last executing test programs: 3m29.16312645s ago: executing program 0 (id=113): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x80000000, 0x4, 0x400, 0x8001, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0xa00008, &(0x7f0000000140), 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102f) r0 = syz_open_dev$rtc(&(0x7f0000000300), 0xf0, 0x600) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 3m29.035516564s ago: executing program 0 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000012c0)={0x0, 0x9004}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x0, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r0) (async) close(r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000240)={[{@noprefix}, {@cpuset_v2_mode}]}) (async) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000240)={[{@noprefix}, {@cpuset_v2_mode}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a000004090002310000000008000a40fffffffc0900dfd06bee8972acf20000080005400000000b2c00128014000180090001006c6173740000000004000280140001800c000100636f756e74657200040002800800034000000130140000001100010000000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a000004090002310000000008000a40fffffffc0900dfd06bee8972acf20000080005400000000b2c00128014000180090001006c6173740000000004000280140001800c000100636f756e74657200040002800800034000000130140000001100010000000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24008040, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0x6}, 0x1c) shutdown(r5, 0x1) (async) shutdown(r5, 0x1) sendmmsg$inet6(r5, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x28020005) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000000c0003800800008004000158730000001100010000000000000000000100000a"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m28.798460903s ago: executing program 0 (id=118): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7fffffff, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000800000000000"], 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1, 0xffff}}}, 0x108) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000001940)={[{@nodioread_nolock}, {@debug}, {@journal_checksum}], [{@subj_user={'subj_user', 0x3d, '\x00\x7f\xaa\x12\xfd\x92\x13\xa6a\f\'\x88\xf6\xd9\xd1`n\xb9;\x8c\x95\x904\xb6X:l\x84\tT\x8eg\xc0\xf9 \xa7(\xfc\b\xea-\x13x\x06\xd9\xa8>8l7@\xdd|\viE\x80;d\xe3\xb2'}}, {@subj_type={'subj_type', 0x3d, 'test_dummy_encryption'}}, {@uid_eq={'uid', 0x3d, r4}}, {@appraise_type}, {@euid_lt}]}, 0x0, 0x5fd, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000300)={[{@errors_remount}, {@usrquota}, {@test_dummy_encryption_v1}, {@test_dummy_encryption}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r5, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") timer_gettime(r5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e02, 0x2, @remote, 0x6}, 0xfffffffffffffcf1) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e1a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0xf3a, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r8, 0x9) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000000), 0x4) socket$kcm(0x2, 0xa, 0x2) timer_settime(r5, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m28.342786288s ago: executing program 0 (id=123): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) setregid(0x0, 0x0) r1 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) r2 = syz_open_procfs(r1, &(0x7f0000000ac0)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/15, 0xf, 0x40000000007) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, 0x0, 0x0) 3m27.966705371s ago: executing program 0 (id=125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000087932264cf9eb00982ff4fae60d4e1ee6f47ad543cfe7aeae9739170bc043a4df54a3c64180b6dca0eda3bba9a6250287aadc2bec05742ad1a96798b79f4523cac08000000000000006c887784058d674ef2a447222573b5435713b5517097", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcd6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0x150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010021"], 0x0, 0x26}, 0x28) r4 = syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000100)='./file1\x00', 0xf736ecfabee37281, &(0x7f0000000f40)=ANY=[], 0x25, 0x363, &(0x7f0000000940)="$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") madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) r5 = open(0x0, 0x26540, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r6 = socket(0x10, 0x803, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@delqdisc={0xb8, 0x25, 0x822, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x10}, {0x6, 0x3}, {0xd, 0x1}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x9, 0x1, 0x1, 0x0, 0xb0, 0x6, 0x3}}, {0xa, 0x2, [0x0, 0x3613, 0x2]}}, {{0x1c, 0x1, {0x7f, 0x5, 0x7ff, 0x1, 0x2, 0x1, 0x76, 0x4}}, {0xc, 0x2, [0x5, 0x80, 0xf3, 0x1]}}, {{0x1c, 0x1, {0x2, 0x4, 0xed, 0x3, 0x2, 0x400, 0x0, 0x4}}, {0xc, 0x2, [0x6e, 0x5, 0x7f, 0x4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_RATE={0x6, 0x5, {0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x66}]}, 0xb8}, 0x1, 0x0, 0x0, 0x11}, 0x40) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r10, &(0x7f0000000000)='-0', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000006c0)={0x8, 0xb, 0x1, 'queue0\x00', 0x9}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020000000000e9ffffff000000000000ffb97bd41c74b868ac69a92a6501fc107aaa8bea88ac3b0f9e3379d3c02854810a21b5158f35003b9effe3a6d26e9ca14b634d20983119b3a3ba0003e002e7460d013ddf419f2e3d7b4da4d747f4b4c021863bde5a18dcfee640524c4cd567ed836fe6678711bf6b7505943839617b079a33f60f7202d280e2e71b4ebeb5f1c44d0805666d166eb45fed29b5101d74d29ab9487b17fedc13005748adc3209eaf2d2a89cbd42b26132b78407160076e7631cdf97990015295410704f2d58f48954d", @ANYRES32=r11, @ANYBLOB='\a\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x56592a445bc89e6d) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r11, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r12, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r4, 0x7f, 0x4c23d63f, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m27.561943394s ago: executing program 0 (id=129): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x60) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) 3m27.505234026s ago: executing program 32 (id=129): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x60) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) 2m53.586896752s ago: executing program 3 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000d0000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m50.408868569s ago: executing program 3 (id=420): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/diskstats\x00', 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) lseek(r0, 0xf5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = open(0x0, 0x0, 0x2c) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x8000, 0x43a3bd7a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001880), r4) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="53542dbd7000fddbdf2515000000080014006e66630008000100", @ANYRES32=0x0, @ANYBLOB="2857d7433f7cd96266e62b13694c0d1f5f44bc9d020500c0d43fda4f3a407cfa992a1b2ca7f65c31546629c1afd8719a13bb91b362ba888bd65ffebeabaa68986c2b1240826394bbf9a111cf4b4421a2cbfc9444788df7c9fffd7623f3b82ff5cfcfcaab2a7389a6cb3ff6dc768c9100f64d141c246d588cb9ebfacf60eeec"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x1f, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x7, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x91}, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x21140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) 2m49.173634181s ago: executing program 3 (id=425): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) keyctl$reject(0x14, 0x0, 0x7ffffffff000, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xb2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xfffffffe, 0x7, 0xc, 0x0, 0x7fffffffffffffff}, {0xffffffff, 0x3, 0x10000, 0x400, 0xffffffffffffffff, 0xa}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x5}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000200)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@multicast, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x200, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8aeb0100180000000000000024000000240000000300000001000000000000080300000000000000000000020300000001000069c1ea3fdda471f55401136a3bba41000000001202000000002e00"], 0x0, 0x3f, 0x0, 0x1}, 0xffffffffffffff75) 2m48.974087797s ago: executing program 3 (id=426): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000004c0)='./file0\x00', 0x1000c00, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32, @ANYRES32=r0], 0xff, 0x248, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000003c0)='./bus\x00', &(0x7f00000000c0)='./file0\x00') r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x208203, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000001c0)) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x782f9abb}, 0x28) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 2m48.673158388s ago: executing program 3 (id=428): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000f80)={[{@nogrpid}, {@nodioread_nolock}, {@resgid}, {@mblk_io_submit}, {@block_validity}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7c3, &(0x7f0000001900)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x330, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x20, 0x2, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '\x00\x00 \xb8\x00\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4084) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) socketpair(0x23, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x10, 0x14, '%$[,(:)#([!&'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '!:-,\\\\('}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008801}, 0x200000c1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x50, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x80, 0x6, 0x4, @empty, @private2, 0x1, 0x7800, 0x2, 0x8001}}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000ac0ce09a44a6", 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = io_uring_setup(0xfdd, &(0x7f0000000040)={0x0, 0x80, 0x2, 0x2, 0x151}) io_uring_register$IORING_REGISTER_CLOCK(r10, 0x1d, &(0x7f00000000c0)={0x5}, 0x0) 2m48.31917425s ago: executing program 3 (id=432): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x5) lseek(r0, 0x2000, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r2, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x75fd, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 2m48.163597285s ago: executing program 33 (id=432): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x5) lseek(r0, 0x2000, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r2, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x75fd, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 1m12.565424209s ago: executing program 6 (id=972): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000f80)={[{@nogrpid}, {@nodioread_nolock}, {@resgid}, {@mblk_io_submit}, {@block_validity}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7c3, &(0x7f0000001900)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x330, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x20, 0x2, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '\x00\x00 \xb8\x00\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4084) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) socketpair(0x23, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x10, 0x14, '%$[,(:)#([!&'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '!:-,\\\\('}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008801}, 0x200000c1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x50, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x80, 0x6, 0x4, @empty, @private2, 0x1, 0x7800, 0x2, 0x8001}}) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000ac0ce09a44a6", 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x2) r9 = io_uring_setup(0xfdd, &(0x7f0000000040)={0x0, 0x80, 0x2, 0x2, 0x151}) io_uring_register$IORING_REGISTER_CLOCK(r9, 0x1d, &(0x7f00000000c0)={0x5}, 0x0) 1m12.033876957s ago: executing program 6 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xffffff62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xfff0}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x5c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa, 0xd28}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc9c7, 0xc}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x600000}]}}]}, 0x88}}, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000028dc4297d53c000000fcff9400000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, r10}, 0x14) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d504716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f0000000840)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)=""/130, 0x3b, 0x82, 0x1, 0x10}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x1000000000000001, 0x40802) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0xe}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x8, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) 1m10.75735287s ago: executing program 6 (id=979): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x802, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68580, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x11c8ca, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x6707, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbffffdffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 1m9.642637538s ago: executing program 6 (id=990): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c084}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r2, &(0x7f0000005780)='./file0\x00', 0x44000001) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r4, r4, 0x13, &(0x7f0000000480)={0x3d, 0xffffffff, 0xfffffffb}) ioctl$SIOCSIFHWADDR(r3, 0x89fd, &(0x7f0000000900)={'veth1_to_team\x00', @random="0600002000"}) r5 = socket(0x11, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x20008081}, 0x44040) 1m9.438975125s ago: executing program 6 (id=995): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x2d}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000040)=r1) 1m8.98439208s ago: executing program 6 (id=997): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x72d, 