.092884][ T9725] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.092993][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 176.093025][ C0] EXT4-fs (loop0): initial error at time 1791867429: ext4_orphan_get:1403: inode 15 [ 176.093059][ C0] EXT4-fs (loop0): last error at time 1791867429: ext4_orphan_get:1403: inode 15 [ 176.094038][ T9725] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1522: couldn't read orphan inode 15 (err -117) [ 176.094066][ T9725] loop0: lost filesystem error report for type 5 error -117 [ 176.094781][ T9725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.392769][ T8779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.412555][ T9735] loop0: detected capacity change from 0 to 512 [ 176.427120][ T9735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.427208][ T9735] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.558222][ T30] kauditd_printk_skb: 301 callbacks suppressed [ 176.558239][ T30] audit: type=1400 audit(1791867429.584:7524): avc: denied { write } for pid=9734 comm="syz.0.1523" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.215204][ T9654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.298672][ T9745] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.310440][ T9748] loop1: detected capacity change from 0 to 512 [ 177.358527][ T8779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.388251][ T30] audit: type=1400 audit(1791867430.361:7525): avc: denied { ioctl } for pid=9755 comm="syz.2.1529" path="socket:[28735]" dev="sockfs" ino=28735 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.432306][ T9752] loop5: detected capacity change from 0 to 512 [ 177.444787][ T9752] EXT4-fs: Ignoring removed nobh option [ 177.447393][ T9752] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 177.447414][ T9752] EXT4-fs (loop5): fragment/cluster size (4096) != block size (1024) [ 177.449220][ T9761] batman_adv: batadv0: Adding interface: veth0 [ 177.449233][ T9761] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.449342][ T9761] batman_adv: batadv0: Interface activated: veth0 [ 177.456711][ T9764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.456731][ T9764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.457786][ T30] audit: type=1400 audit(1791867430.418:7526): avc: denied { lock } for pid=9755 comm="syz.2.1529" path="socket:[28741]" dev="sockfs" ino=28741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.463210][ T9764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.463283][ T9764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.476215][ T9764] batman_adv: batadv0: Interface deactivated: veth0 [ 177.476233][ T9764] batman_adv: batadv0: Removing interface: veth0 [ 177.495295][ T9748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.503447][ T9748] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.527115][ T30] audit: type=1400 audit(1791867430.495:7527): avc: denied { write } for pid=9746 comm="syz.1.1526" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.655275][ T9770] loop2: detected capacity change from 0 to 512 [ 177.677866][ T30] audit: type=1400 audit(1791867430.647:7528): avc: denied { write } for pid=9743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.682727][ T9770] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 177.756501][ T30] audit: type=1400 audit(1791867430.714:7529): avc: denied { write } for pid=9776 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.760456][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1532'. [ 177.761714][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1532'. [ 177.761785][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1532'. [ 177.805164][ T9770] EXT4-fs (loop2): 1 orphan inode deleted [ 177.805618][ T9770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.805894][ T9770] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.818940][ T30] audit: type=1400 audit(1791867430.771:7530): avc: denied { read write } for pid=9771 comm="syz.5.1532" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 177.818999][ T30] audit: type=1400 audit(1791867430.771:7531): avc: denied { open } for pid=9771 comm="syz.5.1532" path="/5/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 177.819393][ T9775] zero sized request [ 177.819411][ T30] audit: type=1400 