0x2}, 0xb0, 0xff, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x8}, 0x1042e9, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@nodiscard}, {@mblk_io_submit}, {@nouid32}, {@noload}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) r3 = socket$inet6(0xa, 0x800, 0xfc) connect$inet6(r3, 0x0, 0x0) r4 = dup(r3) r5 = open(0x0, 0x1298c2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4008014) ftruncate(r5, 0x200004) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000001340)=ANY=[@ANYRES16=r6, @ANYBLOB="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", @ANYRESOCT=r7, @ANYRES8=r3, @ANYRES16=r0], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000240)='%', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000300)=""/224, 0x63}], 0x2}, 0x2}], 0x1, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d1) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) 1m8.964603461s ago: executing program 34 (id=997): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x72d, 0x2}, 0xb0, 0xff, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x8}, 0x1042e9, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@nodiscard}, {@mblk_io_submit}, {@nouid32}, {@noload}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) r3 = socket$inet6(0xa, 0x800, 0xfc) connect$inet6(r3, 0x0, 0x0) r4 = dup(r3) r5 = open(0x0, 0x1298c2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4008014) ftruncate(r5, 0x200004) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000001340)=ANY=[@ANYRES16=r6, @ANYBLOB="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", @ANYRESOCT=r7, @ANYRES8=r3, @ANYRES16=r0], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000240)='%', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000300)=""/224, 0x63}], 0x2}, 0x2}], 0x1, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d1) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) 34.820290144s ago: executing program 7 (id=1369): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nojournal_checksum}, {@minixdf}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@discard}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") (async) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nojournal_checksum}, {@minixdf}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@discard}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) (async) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="974209943fccfe44fd", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@grpid}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x47a, &(0x7f0000001680)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@grpid}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x47a, &(0x7f0000001680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = socket(0x2d, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x1204, 0x2, 0xffffff7e, 0x6, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x40000c0) r3 = getpid() socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(r3, 0x2, 0x0) (async) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x102802, 0x1000000000000030, 0xfffffffb, 0xa, 0xfff, 0x8001, 0x7ffc, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000280)=ANY=[], 0x6) r6 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000000)) 34.706355968s ago: executing program 7 (id=1372): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x9, 0x18}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r1, &(0x7f00000001c0)=""/178, 0xb2) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x1) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) write$eventfd(r5, &(0x7f0000000240)=0x6, 0x8) 34.663188939s ago: executing program 7 (id=1374): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) keyctl$reject(0x14, 0x0, 0x7ffffffff000, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xb2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xfffffffe, 0x7, 0xc, 0x0, 0x7fffffffffffffff}, {0xffffffff, 0x3, 0x10000, 0x400, 0xffffffffffffffff, 0xa}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x5}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000200)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@multicast, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x200, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8aeb0100180000000000000024000000240000000300000001000000000000080300000000000000000000020300000001000069c1ea3fdda471f55401136a3bba41000000001202000000002e00"], 0x0, 0x3f, 0x0, 0x1}, 0xffffffffffffff75) 34.566350383s ago: executing program 7 (id=1375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001080200"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c00040007000000056f63957f1f657a00000008"], 0x3c}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x10300) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000001c0)={0x4, 0xd6}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xf}, 0x10c0e8, 0x0, 0x1, 0xe12ef4afe1b41682, 0x6, 0x0, 0x7fff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x0, 0x9, 0x10, 0x7fffffff, 0x87]}, &(0x7f0000000180)=0x54) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000040)=0x27, 0x4) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7e0, 0x5c0, 0x5c0, 0x5c0, 0x0, 0x0, 0x710, 0x710, 0x710, 0x710, 0x710, 0x6, 0x0, {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0xb, 0xf], 0xae84, 0x1, 0x1, [@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, @empty, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @mcast1, @loopback, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private2={0xfc, 0x2, '\x00', 0x1}], 0x9}}, @common=@mh={{0x28}, {"d813", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff, 0xffffffff, 0xffffff00, 0xff000000], 'ipvlan1\x00', 'wlan0\x00', {}, {0xff}, 0x67, 0x0, 0x4, 0x99}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x6, 0x1, [0x5, 0x7, 0x6, 0x85d2, 0x7, 0x1, 0x5df1, 0x1, 0x1000, 0x599f, 0x401, 0x8, 0x200, 0x2, 0x689b, 0x4], 0x5}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0xb}}}}, {{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xffff00], [0x0, 0xff, 0xffffff00, 0xff000000], 'pim6reg\x00', 'rose0\x00', {}, {}, 0x2f, 0x0, 0x7, 0x60}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x23, 0x2, 0xc}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x8, 0x1, 0x1, [0x25, 0x8, 0x8, 0x5, 0x8, 0x7, 0xa, 0x4, 0x625, 0x40, 0x2000, 0x2, 0x0, 0x401, 0xfffc, 0x3], 0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x28, 0x8}}}, {{@ipv6={@loopback, @remote, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0x0, 0xffffff00], 'dvmrp1\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x6, 0x7}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d5], 0x3, 0x24, 0x2}}, @common=@srh={{0x30}, {0x29, 0x2, 0x2, 0xf, 0x1, 0x402, 0x40}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@broadcast, 0x37, 0x37, 0x63}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x840) syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_clone(0x81084000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)) 34.266248843s ago: executing program 7 (id=1378): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) fcntl$setflags(r0, 0x2, 0x1) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x480002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000080)=0x9, 0x1ff, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={r3, 0x2, 0x5, [0x4d, 0xfffa, 0x6, 0x4, 0x800]}, 0x12) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000180)={'team_slave_0\x00'}) (async) getsockname$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x10) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') (async) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r5, r2, 0x4, r2}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) fremovexattr(r0, &(0x7f0000000380)=@random={'system.', '(/-}!\x00'}) fchdir(r6) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x2, 0xc06, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4c0c1) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) getpgrp(0xffffffffffffffff) (async) ioctl(r6, 0x4, &(0x7f00000004c0)="9397c6cb0a4340446d") memfd_create(&(0x7f0000000500)='+\x00', 0x4) (async) syz_clone(0x80000, &(0x7f0000000540)="9795e3a028c33349", 0x8, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="ebd0953f8f3b8c50b280a0def69259417c44207d1d00a2be4abc8d5ffd329d5802f59480927bc770de1c60c302096d7e80e0eea0561cf7db655355885144376b4a7fab634c635d769d5813996d13d398a182a5b153687509b67aa113edfd4379579c149e8508713db20591f2ef57ea3e2e2134cad8ef2e96a17568844d") (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000007c0)={r2, 0x0, 0x90, 0x0, &(0x7f0000000680)="e68e32a0524135d71604fb676d6d615d80d074bf21e0c15d3da8d6ef42a6c507626eddd6835c3eeca690f7064df48777c3fbe2272a9b8b105ec991dc99afeaceda754120c29832e219fad6e51ccdc05e7dbe0862390cd327253b8525f3630e35cbdcae2c3cc7250fb19c271d997a67454bda7dffc5044dbd97d8f0fc531ba054988859ad29fb7ab83d1b920f550618a8", 0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000000740)="4e7a07ff3d7bfd4810e174e2d3808b912e0077c1eca2e660739074dcc09681a7e0cf463843c973ca9ec9ec4266e733aae2cf112916cff9226dbeea571e415631ec95d9353793a71b5ec1c23ed74976ff69afa3d9531cebf8d17f6dd2", 0x0, 0x2, 0x0, 0x2}, 0x50) (async) sendmsg(r2, &(0x7f0000001d00)={&(0x7f0000000840)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)="3ddf5d0ee869359a8691abaa6ec4752b2e74156883209ec2f54666332020ceb6df1e387049895ff732721dfd8ce93a8b275c7b11e5bf22ac44e5458f5a04c168be82cc783dff2a7de0475ae6c2b08dfb84d416b30989be2fb7fce2500eca4aa24894aa6cd7fa37c4f0f30bc77a389828ce5b3de9ebbd00162d81fd6cc5fafc27bde95c18", 0x84}], 0x1, &(0x7f00000009c0)=[{0xc8, 0x103, 0x9, "96a59f5d3edbd4409b28b3c808832a1ca6e93fc36b7c74557921d0a3029040923e4148899a8181f623bffa9450b1070d625364e9030ad43b41f9ef3751679535c5447360b756bf6ac43d7048cb049c5625597751605b72e092c2ca9176273c11d36e47c512e45158f29c3f78f18c7c591ce30e08bcb78c0fb8bf0c18ffdff34b0c2be38d379a3030b3df012830c06704bf6e5ecce429113f234eb7702c48a286319b089c804ee602502f09669d2e08d70876a6b0df"}, {0xf0, 0x111, 0xffffffff, "9a7ffbf29f683ba720ee35d27417bc7811eb2c0c8d7f3f8efb70da994fe19ef44ebe33a7181da7538b9661baabf5ecd4b99876584e43959ea813f6fea3052ad9481b9d7ba5f1f36d97138c9624e689c3cc707c0b6a179c66abd94ff0251ca584eb3419406b4178a337b9a894ffe35c3293dad0e347ab7c71dbfc16275f060e250a8bd990580d22989074f6368ee2937ed625e8428bd74afcf33ee70ab7a683b699e9ec2d20f2f387739111c9b9f1b0dc7138330779cb8503d46c50a1075b767c8aa1f85fdbf9e240a554e64e37729a666aeda5cb0ee3a7301d"}, {0xe0, 0x113, 0x7, "9e6e9fdc2e4f718924ecd7d961ac2e418a8cdd25ca2bc8814a8938184d70b0b78a9b34828926b658a5c235d7a40f35058d9d4ad6ff1d4b1da9e7dc9adc16d4e17373c1a05f5db250f8d2bf2b285446f0a6c515a9908e16bdbe35bcdbacf666dd5c9ddd9d9a6010d279cb1b432904c5fbe4d68bb4a4fa939861add8ef1282fb2778eebb2666b04d22e49a91f4a0bcb0250d4c33bcb03b5f8704d1e9ce1933a90851e0b370776d03b9008478f0ab047dcd9277f27c10e9a273e95c4378381d3464c316cb7373afbb466b35d44c"}, {0x1010, 0x3a, 0x2, "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"}, {0x30, 0x111, 0x9, "3159fe5b28068bb4ea1d1494295dc09504d1984a843e04bd78d91e68ff2872"}, {0x38, 0x1, 0x401, "f87685c076dccff40c12bd45d450f799837962f1a3ac2332db5f8e6b0335c4432551e7"}], 0x1310}, 0x20000800) mlockall(0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r8, 0xc0205866, &(0x7f0000001f40)={&(0x7f0000001d40)=0x22f800000000, 0x363b, &(0x7f0000001d80)=[{}, {}], &(0x7f0000001f00)}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x38, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000091}, 0x4c800) 33.711130552s ago: executing program 7 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (fail_nth: 4) 33.675914993s ago: executing program 35 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (fail_nth: 4) 4.204445058s ago: executing program 8 (id=1693): unshare(0x2c020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x4, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r2 = getpid() syz_pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x4}, 0x8142, 0x6, 0x0, 0x4, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x3, 0x5, 0x5, 0xff, 0x105}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x0, 0x9, 0x8}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x1d, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2400000003000000", @ANYRES32, @ANYBLOB="bcb355ac13684bc9016db9af491e444aa7db9f1088d47634a627518fe9c948242c85d4166c51bd814eb06b3133bc4b1b9768a12919c629344449414d93dd734f881c10b8efd5a81870fb6c3fa9d4560dabaf57dd3f118ad909db87bff7140652", @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x220c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x1780) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x7) 4.14610233s ago: executing program 2 (id=1695): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x2d}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000040)=r1) 4.14265915s ago: executing program 8 (id=1696): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000680)='./file0\x00', 0xa0000c, &(0x7f0000000180)={[], [{@dont_appraise}, {@appraise_type}, {@dont_appraise}, {@uid_gt={'uid>', r0}}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="c0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000200)="81", 0x1}], 0x1}}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xff, 0x2, [0x7, 0x0]}, 0xc) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x0, [0x0, 0x0, 0x20000000], 0x2, 0x0, 0x0}, 0x108) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000040)=0xffb7) sendmsg$nl_xfrm(r2, 0x0, 0x20048080) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000f1401042abd7000fddbdf250b004500736d637969620000"], 0x1c}}, 0x20000040) 4.018717914s ago: executing program 2 (id=1699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x0) unshare(0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) lseek(r5, 0x0, 0x3) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x3, 0xfffffffd, 0x4}, {0x9, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x2, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xe}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x5, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x9, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 4.011014514s ago: executing program 8 (id=1700): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047452, 0x2b7a38ee1cca98d2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2}) sendto$packet(r1, &(0x7f0000000240)="09000000e7001400000000803500df8000000088a8000800274e88a800000000", 0x70, 0x4044800, &(0x7f00000000c0)={0x11, 0x88a8, r3, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) 3.861572249s ago: executing program 2 (id=1701): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r5, 0x1, &(0x7f0000000200), &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) unshare(0x34020600) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000700000000040014001a80100004800c000580"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 3.802799041s ago: executing program 1 (id=1702): modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)='anon_inodefs\x00', 0x1204060, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000540)='./bus\x00', 0x1000041) umount2(&(0x7f0000000000)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xaf, 0x4, 0x0, 0x0, 0x0, 0x1c9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xe6, 0x70cb}, 0x601c, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x8) mount$bind(&(0x7f0000000500)='./file1\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x11630a0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}}, 0x800) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x89901) syz_emit_ethernet(0x8a, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff275bf34925d47a2700008100000086dd60104012004c2f00fc0000000000000000000000000000fcff0200000000000000000000000000013c00080067000000242081000000000200000800000086dd080088be00000000100000000100000000000000080022eb00000000200000080200000000000800000000000800655800000000"], 0x0) move_mount(r5, &(0x7f0000000180)='./file0\x00', r5, &(0x7f0000000100)='./file0/../file0\x00', 0x122) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r6 = socket(0x1, 0x2, 0x7fff) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x6a, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x2000c16, &(0x7f0000000600)={[{@nobh}, {@errors_remount}, {@block_validity}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r7 = open$dir(&(0x7f0000000640)='./bus\x00', 0x2080, 0xac) mkdirat(r7, &(0x7f0000000800)='./file0\x00', 0x80) rename(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x80, 0x3, 0x0, 0x1, 0x1173b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x10c601, 0x10004, 0x20da, 0x4, 0xa, 0x20005, 0x4, 0x0, 0x20, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0xfffffffc}, {0x0}, &(0x7f0000000300)=[{&(0x7f000001b640)=""/102389, 0x18ff5}], 0x1, 0x4a, 0x3fffffffffffff}}], 0x48, 0x20000000}, 0x4000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './bus', [{0x20, 'mptcp_pm\x00'}]}, 0x13) 3.701122395s ago: executing program 8 (id=1703): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4180, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x401, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x5, 0x8003}, 0x50) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x10448) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pause() mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2404c081, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4) syz_open_dev$sg(&(0x7f0000000140), 0x688, 0x80081) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6d}, 0x10) 3.630442567s ago: executing program 1 (id=1705): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) keyctl$reject(0x14, 0x0, 0x7ffffffff000, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xb2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xfffffffe, 0x7, 0xc, 0x0, 0x7fffffffffffffff}, {0xffffffff, 0x3, 0x10000, 0x400, 0xffffffffffffffff, 0xa}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x5}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000200)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@multicast, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x200, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8aeb0100180000000000000024000000240000000300000001000000000000080300000000000000000000020300000001000069c1ea3fdda471f55401136a3bba41000000001202000000002e00"], 0x0, 0x3f, 0x0, 0x1}, 0xffffffffffffff75) 3.603095489s ago: executing program 1 (id=1706): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r1 = syz_io_uring_setup(0xc46, &(0x7f0000000280)={0x0, 0x38fa, 0x1, 0x0, 0x361}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) (async) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x7a, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x8, 0xe3e1, 0xcfe}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000940), 0x200001, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000400)={0x1ff, r4, 0x2, {0x40000000002, 0x258}, 0x1f}, 0x1) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) shutdown(r4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f00000000c0)={0x8, 0x9, 0x5}) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, &(0x7f00000000c0)=[{0x2}], 0x1) ioctl$FICLONE(r3, 0x40049409, r0) semop(r6, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) (async) setresgid(0xee00, 0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100050002000a0000001400090000000100"/42], 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x44084) io_setup(0xff, &(0x7f0000000040)=0x0) io_destroy(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000002060102000000000000000000000900020073797a3000000000050005000000000005000100060000000d0003006c6973743a7365740000000000000000000000000000ce36397fe005c20f1b33ddb9fb16ad1eeb6742ccf5fd8900472213400ff459ee7e41a7502ead443cb15fb52c226da35fe73bd3cc7447b7f5dea0fc039c17c4a743d8724ac707d1b8066d7db9010100000000000015beef55e98daad8afad4b94de80096a3e82c3fc5fd5fc152982dceeef6d4cc62a56342e9295e284242f89230414d0031ab093eb92a8be982c738b0341035ff325e2442943f37596bc95b22634d2aa2a39d73f12"], 0x48}}, 0x4000040) 2.986380269s ago: executing program 2 (id=1709): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(r3, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002880)=@newqdisc={0x878, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xd, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x838, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1310}, @TCA_TBF_BURST={0x8, 0x6, 0x7}, @TCA_TBF_PRATE64={0xc, 0x5, 0x2505a3081f14b8c8}, @TCA_TBF_PTAB={0x404, 0x3, [0xf, 0x8, 0x6, 0x1, 0xffffffc0, 0x2, 0x9, 0xfffffff4, 0xad0, 0x5, 0x7, 0x0, 0x3, 0x100, 0x8, 0x10000, 0x2, 0x7, 0x7, 0x1, 0x5, 0x0, 0x5, 0x9, 0x4, 0x2, 0xc00000, 0xffff, 0x3, 0x3ff, 0x7, 0x200, 0x17, 0xffffff3e, 0x101, 0xfd12, 0x8, 0x9, 0x6, 0x9, 0x8, 0x95ef, 0x7, 0x5, 0x8, 0x4, 0x5, 0x7fffffff, 0x4, 0x1000, 0x6, 0x5, 0xa, 0x2, 0x5, 0x3, 0x4, 0x9, 0x800, 0x0, 0x7, 0x9a0, 0x9, 0x6, 0x4, 0x5, 0x9b2, 0x6, 0x7f, 0x5, 0x1, 0x80000000, 0x5, 0x2, 0x4, 0x9e, 0x7fff, 0x9, 0xc, 0x2e56, 0xfffff3cc, 0x8, 0x0, 0x800, 0x7, 0x100, 0x3cc, 0x1, 0xfd6, 0x6, 0x7, 0x2, 0x8001, 0x0, 0xe, 0x0, 0x5, 0x6, 0x0, 0x6, 0x8, 0x8, 0x6, 0x3ff, 0xfff, 0x101, 0x8, 0x4, 0x2, 0x5, 0x6, 0x2, 0x2, 0x7, 0x2, 0x1, 0xfffffffc, 0x0, 0x9, 0x5, 0x6, 0x4, 0x0, 0x17e9, 0xfd, 0x4, 0xa, 0x7, 0x9, 0xed, 0x80, 0x1, 0x594, 0xc79, 0x3, 0x5, 0x1, 0x5, 0x7, 0xd1, 0x7, 0xa2b3, 0x403, 0xffffffc0, 0x58, 0x3, 0x81, 0x82, 0x35, 0x2, 0x3, 0x5, 0xe673, 0x9, 0x7, 0x3, 0x9fd9, 0x0, 0x1, 0x3, 0x2, 0x200, 0x3, 0x5, 0x5, 0x10001, 0x200, 0xfffffffa, 0x95, 0x23f0, 0x101, 0xad, 0x5, 0x29ff, 0x80, 0x0, 0x7, 0x10000, 0x3, 0xfffffffc, 0x4c, 0x6, 0x959, 0x7, 0x0, 0x2, 0x3, 0x9, 0x5, 0x0, 0xd, 0x4, 0x2, 0x3, 0x80000001, 0x1, 0x5, 0xfd, 0xb, 0x5, 0x6, 0x495, 0xfffffff7, 0xf4, 0x8, 0x2ecfc016, 0x101, 0x5, 0xcbf, 0x3, 0x5, 0x234, 0x6, 0x0, 0x6, 0x1, 0x9, 0x6, 0x3, 0x5, 0x8001, 0x1, 0x6, 0x0, 0xc, 0x2, 0x7ff, 0x7f, 0x1, 0xfff, 0x8abd, 0xbba0, 0x0, 0x80, 0x401, 0x1, 0x3, 0xa051fdb9, 0xfffffff3, 0x2, 0x2, 0x2, 0x8, 0x9, 0xffff8001, 0x2, 0x9, 0x3, 0x3ff, 0x8001, 0x0, 0x8, 0x91, 0x80000001, 0x100, 0xfffffffa]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1de3}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x0, 0x2, 0x5, 0x5, 0xff, 0x8, 0x6, 0x7fffffff, 0xe, 0x5, 0x3a5, 0x4, 0x8, 0x1ff, 0xe15c, 0xffff0001, 0x4, 0x5fb, 0x9, 0x9, 0x7, 0x10000, 0x6, 0x1, 0x0, 0x7fff, 0x0, 0x6, 0x9, 0xe3c7, 0x2, 0xd2d, 0x6, 0x1, 0x1, 0x3, 0x5, 0x0, 0x526e, 0x8, 0x1f11, 0x2, 0x0, 0xa1, 0x7ff, 0xffffff7f, 0xffffffff, 0x6, 0xfff, 0x200, 0x8ad, 0x3, 0x6, 0x9ebb, 0x80, 0x0, 0xa, 0x46e2, 0x2, 0x1, 0x1ff, 0x1, 0x4, 0x1, 0x400, 0x3, 0x9, 0x3, 0x9a28, 0x5, 0x0, 0x9, 0x6, 0x8b38, 0xb28, 0x6, 0x9, 0x2, 0x58000, 0x3, 0x8, 0xbcd7, 0x66, 0x5, 0x0, 0x2, 0x5, 0x8, 0x3, 0x58, 0x1, 0x1, 0x9, 0x2, 0x0, 0x82bd, 0xffff, 0x10001, 0x1, 0x8b07, 0x6, 0x8, 0x9, 0x4, 0x1, 0x400, 0x9, 0x0, 0x8, 0x6, 0x0, 0x40, 0xfffffffd, 0x80000001, 0x6, 0x5, 0x2, 0xb, 0x4, 0x5605, 0xabd, 0x1, 0x4, 0xffffffff, 0x81, 0x7, 0x79c87636, 0x8, 0x7, 0xc, 0xa, 0x1, 0x3, 0x3, 0x6, 0x0, 0x1, 0x5, 0x8, 0x8, 0xffff27d2, 0x1, 0x4, 0x80, 0x9, 0x401, 0x7, 0x8, 0x9, 0xffffbbe0, 0xc, 0x2, 0xb, 0xd, 0x7ad7, 0x4, 0x3ff, 0x2, 0x1, 0x1, 0x7, 0x210, 0xffffffff, 0x1000, 0x401, 0x1, 0xfffffffd, 0x0, 0x8, 0x7, 0x1, 0x800, 0xbe88, 0x7, 0x3, 0x2, 0x9, 0xc6, 0x9, 0x4, 0x62f2, 0xfffffff8, 0x7, 0x9, 0xdcf, 0x6, 0x940, 0x2, 0x2, 0xfffffffe, 0x0, 0x7, 0x0, 0x4, 0x4, 0x4, 0x6, 0x7, 0x34fe, 0xaba, 0x7, 0x0, 0x2, 0x3, 0x7, 0x2, 0x9, 0x8001, 0x5, 0x8, 0x43aa4a74, 0x5a, 0xa, 0xfffff800, 0x100, 0xa, 0x5, 0x8, 0x80000, 0x1, 0x7, 0x3, 0x1, 0x737, 0x9, 0x3, 0x4, 0x6, 0x5, 0x0, 0xd, 0x3, 0x13, 0x4, 0xd, 0xde, 0x2, 0x2, 0x6, 0x5, 0x7, 0x401, 0x7, 0xa0b, 0x6, 0x0, 0x7f, 0x1, 0xa, 0x9, 0x9, 0xcef, 0xfb, 0x7bb, 0x3]}, @TCA_TBF_PBURST={0x8, 0x7, 0x132d}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xf4}}]}, 0x878}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x0) 2.797342465s ago: executing program 8 (id=1710): getresuid(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0xd, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x1}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r4, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r5 = socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bind$inet(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x26, 0x1f, 0x0, 0x1f00, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 1.516997759s ago: executing program 5 (id=1713): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) file_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', &(0x7f0000000200)={0x2300, 0x2, 0x6, 0x400}, 0x18, 0x100) close(r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x40, 0x0, 0x9, 0x84452, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xf0a, 0x2}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, r0, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f00000008c0)) mlockall(0x6) io_setup(0x81, &(0x7f0000000400)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe9) (async, rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="6583000000000000000001000000080001007400000008002a01", @ANYRES32=0x0, @ANYBLOB="73279c1b443e5b57e57fc09da707942ef2f1b09f3ab6341e81291f1f599069a5c6b03f9b18566318b410664accf3b305cb8242b52d72b689bca2a07fbb7e2e669236183456ed068560e0485df488"], 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000140)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@delalloc}, {@nombcache}, {@quota}, {@nolazytime}, {@norecovery}]}, 0x3, 0x439, &(0x7f0000000200)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000000000000000000000000000000000ad23d10b702cbeabefd0750000000000"], 0x50) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmmsg$inet(r4, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000) (async, rerun: 64) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (rerun: 64) 1.312542166s ago: executing program 5 (id=1714): inotify_init1(0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40844}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0xfff5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x5a, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xad9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000885}, 0x20084084) 1.312197455s ago: executing program 1 (id=1715): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000", @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="05000000050000000200"/28], 0x50) (async) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@broadcast, @local, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @ni={0x8b, 0x0, 0x0, 0x9329, 0x8001, 0x10000c}}}}}}, 0x0) 1.200963339s ago: executing program 4 (id=1716): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@deltaction={0x14, 0x31, 0x200, 0x70bd24, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x1) r1 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000700)=[{r1}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) r2 = socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x608, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040885}, 0x20000055) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="280000003701000205000000000000000900000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00}\x00\x00\x00\x00\x00\x00 \x00'], 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) 1.18702668s ago: executing program 1 (id=1717): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) keyctl$reject(0x14, 0x0, 0x7ffffffff000, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xb2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xfffffffe, 0x7, 0xc, 0x0, 0x7fffffffffffffff}, {0xffffffff, 0x3, 0x10000, 0x400, 0xffffffffffffffff, 0xa}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x5}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000200)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@multicast, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x200, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8aeb0100180000000000000024000000240000000300000001000000000000080300000000000000000000020300000001000069c1ea3fdda471f55401136a3bba41000000001202000000002e00"], 0x0, 0x3f, 0x0, 0x1}, 0xffffffffffffff75) 1.160426201s ago: executing program 5 (id=1718): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000580)=@urb_type_iso={0x0, {0x2, 0x1}, 0x7f2, 0x40, &(0x7f0000000300)="03dcbc87c6dbbe12802ba58ce6bf1e6c02969e102aac40e6fd19619935cbf4687bf3c585ecb82064da8f9d77bab9b4bb3fb46ca730809c11a53d22e69f1c674f7e42bdeac0abc6ad3ece733a1351c6b7a58d98faabd0f227a4633c5dd4", 0x5d, 0x80000001, 0x8000, 0x48, 0xfff, 0x0, &(0x7f00000004c0)="6182b11765e7a8876669c7db4a2abe7e19865c83b357f938faa7df458be64a40f53b4f", [{0xc6c0, 0x1, 0x7ff}, {0x4, 0x80}, {0x5, 0x0, 0x26f}, {0x5, 0x8}, {0x8001, 0x3, 0x100000}, {0xfe55, 0x5, 0x793}, {0x6, 0x1, 0x5601}, {0x3, 0x5, 0x2}, {0xfffffffc, 