audit(1791867430.771:7532): avc: denied { ioctl } for pid=9771 comm="syz.5.1532" path="/5/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 177.841694][ T7101] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 177.841775][ T7101] EXT4-fs error (device loop2): ext4_release_dquot:7106: comm kworker/u8:20: Failed to release dquot type 1 [ 177.886597][ T3025] 8021q: adding VLAN 0 to HW filter on device eth6 [ 177.982513][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 177.987516][ T9787] ip_tables: iptables: counters copy to user failed while replacing table [ 177.993348][ T9787] xt_connbytes: Forcing CT accounting to be enabled [ 178.096242][ T9748] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1526'. [ 178.127865][ T4070] hid-generic 0009:A9F3:0008.0004: unknown main item tag 0x0 [ 178.127911][ T4070] hid-generic 0009:A9F3:0008.0004: unknown main item tag 0x0 [ 178.128595][ T4070] hid-generic 0009:A9F3:0008.0004: unknown main item tag 0x0 [ 178.128624][ T4070] hid-generic 0009:A9F3:0008.0004: unknown main item tag 0x0 [ 178.128695][ T4070] hid-generic 0009:A9F3:0008.0004: unknown main item tag 0x0 [ 178.128795][ T4070] hid-generic 0009:A9F3:0008.0004: unknown main item tag 0x0 [ 178.128846][ T4070] hid-generic 0009:A9F3:0008.0004: unknown main item tag 0x0 [ 178.128874][ T4070] hid-generic 0009:A9F3:0008.0004: unknown main item tag 0x0 [ 178.128900][ T4070] hid-generic 0009:A9F3:0008.0004: unknown main item tag 0x0 [ 178.128926][ T4070] hid-generic 0009:A9F3:0008.0004: unknown main item tag 0x0 [ 178.129764][ T4070] hid-generic 0009:A9F3:0008.0004: hidraw0: HID v0.01 Device [syz0] on syz0 [ 178.177477][ T9805] loop5: detected capacity change from 0 to 764 [ 178.213080][ T9804] fido_id[9804]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.223212][ T9785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.360857][ T9810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.360928][ T9810] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.401613][ T7076] IPVS: starting estimator thread 0... [ 178.427391][ T8555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.510947][ T9818] IPVS: using max 2496 ests per chain, 124800 per kthread [ 179.296823][ T9822] ip_tables: iptables: counters copy to user failed while replacing table [ 179.314244][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.389223][ T3025] 8021q: adding VLAN 0 to HW filter on device eth7 [ 179.616313][ T9871] FAULT_INJECTION: forcing a failure. [ 179.616313][ T9871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.616418][ T9871] CPU: 0 UID: 0 PID: 9871 Comm: syz.1.1549 Not tainted syzkaller #0 PREEMPT(lazy) [ 179.616493][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 179.616506][ T9871] Call Trace: [ 179.616514][ T9871] [ 179.616524][ T9871] __dump_stack+0x1d/0x30 [ 179.616552][ T9871] dump_stack_lvl+0x95/0xd0 [ 179.616642][ T9871] dump_stack+0x15/0x1b [ 179.616661][ T9871] should_fail_ex+0x262/0x280 [ 179.616720][ T9871] should_fail+0xb/0x20 [ 179.616745][ T9871] should_fail_usercopy+0x1a/0x20 [ 179.616773][ T9871] _copy_to_user+0x20/0xa0 [ 179.616803][ T9871] simple_read_from_buffer+0xb5/0x130 [ 179.616847][ T9871] proc_fail_nth_read+0x10e/0x150 [ 179.616912][ T9871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.616937][ T9871] vfs_read+0x18e/0x7c0 [ 179.616971][ T9871] ? __rcu_read_unlock+0x4e/0x70 [ 179.617007][ T9871] ? __fget_files+0x184/0x1c0 [ 179.617077][ T9871] ? mutex_lock+0x57/0x90 [ 179.617128][ T9871] ksys_read+0xdc/0x1a0 [ 179.617160][ T9871] __x64_sys_read+0x40/0x50 [ 179.617195][ T9871] x64_sys_call+0x2135/0x2550 [ 179.617249][ T9871] do_syscall_64+0x112/0x360 [ 179.617275][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.617313][ T9871] RIP: 0033:0x7f5ae218ea0e [ 179.617338][ T9871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.617359][ T9871] RSP: 002b:00007f5ae0c26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.617388][ T9871] RAX: ffffffffffffffda RBX: 00007f5ae0c276c0 RCX: 00007f5ae218ea0e [ 179.617405][ T9871] RDX: 000000000000000f RSI: 00007f5ae0c270a0 RDI: 0000000000000004 [ 179.617421][ T9871] RBP: 00007f5ae0c27090 R08: 0000000000000000 R09: 0000000000000000 [ 179.617435][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.617476][ T9871] R13: 00007f5ae2456038 R14: 00007f5ae2455fa0 R15: 