0x76f, 0x1ff}, {0x7fff, 0x9, 0x4}, {0x2, 0x2, 0x9}, {0x5, 0x2}, {0x35b, 0x64f, 0x8}, {0x3, 0x589b7697, 0x10001}, {0xf, 0x3, 0x8}, {0x9, 0xffff6899, 0x7f}, {0x401, 0x6, 0x8}, {0x1a, 0x0, 0xf}, {0xe, 0x1c00000}, {0x10, 0x1, 0xffff}, {0x2, 0x0, 0x2}, {0x5, 0x0, 0x4}, {0x60aa4880, 0x7, 0x4}, {0xb6, 0x1, 0x8}, {0x8001, 0xfc0, 0x1}, {0x2, 0x2, 0x1}, {0x100, 0x0, 0x8}, {0x2, 0x9, 0xfffff784}, {0x7, 0x40, 0xffffff08}, {0x0, 0x3, 0x9}, {0x2, 0x1000}, {0x3, 0x1000, 0x9}, {0x1, 0x8, 0xfffff03a}, {0x2, 0x9, 0x4}, {0x7, 0xb, 0x9}, {0x8, 0x7, 0x6}, {0xe, 0x5, 0xfffffff7}, {0x81, 0x2, 0xfd}, {0x5, 0xfaea}, {0x1, 0x3ff, 0x80000001}, {0x1, 0x7fff, 0xec}, {0x6, 0xffffffff, 0x3}, {0x92a, 0x3, 0x1}, {0x2, 0x505, 0x9}, {0x5, 0x800, 0x9}, {0x1, 0xd}, {0x16f9, 0x7, 0x3ff}, {0x5, 0x0, 0x7}, {0xf9, 0x9, 0x7}, {0x0, 0xb, 0x100}, {0x1, 0xfffffffa, 0x3d5e}, {0xfffffff7, 0xf93, 0x7}, {0x2, 0x7, 0x3c}, {0x1, 0x1, 0x1}, {0x9, 0x8}, {0x4, 0x664d0c88, 0x40}, {0x9, 0x5, 0x9}, {0x4, 0x9, 0x5}, {0x7fffffff}, {0xffff, 0x7, 0x2}, {0x3, 0x4, 0x7}, {0x3, 0x7ff, 0x6}, {0x7f, 0x8, 0x18fd5c46}, {0xcbd, 0x1600000, 0xac6}, {0x8001, 0x8000, 0x9}, {0x2, 0x0, 0x5}, {0x2, 0xf9, 0x8}, {0x4, 0x5, 0xa8f}, {0xb9a, 0x7f, 0x4}, {0x9, 0x5, 0x9}, {0x6, 0x3, 0x1}, {0x8dd, 0xc, 0x59e3}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x8, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4051) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x418, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000002000000b70500000800000085000000aa000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x21, 0x8}, 0x8, 0x2, 0x9, 0x0, 0x9, 0x1, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200074ae", @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf25140000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) 986.388656ms ago: executing program 1 (id=1719): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x22, &(0x7f0000001800)=[{0x0}, {&(0x7f0000000040)=""/67, 0x43}], 0x2}, 0x9}], 0x1, 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "20000000002020008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 930.747568ms ago: executing program 5 (id=1720): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800200, 0x4, @perf_config_ext={0x94, 0x7}, 0x500, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_clone(0x2342400, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6c, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000600)={{0x0, 0x2, 0xe, 0x2, 0xd764}, 0x3e92, 0x1000, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x2, 0x1, 0x2}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0x8, 0x0) 594.33071ms ago: executing program 2 (id=1721): ptrace$cont(0x9, 0x0, 0x2, 0x400) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0xffff, 0x0, 0x1ff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x3, 0x300) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x3a58, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x4e20, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000040)='\x00', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @auto="f0466b1829067deb178c4c4e249684b0"}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r6, &(0x7f0000000280)="b748070bb0c19fd6160a15b0d9679f63b50141dd21c91ecc37144e230aaeb8a815b363d5e80486c52b2fa818ac528f08df9a362c158dcaf05ac154961ae6ae11bfad721452f2fe9c38f4d9f3d7634d37da67e4d6588b133f8ed8128bb40ffc300e421c722a6501edb3868dc3054f95636c02426c03d3c3f98c2c3517558f5b4b8786c143c308326aa829d3c175086e6fcaa38d888287252e50b633f05cc8b1f1c09202201eaecc760db5258137ea83a663d08c14357cc741872c6fd3c44539a50fdd8088add6bf4a666232d0b486627b46", 0xd1) 593.85214ms ago: executing program 5 (id=1722): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) poll(&(0x7f00000005c0), 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000002900000006ff0000000000840600000000612e302e61616100"], 0x0, 0x2d}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) inotify_init1(0x800) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0x7fff, 0x6, 0x0) 550.528092ms ago: executing program 8 (id=1723): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) poll(&(0x7f00000005c0), 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000466000/0x3000)=nil, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000002900000006ff0000000000840600000000612e302e61616100"], 0x0, 0x2d}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) inotify_init1(0x800) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0x7fff, 0x6, 0x0) 250.917991ms ago: executing program 4 (id=1724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000004c0)='./file0\x00', 0x1000c00, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32, @ANYRES32=r1], 0xff, 0x248, &(0x7f0000000880)="$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") r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1003, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x782f9abb, 0x10000}, 0x28) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f00000003c0)="f4a82ca469407a38ce488427dd33f10cbb45462c47409285a22c0a5556670df46e60d243c39294486b514a937644078d14d80554f0477134f335f1068e854d9252cfb4bce5d293739824eeac9c1ba4317290281df70514e20dc0b9ff2b7f955e26a74a1d84b9c2ec9032b99a5894a9ce251476aa9d2e28b9429d1ee1b1058cbfc4c8fd4a41ec3129c2a8c026f249f61c1a7371ddc01730c52acb944ca256862ead5d25043e18c5db0596a02bf5c0ea70f926cc533513e56a5a577c35f0", 0xd6, 0x0, 0x0, 0x0, r2}]) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7080ffdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff7f000014d3484e6b117ee567a0ca32e50f39f77bcf5dbbc52f969767708b004bb488970cd0227c06a264486221f9a83d0f505c785d20d4a36dee243cda4f011ddbff29434b0d2d1a83ef111f0826755a40494391440fc53504c7901b4eee9b1eaba4d42d4d0028d3e0c762053da7ef"], 0x58}, 0x1, 0x400000000000000, 0x0, 0x98}, 0x44810) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) close(0x3) unshare(0x2a060400) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="1e030800d3ff71ef288563"], 0xffdd) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r11, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000200)=0x30) 122.829846ms ago: executing program 2 (id=1725): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x92c9, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x610, &(0x7f0000001140)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) write$binfmt_register(r3, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, '\xe9\x19', 0x3a, '(\xe3)$:', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x46, 0x43, 0x4f, 0x43, 0x46, 0x50]}, 0x36) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 110.822076ms ago: executing program 4 (id=1726): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r0, 0x0, 0x20008004) 80.598617ms ago: executing program 4 (id=1727): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000003c0)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000010027bd700402d4df2500000000", @ANYRES32=r4, @ANYBLOB="984e0600c16a010058001280110001006272696467655f736c617665000000004000058005001c00000000000500080001000000ffffffffffffffff05001900020000000500060000000000050001000100000004001800"], 0x78}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x48016) (async) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x11, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9015, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, 0x0, 0x0, 0x4000054) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x1, 0x0, 0x24}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x8}}, @NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xb60}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x112}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7ff}]}]}, 0x58}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x7, r8, 'id1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0, 0x4810}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002020000000000000002000005000000000000000001"], &(0x7f0000001f40)=""/4080, 0x4a, 0xff0, 0xa}, 0x28) 52.414068ms ago: executing program 5 (id=1728): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x2000000, &(0x7f0000000240)={[{@minixdf}, {@discard}, {@resuid={'resuid', 0x3d, r2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@noblock_validity}, {@journal_async_commit}, {@data_ordered}, {@orlov}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) fsetxattr$trusted_overlay_redirect(r5, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r7, 0x0, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000900)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r6, @ANYRES16=r10, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x20000000}}], 0x1, 0x48c0) recvmmsg(r7, &(0x7f00000054c0)=[{{&(0x7f0000000680)=@phonet, 0x80, &(0x7f0000004440)=[{&(0x7f0000000800)=""/241, 0xf1}, {&(0x7f0000000940)=""/7, 0x7}, {&(0x7f0000000a80)=""/202, 0xca}, {&(0x7f0000005500)=""/4105, 0x1009}, {&(0x7f0000003380)=""/106, 0x6a}, {&(0x7f0000003400)=""/38, 0x26}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x7, &(0x7f00000044c0)=""/4096, 0x1000}, 0x80000001}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x9fe84e44e3669ab, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x48, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r13 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000740)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x6}}, {@auto_da_alloc}, {@nojournal_checksum}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r14 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) lgetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)=@known='system.advise\x00', &(0x7f00000001c0)=""/58, 0x3a) r15 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r15, 0xc028660f, &(0x7f0000000140)={0xc, r14, 0x100000000, 0x54, 0x2, 0x293}) epoll_create1(0x0) 51.953678ms ago: executing program 4 (id=1729): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) keyctl$reject(0x14, 0x0, 0x7ffffffff000, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xb2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xfffffffe, 0x7, 0xc, 0x0, 0x7fffffffffffffff}, {0xffffffff, 0x3, 0x10000, 0x400, 0xffffffffffffffff, 0xa}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x5}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000200)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@multicast, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x200, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8aeb0100180000000000000024000000240000000300000001000000000000080300000000000000000000020300000001000069c1ea3fdda471f55401136a3bba41000000001202000000002e00"], 0x0, 0x3f, 0x0, 0x1}, 0xffffffffffffff75) 0s ago: executing program 4 (id=1730): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, '.\x00'}, 0x6e) kernel console output (not intermixed with test programs): 6963][ T28] audit: type=1400 audit(2000000015.528:1928): avc: denied { write } for pid=8206 comm="syz.2.1240" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.804615][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'. [ 218.835556][ T28] audit: type=1400 audit(2000000015.528:1929): avc: denied { setopt } for pid=8206 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 218.836097][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.892049][ T8222] EXT4-fs: Ignoring removed nobh option [ 218.918718][ T8224] ext2: Unknown parameter 'nouser_xattr' [ 218.930645][ T8222] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 219.064257][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.073593][ T8222] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #13: comm syz.7.1243: inode has both inline data and extents flags [ 219.116117][ T8222] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 219.117151][ T8222] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1243: couldn't read orphan inode 13 (err -117) [ 219.127119][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 219.127137][ C0] EXT4-fs (loop7): initial error at time 2000000015: ext4_orphan_get:1397: inode 13 [ 219.127163][ C0] EXT4-fs (loop7): last error at time 2000000015: ext4_orphan_get:1397: inode 13 [ 219.167430][ T8222] loop7: lost filesystem error report for type 5 error -117 [ 219.167939][ T8222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.179574][ T8228] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 219.194192][ T8228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.235526][ T8230] EXT4-fs: test_dummy_encryption option not supported [ 219.251278][ T8228] vhci_hcd vhci_hcd.0: Device attached [ 219.348801][ T8235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.399445][ T8235] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.495608][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.506998][ T9] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 219.638119][ T8233] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.654319][ T8233] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.662382][ T7256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.700395][ T8233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.747593][ T8229] vhci_hcd: connection reset by peer [ 219.758001][ T49] vhci_hcd vhci_hcd.5: stop threads [ 219.766698][ T49] vhci_hcd vhci_hcd.5: release socket [ 219.774588][ T49] vhci_hcd vhci_hcd.5: disconnect device [ 219.854373][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.919315][ T8253] ip6erspan1: entered allmulticast mode [ 219.996872][ T8248] EXT4-fs: test_dummy_encryption option not supported [ 220.162511][ T8268] iso9660: Unknown parameter 'fowner<00000000000000000000K' [ 220.191701][ T8268] vfat: Unknown parameter '' [ 220.518919][ T8275] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1258'. [ 220.572418][ T8277] SELinux: policydb string S does not match my string SE Linux [ 220.612899][ T8277] SELinux: failed to load policy [ 220.624899][ T8278] tipc: Can't bind to reserved service type 0 [ 220.879978][ T8303] ip6erspan0: entered allmulticast mode [ 220.967241][ T8310] FAULT_INJECTION: forcing a failure. [ 220.967241][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 220.980834][ T8314] FAULT_INJECTION: forcing a failure. [ 220.980834][ T8314] name failslab, interval 1, probability 0, space 0, times 0 [ 220.980882][ T8314] CPU: 0 UID: 0 PID: 8314 Comm: syz.4.1272 Tainted: G W syzkaller #0 PREEMPT(full) [ 220.980933][ T8314] Tainted: [W]=WARN [ 220.980941][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.980955][ T8314] Call Trace: [ 220.980962][ T8314] [ 220.980970][ T8314] __dump_stack+0x1d/0x30 [ 220.981024][ T8314] dump_stack_lvl+0x95/0xd0 [ 220.981045][ T8314] dump_stack+0x15/0x1b [ 220.981067][ T8314] should_fail_ex+0x263/0x280 [ 220.981098][ T8314] should_failslab+0x8c/0xb0 [ 220.981163][ T8314] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 220.981270][ T8314] ? __alloc_skb+0x2d6/0x690 [ 220.981293][ T8314] __alloc_skb+0x2d6/0x690 [ 220.981407][ T8314] ? __alloc_skb+0x200/0x690 [ 220.981545][ T8314] xfrm_alloc_compat+0x131/0xdf0 [ 220.981569][ T8314] ? skb_put+0xa9/0xf0 [ 220.981590][ T8314] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 220.981615][ T8314] xfrm_send_policy_notify+0xf93/0x1060 [ 220.981741][ T8314] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 220.981779][ T8314] km_policy_notify+0x62/0xb0 [ 220.981893][ T8314] xfrm_add_policy+0x317/0x470 [ 220.981930][ T8314] xfrm_user_rcv_msg+0x576/0x670 [ 220.981965][ T8314] ? __kfree_skb+0x109/0x150 [ 220.982058][ T8314] ? nlmon_xmit+0x4f/0x60 [ 220.982088][ T8314] ? consume_skb+0x4b/0x130 [ 220.982120][ T8314] netlink_rcv_skb+0x123/0x220 [ 220.982222][ T8314] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 220.982261][ T8314] xfrm_netlink_rcv+0x48/0x60 [ 220.982293][ T8314] netlink_unicast+0x5a8/0x680 [ 220.982355][ T8314] netlink_sendmsg+0x5c8/0x6f0 [ 220.982386][ T8314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.982482][ T8314] ____sys_sendmsg+0x563/0x5b0 [ 220.982510][ T8314] ___sys_sendmsg+0x195/0x1e0 [ 220.982620][ T8314] __x64_sys_sendmsg+0xd4/0x160 [ 220.982660][ T8314] x64_sys_call+0x194c/0x3020 [ 220.982736][ T8314] do_syscall_64+0x12c/0x3b0 [ 220.982768][ T8314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.982792][ T8314] RIP: 0033:0x7f1d679bce59 [ 220.982809][ T8314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.982869][ T8314] RSP: 002b:00007f1d6640f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.982890][ T8314] RAX: ffffffffffffffda RBX: 00007f1d67c35fa0 RCX: 00007f1d679bce59 [ 220.982969][ T8314] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 220.982983][ T8314] RBP: 00007f1d6640f090 R08: 0000000000000000 R09: 0000000000000000 [ 220.982997][ T8314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.983011][ T8314] R13: 00007f1d67c36038 R14: 00007f1d67c35fa0 R15: 00007ffc6e92d578 [ 220.983030][ T8314] [ 221.262953][ T8310] CPU: 1 UID: 0 PID: 8310 Comm: syz.2.1270 Tainted: G W syzkaller #0 PREEMPT(full) [ 221.262984][ T8310] Tainted: [W]=WARN [ 221.262990][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.263002][ T8310] Call Trace: [ 221.263008][ T8310] [ 221.263016][ T8310] __dump_stack+0x1d/0x30 [ 221.263039][ T8310] dump_stack_lvl+0x95/0xd0 [ 221.263057][ T8310] dump_stack+0x15/0x1b [ 221.263073][ T8310] should_fail_ex+0x263/0x280 [ 221.263097][ T8310] should_failslab+0x8c/0xb0 [ 221.263124][ T8310] kmem_cache_alloc_noprof+0x66/0x3f0 [ 221.263151][ T8310] ? __anon_vma_prepare+0x70/0x2f0 [ 221.263170][ T8310] ? __rcu_read_lock+0x36/0x50 [ 221.263189][ T8310] __anon_vma_prepare+0x70/0x2f0 [ 221.263212][ T8310] handle_mm_fault+0x2600/0x2e70 [ 221.263239][ T8310] ? __pfx_shmem_fault+0x10/0x10 [ 221.263267][ T8310] __get_user_pages+0x1290/0x1f10 [ 221.263299][ T8310] get_user_pages_remote+0x1d5/0x6b0 [ 221.263325][ T8310] ? percpu_counter_add_batch+0x12/0x130 [ 221.263355][ T8310] uprobe_mmap+0x332/0xed0 [ 221.263383][ T8310] __mmap_complete+0x13b/0x170 [ 221.263407][ T8310] mmap_region+0x1302/0x20d0 [ 221.263454][ T8310] do_mmap+0x9b2/0xbd0 [ 221.263478][ T8310] vm_mmap_pgoff+0x183/0x2d0 [ 221.263511][ T8310] ksys_mmap_pgoff+0x267/0x310 [ 221.263533][ T8310] x64_sys_call+0x14df/0x3020 [ 221.263559][ T8310] do_syscall_64+0x12c/0x3b0 [ 221.263588][ T8310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.263612][ T8310] RIP: 0033:0x7fcc0e14ce59 [ 221.263629][ T8310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.263648][ T8310] RSP: 002b:00007fcc0cb9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 221.263668][ T8310] RAX: ffffffffffffffda RBX: 00007fcc0e3c5fa0 RCX: 00007fcc0e14ce59 [ 221.263682][ T8310] RDX: 000000000000001e RSI: 0000000000003000 RDI: 0000200000002000 [ 221.263695][ T8310] RBP: 00007fcc0cb9f090 R08: 0000000000000006 R09: 0000000000000000 [ 221.263716][ T8310] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 221.263728][ T8310] R13: 00007fcc0e3c6038 R14: 00007fcc0e3c5fa0 R15: 00007fff018f24f8 [ 221.263746][ T8310] [ 221.263757][ T8310] ref_ctr increment failed for inode: 0x5ae offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881052a72c0 [ 221.499165][ T8309] uprobe: syz.2.1270:8309 failed to unregister, leaking uprobe [ 221.593268][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 221.593281][ T28] audit: type=1400 audit(2000000018.378:1937): avc: granted { setsecparam } for pid=8327 comm="syz.4.1276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 221.632227][ T8329] set_capacity_and_notify: 8 callbacks suppressed [ 221.637108][ T8329] loop1: detected capacity change from 0 to 164 [ 221.676401][ T8335] ip6erspan1: entered allmulticast mode [ 221.689290][ T8333] loop2: detected capacity change from 0 to 256 [ 221.733249][ T28] audit: type=1400 audit(2000000018.518:1938): avc: denied { setattr } for pid=8326 comm="syz.1.1275" name="CAN_RAW" dev="sockfs" ino=22118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.826167][ T8344] netlink: 'syz.5.1283': attribute type 13 has an invalid length. [ 221.848425][ T8346] syz.1.1281 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 221.861519][ T8344] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1283'. [ 221.870824][ T28] audit: type=1400 audit(2000000018.648:1939): avc: denied { setopt } for pid=8345 comm="syz.1.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 221.921151][ T28] audit: type=1326 audit(2000000018.678:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.5.1283" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1e7e4ce59 code=0x0 [ 222.358329][ T8333] loop2: detected capacity change from 0 to 128 [ 222.936703][ T8377] FAULT_INJECTION: forcing a failure. [ 222.936703][ T8377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.950165][ T8377] CPU: 1 UID: 0 PID: 8377 Comm: syz.1.1292 Tainted: G W syzkaller #0 PREEMPT(full) [ 222.950274][ T8377] Tainted: [W]=WARN [ 222.950281][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.950294][ T8377] Call Trace: [ 222.950344][ T8377] [ 222.950352][ T8377] __dump_stack+0x1d/0x30 [ 222.950472][ T8377] dump_stack_lvl+0x95/0xd0 [ 222.950492][ T8377] dump_stack+0x15/0x1b [ 222.950512][ T8377] should_fail_ex+0x263/0x280 [ 222.950548][ T8377] should_fail_alloc_page+0xf2/0x100 [ 222.950649][ T8377] __alloc_frozen_pages_noprof+0x108/0x350 [ 222.950725][ T8377] alloc_pages_mpol+0xb3/0x260 [ 222.950746][ T8377] ? css_rstat_updated+0xbb/0x280 [ 222.950771][ T8377] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 222.950800][ T8377] handle_mm_fault+0x1040/0x2e70 [ 222.951000][ T8377] ? _raw_spin_lock+0x52/0xa0 [ 222.951042][ T8377] __get_user_pages+0x1290/0x1f10 [ 222.951069][ T8377] ? __rcu_read_unlock+0x4e/0x70 [ 222.951140][ T8377] __gup_longterm_locked+0x8d7/0xe30 [ 222.951169][ T8377] ? lockref_put_return+0xf7/0x130 [ 222.951203][ T8377] ? __rcu_read_lock+0x36/0x50 [ 222.951281][ T8377] ? __pte_offset_map+0xef/0x150 [ 222.951302][ T8377] gup_fast_fallback+0x1f2/0x1410 [ 222.951404][ T8377] ? path_openat+0x1ab2/0x2050 [ 222.951437][ T8377] pin_user_pages_fast+0x5f/0x90 [ 222.951465][ T8377] rds_info_getsockopt+0x160/0x3a0 [ 222.951496][ T8377] rds_getsockopt+0x2ce/0x3e0 [ 222.951517][ T8377] ? __pfx_rds_getsockopt+0x10/0x10 [ 222.951545][ T8377] do_sock_getsockopt+0x2f5/0x570 [ 222.951640][ T8377] __x64_sys_getsockopt+0x11d/0x1a0 [ 222.951667][ T8377] x64_sys_call+0x2dcf/0x3020 [ 222.951695][ T8377] do_syscall_64+0x12c/0x3b0 [ 222.951728][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.951797][ T8377] RIP: 0033:0x7fa59941ce59 [ 222.951814][ T8377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.951835][ T8377] RSP: 002b:00007fa597e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 222.951856][ T8377] RAX: ffffffffffffffda RBX: 00007fa599695fa0 RCX: 00007fa59941ce59 [ 222.951898][ T8377] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003 [ 222.951922][ T8377] RBP: 00007fa597e6f090 R08: 0000200000000400 R09: 0000000000000000 [ 222.951937][ T8377] R10: 0000200000019580 R11: 0000000000000246 R12: 0000000000000002 [ 222.951952][ T8377] R13: 00007fa599696038 R14: 00007fa599695fa0 R15: 00007ffd331c43e8 [ 222.951971][ T8377] [ 223.441954][ T8384] loop5: detected capacity change from 0 to 2048 [ 223.460798][ T8384] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 15 [ 223.948313][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'. [ 224.326012][ T28] audit: type=1400 audit(2000000021.108:1941): avc: denied { getopt } for pid=8397 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.596142][ T8401] loop2: detected capacity change from 0 to 164 [ 224.607389][ T9] usb 11-1: enqueue for inactive port 0 [ 224.630481][ T9] usb 11-1: enqueue for inactive port 0 [ 224.717817][ T28] audit: type=1400 audit(2000000021.498:1942): avc: denied { ioctl } for pid=8403 comm="syz.4.1300" path="socket:[22283]" dev="sockfs" ino=22283 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.749073][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 224.771872][ T8404] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1300'. [ 225.258339][ T8424] loop5: detected capacity change from 0 to 1024 [ 225.306025][ T8424] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 225.352350][ T8424] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 225.356040][ T8432] FAULT_INJECTION: forcing a failure. [ 225.356040][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 225.361962][ T8424] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1308: Failed to acquire dquot type 0 [ 225.385793][ T8424] loop5: lost filesystem error report for type 5 error -5 [ 225.391131][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 225.404754][ C1] EXT4-fs (loop5): initial error at time 2000000022: ext4_acquire_dquot:7034 [ 225.413565][ C1] EXT4-fs (loop5): last error at time 2000000022: ext4_acquire_dquot:7034 [ 225.415549][ T8424] EXT4-fs (loop5): 1 truncate cleaned up [ 225.481166][ T8432] CPU: 1 UID: 0 PID: 8432 Comm: syz.4.1309 Tainted: G W syzkaller #0 PREEMPT(full) [ 225.481201][ T8432] Tainted: [W]=WARN [ 225.481213][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.481272][ T8432] Call Trace: [ 225.481281][ T8432] [ 225.481290][ T8432] __dump_stack+0x1d/0x30 [ 225.481372][ T8432] dump_stack_lvl+0x95/0xd0 [ 225.481391][ T8432] dump_stack+0x15/0x1b [ 225.481412][ T8432] should_fail_ex+0x263/0x280 [ 225.481443][ T8432] should_failslab+0x8c/0xb0 [ 225.481529][ T8432] kmem_cache_alloc_noprof+0x66/0x3f0 [ 225.481561][ T8432] ? skb_clone+0x151/0x1f0 [ 225.481598][ T8424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.481618][ T8432] skb_clone+0x151/0x1f0 [ 225.481643][ T8432] __netlink_deliver_tap+0x2c9/0x500 [ 225.481673][ T8432] netlink_unicast+0x653/0x680 [ 225.481704][ T8432] netlink_sendmsg+0x5c8/0x6f0 [ 225.481739][ T8432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.481814][ T8432] ____sys_sendmsg+0x563/0x5b0 [ 225.481898][ T8432] ___sys_sendmsg+0x195/0x1e0 [ 225.481934][ T8432] __x64_sys_sendmsg+0xd4/0x160 [ 225.481962][ T8432] x64_sys_call+0x194c/0x3020 [ 225.481987][ T8432] do_syscall_64+0x12c/0x3b0 [ 225.482096][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.482120][ T8432] RIP: 0033:0x7f1d679bce59 [ 225.482137][ T8432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.482156][ T8432] RSP: 002b:00007f1d6640f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.482177][ T8432] RAX: ffffffffffffffda RBX: 00007f1d67c35fa0 RCX: 00007f1d679bce59 [ 225.482193][ T8432] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 225.482210][ T8432] RBP: 00007f1d6640f090 R08: 0000000000000000 R09: 0000000000000000 [ 225.482266][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.482279][ T8432] R13: 00007f1d67c36038 R14: 00007f1d67c35fa0 R15: 00007ffc6e92d578 [ 225.482300][ T8432] [ 225.482340][ T8432] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1309'. [ 225.697457][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.706819][ T8432] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1309'. [ 225.724915][ T8432] netlink: 'syz.4.1309': attribute type 6 has an invalid length. [ 225.760142][ T8437] loop5: detected capacity change from 0 to 512 [ 225.778336][ T8437] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.794806][ T8437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.795045][ T8432] netlink: 'syz.4.1309': attribute type 5 has an invalid length. [ 225.814973][ T8437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.829202][ T8437] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.897423][ T28] audit: type=1400 audit(2000000022.678:1943): avc: denied { write } for pid=8436 comm="syz.5.1311" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.114864][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.134297][ T28] audit: type=1400 audit(2000000022.798:1944): avc: denied { write } for pid=8436 comm="syz.5.1311" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.301803][ T8443] loop1: detected capacity change from 0 to 2048 [ 226.308664][ T8443] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.315115][ T8443] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.322486][ T8457] loop5: detected capacity change from 0 to 128 [ 226.342896][ T8457] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000f0b) [ 226.350743][ T8457] FAT-fs (loop5): Filesystem has been set read-only [ 226.358093][ T8457] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000f0b) [ 226.370107][ T8457] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000f0b) [ 226.403082][ T8443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.499074][ T8470] random: crng reseeded on system resumption [ 226.528844][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.597658][ T8475] loop1: detected capacity change from 0 to 512 [ 226.621066][ T8475] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 226.629188][ T8475] EXT4-fs (loop1): orphan cleanup on readonly fs [ 226.639841][ T8475] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 226.682852][ T8482] loop5: detected capacity change from 0 to 1024 [ 226.690257][ T8477] can0: slcan on ttyS3. [ 226.697749][ T8482] EXT4-fs: test_dummy_encryption option not supported [ 226.705045][ T8475] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 226.712776][ T8475] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #16: comm syz.1.1322: corrupted xattr block 31: invalid header [ 226.727697][ T8475] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 226.728107][ T8475] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 226.737373][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 226.737417][ C0] EXT4-fs (loop1): initial error at time 2000000023: ext4_xattr_delete_inode:2972: inode 16 [ 226.737500][ C0] EXT4-fs (loop1): last error at time 2000000023: ext4_xattr_delete_inode:2972: inode 16 [ 226.827463][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 226.827477][ T28] audit: type=1400 audit(2000000023.608:1947): avc: denied { ioctl } for pid=8481 comm="syz.5.1324" path="socket:[23141]" dev="sockfs" ino=23141 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.861820][ T8475] EXT4-fs (loop1): 1 orphan inode deleted [ 226.895444][ T8475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.933210][ T8489] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1324'. [ 226.950981][ T8489] loop5: detected capacity change from 0 to 512 [ 227.091283][ T8483] can0 (unregistered): slcan off ttyS3. [ 227.111710][ T8489] EXT4-fs (loop5): 1 orphan inode deleted [ 227.123457][ T8489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.138835][ T8489] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.715649][ T8505] loop7: detected capacity change from 0 to 8192 [ 227.828157][ T68] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 227.881229][ T68] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 227.906745][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.930718][ T7256] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 227.989553][ T7256] FAT-fs (loop7): Filesystem has been set read-only [ 228.102729][ T8536] FAULT_INJECTION: forcing a failure. [ 228.102729][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 228.154871][ T28] audit: type=1400 audit(2000000024.928:1948): avc: denied { write } for pid=8518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.200620][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.4.1333 Tainted: G W syzkaller #0 PREEMPT(full) [ 228.200658][ T8536] Tainted: [W]=WARN [ 228.200666][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.200679][ T8536] Call Trace: [ 228.200733][ T8536] [ 228.200739][ T8536] __dump_stack+0x1d/0x30 [ 228.200761][ T8536] dump_stack_lvl+0x95/0xd0 [ 228.200780][ T8536] dump_stack+0x15/0x1b [ 228.200839][ T8536] should_fail_ex+0x263/0x280 [ 228.200911][ T8536] should_failslab+0x8c/0xb0 [ 228.200944][ T8536] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 228.200977][ T8536] ? __alloc_skb+0x2d6/0x690 [ 228.200996][ T8536] __alloc_skb+0x2d6/0x690 [ 228.201070][ T8536] ? __alloc_skb+0x200/0x690 [ 228.201092][ T8536] netlink_alloc_large_skb+0xbf/0xf0 [ 228.201120][ T8536] netlink_sendmsg+0x40c/0x6f0 [ 228.201177][ T8536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.201203][ T8536] ____sys_sendmsg+0x563/0x5b0 [ 228.201230][ T8536] ___sys_sendmsg+0x195/0x1e0 [ 228.201261][ T8536] __x64_sys_sendmsg+0xd4/0x160 [ 228.201285][ T8536] x64_sys_call+0x194c/0x3020 [ 228.201367][ T8536] do_syscall_64+0x12c/0x3b0 [ 228.201397][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.201422][ T8536] RIP: 0033:0x7f1d679bce59 [ 228.201437][ T8536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.201518][ T8536] RSP: 002b:00007f1d6640f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.201540][ T8536] RAX: ffffffffffffffda RBX: 00007f1d67c35fa0 RCX: 00007f1d679bce59 [ 228.201556][ T8536] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 228.201638][ T8536] RBP: 00007f1d6640f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.201650][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.201665][ T8536] R13: 00007f1d67c36038 R14: 00007f1d67c35fa0 R15: 00007ffc6e92d578 [ 228.201683][ T8536] [ 228.408722][ T8543] loop7: detected capacity change from 0 to 512 [ 228.490127][ T28] audit: type=1400 audit(2000000025.268:1949): avc: denied { write } for pid=8544 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.520248][ T8546] wireguard0: entered promiscuous mode [ 228.535023][ T8543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.548668][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.560582][ T8546] wireguard0: entered allmulticast mode [ 228.595618][ T8543] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.764197][ T7256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.816269][ T28] audit: type=1400 audit(2000000025.598:1950): avc: denied { write } for pid=8550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.850303][ T28] audit: type=1400 audit(2000000025.628:1951): avc: denied { write } for pid=8571 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.614458][ T8584] loop1: detected capacity change from 0 to 1024 [ 229.692422][ T8584] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 229.722702][ T8584] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 229.750927][ T8584] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1342: Failed to acquire dquot type 0 [ 229.784627][ T8584] loop1: lost filesystem error report for type 5 error -5 [ 229.786688][ T8584] EXT4-fs (loop1): 1 truncate cleaned up [ 229.793855][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 229.793871][ C0] EXT4-fs (loop1): initial error at time 2000000026: ext4_acquire_dquot:7034 [ 229.793918][ C0] EXT4-fs (loop1): last error at time 2000000026: ext4_acquire_dquot:7034 [ 229.836534][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.882359][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.923012][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1339'. [ 229.952696][ T8593] can0: slcan on ptm0. [ 229.977562][ T8584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.074446][ T28] audit: type=1400 audit(2000000026.858:1952): avc: denied { write } for pid=8597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.121224][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.193432][ T8607] can0 (unregistered): slcan off ptm0. [ 230.231781][ T28] audit: type=1400 audit(2000000027.008:1953): avc: denied { write } for pid=8615 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.280848][ T8618] loop5: detected capacity change from 0 to 1024 [ 230.342604][ T8618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.375082][ T8618] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.418846][ T8618] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.1346: lblock 3 mapped to illegal pblock 3 (length 3) [ 230.463367][ T8618] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 230.498808][ T8618] EXT4-fs (loop5): This should not happen!! Data will be lost [ 230.498808][ T8618] [ 230.509361][ T8618] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm syz.5.1346: lblock 8 mapped to illegal pblock 8 (length 4) [ 230.525403][ T8618] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 230.552618][ T8618] EXT4-fs (loop5): This should not happen!! Data will be lost [ 230.552618][ T8618] [ 230.552821][ T8618] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm syz.5.1346: lblock 8 mapped to illegal pblock 8 (length 1) [ 230.553152][ T8618] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 230.553179][ T8618] EXT4-fs (loop5): This should not happen!! Data will be lost [ 230.553179][ T8618] [ 230.607001][ T1908] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 230.607437][ T1908] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 230.607463][ T1908] EXT4-fs (loop5): This should not happen!! Data will be lost [ 230.607463][ T1908] [ 230.607478][ T1908] EXT4-fs (loop5): Total free blocks count 0 [ 230.615513][ T3996] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 230.618071][ T8640] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1349'. [ 230.644265][ T8643] netlink: 'syz.5.1348': attribute type 13 has an invalid length. [ 230.747356][ T8643] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1348'. [ 230.867049][ T8659] xt_CT: No such helper "netbios-ns" [ 230.921086][ T8668] loop1: detected capacity change from 0 to 164 [ 231.129947][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 231.139047][ T8675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1361'. [ 231.152082][ T1908] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.166008][ T1908] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.191959][ T68] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.223101][ T68] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.276375][ T8685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.347228][ T8688] --map-set only usable from mangle table [ 231.499526][ T8692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1366'. [ 231.511087][ T8696] loop7: detected capacity change from 0 to 1024 [ 231.747499][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1375'. [ 231.789173][ T8714] loop7: detected capacity change from 0 to 512 [ 231.854856][ T8714] EXT4-fs (loop7): 1 truncate cleaned up [ 231.861046][ T8714] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.905072][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 232.029202][ T7256] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 232.051145][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 232.051161][ T28] audit: type=1400 audit(2000000028.808:1958): avc: denied { write } for pid=7256 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.082637][ T7256] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 232.240556][ T8728] netlink: 'syz.1.1380': attribute type 13 has an invalid length. [ 232.248800][ T28] audit: type=1400 audit(2000000029.018:1959): avc: denied { create } for pid=8725 comm="syz.4.1379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=bluetooth_socket permissive=1 [ 232.275414][ T8728] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1380'. [ 232.291229][ T28] audit: type=1400 audit(2000000029.038:1960): avc: denied { create } for pid=8725 comm="syz.4.1379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 232.320554][ T8726] netlink: 'syz.4.1379': attribute type 4 has an invalid length. [ 232.322050][ T8728] syz_tun: refused to change device tx_queue_len [ 232.341189][ T8726] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1379'. [ 232.352745][ T8728] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 232.360517][ T28] audit: type=1400 audit(2000000029.038:1961): avc: denied { create } for pid=8725 comm="syz.4.1379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 232.412395][ T28] audit: type=1400 audit(2000000029.058:1962): avc: denied { ioctl } for pid=8725 comm="syz.4.1379" path="socket:[23768]" dev="sockfs" ino=23768 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 232.456534][ T8719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.466845][ T28] audit: type=1400 audit(2000000029.098:1963): avc: denied { write } for pid=8725 comm="syz.4.1379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 232.496086][ T124] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.498084][ T28] audit: type=1400 audit(2000000029.098:1964): avc: denied { nlmsg_write } for pid=8725 comm="syz.4.1379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 232.564012][ T124] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.580125][ T28] audit: type=1326 audit(2000000029.138:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="syz.1.1380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x0 [ 232.656236][ T124] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.679693][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 232.681818][ T28] audit: type=1400 audit(2000000029.458:1966): avc: denied { read } for pid=8741 comm="syz.4.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.690202][ T8740] loop1: detected capacity change from 0 to 512 [ 232.772197][ T8740] EXT4-fs (loop1): 1 truncate cleaned up [ 232.792787][ T8740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.806064][ T28] audit: type=1400 audit(2000000029.598:1967): avc: denied { write } for pid=8739 comm="syz.1.1386" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.832148][ T8740] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1386: bg 0: block 465: padding at end of block bitmap is not set [ 232.859858][ T124] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.885050][ T8740] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 232.914499][ T8740] EXT4-fs (loop1): This should not happen!! Data will be lost [ 232.914499][ T8740] [ 232.937969][ T8740] EXT4-fs (loop1): Total free blocks count 0 [ 232.944092][ T8754] netlink: 'syz.4.1387': attribute type 11 has an invalid length. [ 232.952484][ T8740] EXT4-fs (loop1): Free/Dirty block details [ 232.996466][ T124] bridge_slave_1: left allmulticast mode [ 232.996497][ T8740] EXT4-fs (loop1): free_blocks=0 [ 232.996528][ T8740] EXT4-fs (loop1): dirty_blocks=6 [ 233.013115][ T8740] EXT4-fs (loop1): Block reservation details [ 233.016910][ T124] bridge_slave_1: left promiscuous mode [ 233.019151][ T8740] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 233.043078][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.071957][ T124] bridge_slave_0: left allmulticast mode [ 233.077736][ T124] bridge_slave_0: left promiscuous mode [ 233.087929][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 4 with max blocks 4 with error 28 [ 233.091294][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.100980][ T8740] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #13: comm syz.1.1386: data will be lost [ 233.189492][ T8771] netlink: 'syz.2.1392': attribute type 13 has an invalid length. [ 233.223455][ T8769] loop1: detected capacity change from 0 to 4096 [ 233.246002][ T8771] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1392'. [ 233.305411][ T124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.315917][ T124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.328022][ T124] bond0 (unregistering): Released all slaves [ 233.339537][ T8776] tmpfs: Bad value for 