00007ffc0d5b8028 [ 179.617498][ T9871] [ 179.648364][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 180.036890][ T3025] 8021q: adding VLAN 0 to HW filter on device eth8 [ 180.372010][ T9900] set_capacity_and_notify: 1 callbacks suppressed [ 180.372057][ T9900] loop0: detected capacity change from 0 to 512 [ 180.467881][ T6680] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 180.505038][ T9912] loop2: detected capacity change from 0 to 128 [ 180.507001][ T9912] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 180.508458][ T9912] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.508712][ T9912] ext2 filesystem being mounted at /363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.832881][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.992243][ T9939] __nla_validate_parse: 1 callbacks suppressed [ 180.992259][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'. [ 181.334081][ T9952] loop0: detected capacity change from 0 to 2048 [ 181.341546][ T9952] EXT4-fs: Ignoring removed orlov option [ 181.341572][ T9952] EXT4-fs: Ignoring removed i_version option [ 181.368657][ T9952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.368774][ T9952] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.438595][ T9952] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.484548][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 181.484571][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 181.484608][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 181.572239][ T9960] ================================================================== [ 181.572274][ T9960] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 181.572316][ T9960] [ 181.572330][ T9960] write to 0xffff8881211afc00 of 8 bytes by task 9959 on cpu 0: [ 181.572349][ T9960] mas_wr_store_entry+0x3c1f/0x5ac0 [ 181.572377][ T9960] mas_store_prealloc+0x421/0x670 [ 181.572401][ T9960] vma_complete+0x3b7/0x830 [ 181.572426][ T9960] __split_vma+0x675/0x720 [ 181.572448][ T9960] vma_modify+0xbf5/0xd50 [ 181.572470][ T9960] vma_modify_flags+0x1be/0x250 [ 181.572492][ T9960] mprotect_fixup+0x382/0x660 [ 181.572516][ T9960] do_mprotect_pkey+0x69f/0x950 [ 181.572544][ T9960] __x64_sys_mprotect+0x48/0x60 [ 181.572573][ T9960] x64_sys_call+0xd54/0x2550 [ 181.572600][ T9960] do_syscall_64+0x112/0x360 [ 181.572621][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.572644][ T9960] [ 181.572650][ T9960] read to 0xffff8881211afc00 of 8 bytes by task 9960 on cpu 1: [ 181.572666][ T9960] mtree_range_walk+0x35a/0x480 [ 181.572696][ T9960] mas_walk+0x1ac/0x340 [ 181.572720][ T9960] lock_vma_under_rcu+0xc9/0x210 [ 181.572751][ T9960] do_user_addr_fault+0x239/0x1060 [ 181.572783][ T9960] exc_page_fault+0x62/0xa0 [ 181.572803][ T9960] asm_exc_page_fault+0x26/0x30 [ 181.572824][ T9960] [ 181.572829][ T9960] value changed: 0xffff888105a0a10e -> 0xffff8881211afc00 [ 181.572843][ T9960] [ 181.572847][ T9960] Reported by Kernel Concurrency Sanitizer on: [ 181.572863][ T9960] CPU: 1 UID: 0 PID: 9960 Comm: syz.0.1566 Not tainted syzkaller #0 PREEMPT(lazy) [ 181.572888][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.572900][ T9960] ================================================================== [ 184.975047][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 190.339895][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 191.134467][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 191.134485][ T30] audit: type=1400 audit(1791867443.342:7552): avc: denied { write } for pid=9989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.155426][ T30] audit: type=1400 audit(1791867443.351:7553): avc: denied { write } for pid=10000 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.353667][ T30] audit: type=1400 audit(1791867443.538:7554): avc: denied { write } for pid=10003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.379288][ T30] audit: type=1400 audit(1791867443.557:7555): avc: denied { write } for pid=10014 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.512185][ T30] audit: type=1400 audit(1791867443.697:7556): avc: denied { write } for pid=10017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.546243][ T30] audit: type=1400 audit(1791867443.725:7557): avc: denied { write } for pid=10028 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1