'mpol' [ 233.367395][ T8769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.381922][ T8776] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 233.388451][ T8776] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 233.393374][ T124] bond1 (unregistering): Released all slaves [ 233.439172][ T8776] vhci_hcd vhci_hcd.0: Device attached [ 233.460634][ T8773] FAULT_INJECTION: forcing a failure. [ 233.460634][ T8773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.474030][ T8773] CPU: 0 UID: 0 PID: 8773 Comm: syz.5.1393 Tainted: G W syzkaller #0 PREEMPT(full) [ 233.474063][ T8773] Tainted: [W]=WARN [ 233.474070][ T8773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.474084][ T8773] Call Trace: [ 233.474092][ T8773] [ 233.474127][ T8773] __dump_stack+0x1d/0x30 [ 233.474153][ T8773] dump_stack_lvl+0x95/0xd0 [ 233.474248][ T8773] dump_stack+0x15/0x1b [ 233.474269][ T8773] should_fail_ex+0x263/0x280 [ 233.474298][ T8773] should_fail_alloc_page+0xf2/0x100 [ 233.474326][ T8773] __alloc_frozen_pages_noprof+0x108/0x350 [ 233.474429][ T8773] alloc_pages_mpol+0xb3/0x260 [ 233.474456][ T8773] folio_alloc_mpol_noprof+0x39/0x80 [ 233.474483][ T8773] swap_cache_alloc_folio+0x8b/0x120 [ 233.474596][ T8773] swap_cluster_readahead+0x25f/0x3c0 [ 233.474674][ T8773] shmem_swapin_folio+0x933/0x1370 [ 233.474697][ T8773] ? __rcu_read_unlock+0x4e/0x70 [ 233.474719][ T8773] ? filemap_get_entry+0x292/0x2d0 [ 233.474755][ T8773] shmem_get_folio_gfp+0x278/0xd60 [ 233.474813][ T8773] shmem_fault+0xf6/0x250 [ 233.474897][ T8773] handle_mm_fault+0x1a26/0x2e70 [ 233.474985][ T8773] ? __pfx_shmem_fault+0x10/0x10 [ 233.475010][ T8773] do_user_addr_fault+0x3fd/0x1050 [ 233.475097][ T8773] exc_page_fault+0x62/0xa0 [ 233.475121][ T8773] asm_exc_page_fault+0x26/0x30 [ 233.475141][ T8773] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 233.475183][ T8773] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 1e 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 233.475200][ T8773] RSP: 0018:ffffc90004833dc0 EFLAGS: 00050202 [ 233.475216][ T8773] RAX: 0000000000000dca RBX: 0000000000000028 RCX: 0000000000000028 [ 233.475230][ T8773] RDX: 0000000000000000 RSI: ffffc90004833e18 RDI: 000020000009de80 [ 233.475297][ T8773] RBP: 0000000000000000 R08: 0000000000000574 R09: 0000000000000000 [ 233.475311][ T8773] R10: 0001c90004833e18 R11: 0001c90004833e3f R12: 000020000009dea8 [ 233.475326][ T8773] R13: 00007ffffffff000 R14: 000020000009de80 R15: ffffc90004833e18 [ 233.475346][ T8773] _copy_to_user+0x7c/0xa0 [ 233.475426][ T8773] __se_sys_cachestat+0x683/0x710 [ 233.475454][ T8773] __x64_sys_cachestat+0x55/0x70 [ 233.475477][ T8773] x64_sys_call+0x2fb3/0x3020 [ 233.475505][ T8773] do_syscall_64+0x12c/0x3b0 [ 233.475627][ T8773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.475798][ T8773] RIP: 0033:0x7fe1e7e4ce59 [ 233.475816][ T8773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.475904][ T8773] RSP: 002b:00007fe1e68a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 233.475958][ T8773] RAX: ffffffffffffffda RBX: 00007fe1e80c5fa0 RCX: 00007fe1e7e4ce59 [ 233.476024][ T8773] RDX: 000020000009de80 RSI: 0000200000000040 RDI: 0000000000000005 [ 233.476118][ T8773] RBP: 00007fe1e68a7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.476130][ T8773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.476141][ T8773] R13: 00007fe1e80c6038 R14: 00007fe1e80c5fa0 R15: 00007ffdb237f218 [ 233.476210][ T8773] [ 233.822212][ T8779] vhci_hcd: connection closed [ 233.825735][ T68] vhci_hcd vhci_hcd.4: stop threads [ 233.843750][ T68] vhci_hcd vhci_hcd.4: release socket [ 233.844551][ T8771] syz_tun: refused to change device tx_queue_len [ 233.852219][ T68] vhci_hcd vhci_hcd.4: disconnect device [ 233.865838][ T8771] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 233.901275][ T3521] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 233.908580][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'. [ 233.939710][ T8769] gtp0: entered promiscuous mode [ 233.947863][ T8769] gtp0: entered allmulticast mode [ 233.977355][ T124] hsr_slave_0: left promiscuous mode [ 233.985698][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.985774][ T124] hsr_slave_1: left promiscuous mode [ 233.986030][ T124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.017310][ T8789] loop2: detected capacity change from 0 to 2048 [ 234.024635][ T124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.032846][ T124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.043599][ T124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.062686][ T8789] loop2: p3 < > p4 < > [ 234.066960][ T8789] loop2: partition table partially beyond EOD, truncated [ 234.085452][ T8789] loop2: p3 start 4284289 is beyond EOD, truncated [ 234.103040][ T124] veth1_macvtap: left promiscuous mode [ 234.126934][ T124] veth0_macvtap: left promiscuous mode [ 234.142959][ T124] veth1_vlan: left promiscuous mode [ 234.158133][ T124] veth0_vlan: left promiscuous mode [ 234.171295][ T8806] loop1: detected capacity change from 0 to 512 [ 234.183749][ T8806] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1398: Failed to acquire dquot type 1 [ 234.203679][ T8815] netlink: 'syz.2.1399': attribute type 1 has an invalid length. [ 234.224778][ T8806] loop1: lost filesystem error report for type 5 error -117 [ 234.225017][ T8806] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1398: Failed to acquire dquot type 1 [ 234.232431][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 234.232452][ C0] EXT4-fs (loop1): last error at time 2000000031: ext4_acquire_dquot:7034 [ 234.262571][ T8806] loop1: lost filesystem error report for type 5 error -117 [ 234.264812][ T8806] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1398: bg 0: block 248: padding at end of block bitmap is not set [ 234.290632][ T8806] loop1: lost filesystem error report for type 5 error -117 [ 234.290829][ T8806] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 234.309984][ T8806] loop1: lost filesystem error report for type 5 error -117 [ 234.311334][ T8806] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1398: Failed to acquire dquot type 1 [ 234.338660][ T8806] loop1: lost filesystem error report for type 5 error -117 [ 234.340078][ T8806] EXT4-fs (loop1): 1 orphan inode deleted [ 234.376085][ T8806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.389932][ T124] team0 (unregistering): Port device team_slave_1 removed [ 234.401280][ T8806] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.412166][ T124] team0 (unregistering): Port device team_slave_0 removed [ 234.436550][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.540605][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 234.593300][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.612268][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.632149][ T8743] bridge_slave_0: entered allmulticast mode [ 234.648567][ T8743] bridge_slave_0: entered promiscuous mode [ 234.699763][ T8843] netlink: 'syz.5.1406': attribute type 11 has an invalid length. [ 234.722945][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.741270][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.748421][ T8743] bridge_slave_1: entered allmulticast mode [ 234.771848][ T8743] bridge_slave_1: entered promiscuous mode [ 234.814376][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.847268][ T8849] FAULT_INJECTION: forcing a failure. [ 234.847268][ T8849] name failslab, interval 1, probability 0, space 0, times 0 [ 234.865410][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.901204][ T8849] CPU: 1 UID: 0 PID: 8849 Comm: syz.1.1407 Tainted: G W syzkaller #0 PREEMPT(full) [ 234.901235][ T8849] Tainted: [W]=WARN [ 234.901242][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.901254][ T8849] Call Trace: [ 234.901261][ T8849] [ 234.901268][ T8849] __dump_stack+0x1d/0x30 [ 234.901306][ T8849] dump_stack_lvl+0x95/0xd0 [ 234.901330][ T8849] dump_stack+0x15/0x1b [ 234.901365][ T8849] should_fail_ex+0x263/0x280 [ 234.901391][ T8849] should_failslab+0x8c/0xb0 [ 234.901421][ T8849] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 234.901512][ T8849] ? __alloc_skb+0x2d6/0x690 [ 234.901547][ T8849] __alloc_skb+0x2d6/0x690 [ 234.901568][ T8849] ? __alloc_skb+0x200/0x690 [ 234.901588][ T8849] netlink_alloc_large_skb+0xbf/0xf0 [ 234.901613][ T8849] netlink_sendmsg+0x40c/0x6f0 [ 234.901664][ T8849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.901704][ T8849] ____sys_sendmsg+0x563/0x5b0 [ 234.901804][ T8849] ___sys_sendmsg+0x195/0x1e0 [ 234.901836][ T8849] __x64_sys_sendmsg+0xd4/0x160 [ 234.901866][ T8849] x64_sys_call+0x194c/0x3020 [ 234.901893][ T8849] do_syscall_64+0x12c/0x3b0 [ 234.901988][ T8849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.902014][ T8849] RIP: 0033:0x7fa59941ce59 [ 234.902031][ T8849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.902051][ T8849] RSP: 002b:00007fa597e6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.902126][ T8849] RAX: ffffffffffffffda RBX: 00007fa599695fa0 RCX: 00007fa59941ce59 [ 234.902142][ T8849] RDX: 0000000000044004 RSI: 0000200000000000 RDI: 0000000000000004 [ 234.902156][ T8849] RBP: 00007fa597e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 234.902171][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.902184][ T8849] R13: 00007fa599696038 R14: 00007fa599695fa0 R15: 00007ffd331c43e8 [ 234.902205][ T8849] [ 234.908635][ T8855] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1408'. [ 235.187969][ T8743] team0: Port device team_slave_0 added [ 235.220029][ T8743] team0: Port device team_slave_1 added [ 235.246571][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 235.268691][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.285965][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.314823][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.356992][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.371394][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.416421][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1415'. [ 235.435867][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.514988][ T8892] dvmrp0: entered allmulticast mode [ 235.566759][ T8743] hsr_slave_0: entered promiscuous mode [ 235.587500][ T8743] hsr_slave_1: entered promiscuous mode [ 235.611914][ T8743] debugfs: 'hsr0' already exists in 'hsr' [ 235.634161][ T8743] Cannot create hsr debugfs directory [ 236.133924][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 236.239764][ T8743] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 236.249016][ T8743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.276028][ T8743] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 236.293323][ T8743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.301509][ T8743] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 236.319456][ T8743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.331219][ T8743] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 236.340395][ T8743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.414546][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.437872][ T8743] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.456998][ T2083] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.464118][ T2083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.539409][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.546554][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.682816][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 236.876451][ T8743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.915665][ T9012] loop1: detected capacity change from 0 to 256 [ 236.936327][ T9012] msdos: Unknown parameter 'nts' [ 236.978262][ T9012] loop1: detected capacity change from 0 to 1764 [ 237.176106][ T8743] veth0_vlan: entered promiscuous mode [ 237.189031][ T8743] veth1_vlan: entered promiscuous mode [ 237.229887][ T8743] veth0_macvtap: entered promiscuous mode [ 237.244234][ T8743] veth1_macvtap: entered promiscuous mode [ 237.265426][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.295843][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.314497][ T1908] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.335626][ T1908] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.367565][ T1908] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.388254][ T1908] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.408013][ T9043] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1428'. [ 237.442851][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1385'. [ 237.462348][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.488533][ T9068] bridge_slave_1 (unregistering): left allmulticast mode [ 237.516059][ T9068] bridge_slave_1 (unregistering): left promiscuous mode [ 237.533420][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.742386][ T9098] loop1: detected capacity change from 0 to 1024 [ 237.772827][ T9098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.804877][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 237.804892][ T28] audit: type=1400 audit(2000000034.588:1980): avc: denied { write } for pid=9097 comm="syz.1.1432" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.915766][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.953678][ T28] audit: type=1400 audit(2000000034.588:1981): avc: denied { write } for pid=9097 comm="syz.1.1432" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.990776][ T28] audit: type=1400 audit(2000000034.588:1982): avc: denied { write } for pid=9097 comm="syz.1.1432" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.028663][ T28] audit: type=1400 audit(2000000034.588:1983): avc: denied { rename } for pid=9097 comm="syz.1.1432" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 238.129829][ T28] audit: type=1400 audit(2000000034.588:1984): avc: denied { unlink } for pid=9097 comm="syz.1.1432" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 238.231228][ T28] audit: type=1400 audit(2000000034.588:1985): avc: denied { write } for pid=9097 comm="syz.1.1432" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.232902][ T9133] netlink: 'syz.1.1437': attribute type 13 has an invalid length. [ 238.295381][ T9133] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1437'. [ 238.325296][ T9133] syz_tun: refused to change device tx_queue_len [ 238.339258][ T9133] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 238.373547][ T28] audit: type=1326 audit(2000000035.158:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9131 comm="syz.1.1437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x0 [ 238.421347][ T9141] loop5: detected capacity change from 0 to 512 [ 238.592835][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1439'. [ 238.720468][ T28] audit: type=1400 audit(2000000035.498:1987): avc: denied { ioctl } for pid=9157 comm="syz.1.1442" path="socket:[25258]" dev="sockfs" ino=25258 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.847020][ T9163] loop1: detected capacity change from 0 to 1024 [ 238.871713][ T9163] EXT4-fs: Ignoring removed bh option [ 238.918525][ T9165] loop8: detected capacity change from 0 to 512 [ 238.955457][ T9165] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.035026][ T9163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 239.088939][ T9165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 239.123436][ T28] audit: type=1400 audit(2000000035.898:1988): avc: denied { write } for pid=9162 comm="syz.1.1444" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.153988][ T9165] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.304206][ T8743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 239.566083][ T9187] loop5: detected capacity change from 0 to 512 [ 239.581765][ T9187] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1453: inode has both inline data and extents flags [ 239.594958][ T9187] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.595180][ T9187] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1453: couldn't read orphan inode 15 (err -117) [ 239.616146][ T9187] loop5: lost filesystem error report for type 5 error -117 [ 239.619574][ T9187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.626240][ T9197] dummy0: entered allmulticast mode [ 239.645819][ T28] audit: type=1400 audit(2000000036.398:1989): avc: denied { write } for pid=9186 comm="syz.5.1453" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.860830][ T9196] dummy0: left allmulticast mode [ 239.983261][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 240.004058][ T9206] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.173754][ T9210] FAULT_INJECTION: forcing a failure. [ 240.173754][ T9210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.205483][ T9210] CPU: 1 UID: 0 PID: 9210 Comm: syz.2.1461 Tainted: G W syzkaller #0 PREEMPT(full) [ 240.205516][ T9210] Tainted: [W]=WARN [ 240.205522][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.205533][ T9210] Call Trace: [ 240.205540][ T9210] [ 240.205548][ T9210] __dump_stack+0x1d/0x30 [ 240.205637][ T9210] dump_stack_lvl+0x95/0xd0 [ 240.205661][ T9210] dump_stack+0x15/0x1b [ 240.205683][ T9210] should_fail_ex+0x263/0x280 [ 240.205711][ T9210] should_fail+0xb/0x20 [ 240.205763][ T9210] should_fail_usercopy+0x1a/0x20 [ 240.205791][ T9210] _copy_from_user+0x1c/0xb0 [ 240.205821][ T9210] ___sys_sendmsg+0xc1/0x1e0 [ 240.205866][ T9210] __x64_sys_sendmsg+0xd4/0x160 [ 240.205892][ T9210] x64_sys_call+0x194c/0x3020 [ 240.205919][ T9210] do_syscall_64+0x12c/0x3b0 [ 240.205998][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.206019][ T9210] RIP: 0033:0x7fcc0e14ce59 [ 240.206120][ T9210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.206288][ T9210] RSP: 002b:00007fcc0cb9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.206307][ T9210] RAX: ffffffffffffffda RBX: 00007fcc0e3c5fa0 RCX: 00007fcc0e14ce59 [ 240.206367][ T9210] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 240.206379][ T9210] RBP: 00007fcc0cb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.206391][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.206477][ T9210] R13: 00007fcc0e3c6038 R14: 00007fcc0e3c5fa0 R15: 00007fff018f24f8 [ 240.206498][ T9210] [ 240.701630][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.794921][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1463'. [ 240.831421][ T9220] FAULT_INJECTION: forcing a failure. [ 240.831421][ T9220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.892651][ T9220] CPU: 1 UID: 0 PID: 9220 Comm: syz.2.1464 Tainted: G W syzkaller #0 PREEMPT(full) [ 240.892684][ T9220] Tainted: [W]=WARN [ 240.892691][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.892780][ T9220] Call Trace: [ 240.892787][ T9220] [ 240.892794][ T9220] __dump_stack+0x1d/0x30 [ 240.892816][ T9220] dump_stack_lvl+0x95/0xd0 [ 240.892905][ T9220] dump_stack+0x15/0x1b [ 240.892927][ T9220] should_fail_ex+0x263/0x280 [ 240.892959][ T9220] should_fail+0xb/0x20 [ 240.892984][ T9220] should_fail_usercopy+0x1a/0x20 [ 240.893035][ T9220] _copy_to_user+0x20/0xa0 [ 240.893062][ T9220] simple_read_from_buffer+0xb5/0x130 [ 240.893101][ T9220] proc_fail_nth_read+0x10e/0x150 [ 240.893177][ T9220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.893273][ T9220] vfs_read+0x1ab/0x7f0 [ 240.893303][ T9220] ? __rcu_read_unlock+0x4e/0x70 [ 240.893325][ T9220] ? __fget_files+0x184/0x1c0 [ 240.893385][ T9220] ? mutex_lock+0x57/0x90 [ 240.893410][ T9220] ksys_read+0xdc/0x1a0 [ 240.893441][ T9220] __x64_sys_read+0x40/0x50 [ 240.893497][ T9220] x64_sys_call+0x2886/0x3020 [ 240.893577][ T9220] do_syscall_64+0x12c/0x3b0 [ 240.893611][ T9220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.893636][ T9220] RIP: 0033:0x7fcc0e10d68e [ 240.893712][ T9220] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.893795][ T9220] RSP: 002b:00007fcc0cb9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.893814][ T9220] RAX: ffffffffffffffda RBX: 00007fcc0cb9f6c0 RCX: 00007fcc0e10d68e [ 240.893877][ T9220] RDX: 000000000000000f RSI: 00007fcc0cb9f0a0 RDI: 0000000000000004 [ 240.893889][ T9220] RBP: 00007fcc0cb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.893915][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.893926][ T9220] R13: 00007fcc0e3c6038 R14: 00007fcc0e3c5fa0 R15: 00007fff018f24f8 [ 240.893944][ T9220] [ 241.120470][ T9226] loop2: detected capacity change from 0 to 512 [ 241.158555][ T9226] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 241.177126][ T9226] EXT4-fs (loop2): orphan cleanup on readonly fs [ 241.198718][ T9226] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1466: Failed to acquire dquot type 1 [ 241.214388][ T9226] loop2: lost filesystem error report for type 5 error -5 [ 241.220617][ T9226] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1466: bg 0: block 40: padding at end of block bitmap is not set [ 241.227842][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 241.227862][ C0] EXT4-fs (loop2): initial error at time 2000000037: ext4_acquire_dquot:7034 [ 241.227903][ C0] EXT4-fs (loop2): last error at time 2000000037: ext4_acquire_dquot:7034 [ 241.292831][ T9226] loop2: lost filesystem error report for type 5 error -117 [ 241.293047][ T9226] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 241.312732][ T124] Bluetooth: hci0: Frame reassembly failed (-84) [ 241.334105][ T9226] loop2: lost filesystem error report for type 5 error -117 [ 241.334390][ T9226] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.1466: data will be lost [ 241.370038][ T9226] EXT4-fs (loop2): 1 truncate cleaned up [ 241.376134][ T9226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.404645][ T9226] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1466: corrupted xattr block 31: invalid header [ 241.441718][ T9226] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 241.450852][ T9226] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.1466: corrupted xattr block 31: invalid header [ 241.465586][ T9226] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 241.475089][ T9226] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1466: bad symlink. [ 241.503001][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.604527][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 241.616693][ T9250] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 241.625030][ T9250] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 241.804587][ T9254] loop2: detected capacity change from 0 to 512 [ 241.833567][ T9254] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1475: iget: bad i_size value: 38620345925642 [ 241.851627][ T9254] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.852008][ T9254] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1475: couldn't read orphan inode 15 (err -117) [ 241.861282][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 241.861302][ C1] EXT4-fs (loop2): initial error at time 2000000038: ext4_orphan_get:1397: inode 15 [ 241.861336][ C1] EXT4-fs (loop2): last error at time 2000000038: ext4_orphan_get:1397: inode 15 [ 241.906104][ T9259] loop5: detected capacity change from 0 to 1024 [ 241.913223][ T9259] EXT4-fs: Ignoring removed oldalloc option [ 241.919256][ T9259] EXT4-fs: Ignoring removed i_version option [ 241.925854][ T9259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.933633][ T9254] loop2: lost filesystem error report for type 5 error -117 [ 241.934341][ T9254] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.965712][ T9259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.034024][ T9254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9254 comm=syz.2.1475 [ 242.069007][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 242.191440][ T9266] loop2: detected capacity change from 0 to 8192 [ 242.209807][ T9269] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 242.244819][ T9266] loop2: p1 < > p2 p4 < p5 > [ 242.249866][ T9266] loop2: partition table partially beyond EOD, truncated [ 242.257700][ T9266] loop2: p1 start 134217728 is beyond EOD, truncated [ 242.264477][ T9266] loop2: p2 size 591360 extends beyond EOD, truncated [ 242.272420][ T9266] loop2: p5 size 591360 extends beyond EOD, truncated [ 242.832012][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.148401][ T9301] loop1: detected capacity change from 0 to 2048 [ 243.155583][ T9301] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.162666][ T9301] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.186607][ T9301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.322173][ T7280] Bluetooth: hci0: command 0x1003 tx timeout [ 243.328297][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 243.363895][ T9316] netlink: 'syz.5.1493': attribute type 13 has an invalid length. [ 243.373249][ T9316] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1493'. [ 243.388287][ T9313] dvmrp0: entered allmulticast mode [ 243.389892][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.394651][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 243.394663][ T28] audit: type=1326 audit(2000000040.168:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.1493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1e7e4ce59 code=0x0 [ 243.475750][ T9319] netlink: 'syz.1.1494': attribute type 13 has an invalid length. [ 243.486390][ T9319] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1494'. [ 243.496793][ T9319] syz_tun: refused to change device tx_queue_len [ 243.503605][ T9319] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 243.522078][ T28] audit: type=1326 audit(2000000040.308:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.1.1494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x0 [ 244.082606][ T9336] loop8: detected capacity change from 0 to 256 [ 244.308752][ T9342] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9342 comm=syz.5.1502 [ 244.598454][ T9338] loop8: detected capacity change from 0 to 2048 [ 244.633099][ T9338] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.646791][ T9338] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.770572][ T9338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.990431][ T8743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.168806][ T9374] loop5: detected capacity change from 0 to 2048 [ 245.175590][ T9374] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.182039][ T9374] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.207542][ T28] audit: type=1326 audit(2000000041.988:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.8.1513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61544cce59 code=0x0 [ 245.236556][ T9374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.263108][ T9381] loop8: detected capacity change from 0 to 1024 [ 245.272952][ T9381] EXT4-fs: Ignoring removed oldalloc option [ 245.295421][ T9381] EXT4-fs: Ignoring removed i_version option [ 245.305253][ T9381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.349569][ T9385] loop1: detected capacity change from 0 to 512 [ 245.362004][ T9381] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.378457][ T9385] EXT4-fs: Ignoring removed orlov option [ 245.417814][ T9385] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.438903][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.451396][ T28] audit: type=1400 audit(2000000042.238:1995): avc: denied { write } for pid=9376 comm="syz.8.1513" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.477964][ T9385] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1514: corrupted in-inode xattr: e_value size too large [ 245.501162][ T28] audit: type=1400 audit(2000000042.238:1996): avc: denied { create } for pid=9376 comm="syz.8.1513" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.522181][ T28] audit: type=1400 audit(2000000042.278:1997): avc: denied { append open } for pid=9376 comm="syz.8.1513" path="/12/file1/memory.events" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.530019][ T9385] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 245.549634][ T28] audit: type=1326 audit(2000000042.338:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.5.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e7e4ce59 code=0x7ffc0000 [ 245.577805][ T9385] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1514: couldn't read orphan inode 15 (err -117) [ 245.584226][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 245.584242][ C1] EXT4-fs (loop1): initial error at time 2000000042: ext4_iget_extra_inode:5128: inode 15 [ 245.584273][ C1] EXT4-fs (loop1): last error at time 2000000042: ext4_iget_extra_inode:5128: inode 15 [ 245.612517][ T28] audit: type=1326 audit(2000000042.338:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.5.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e7e4ce59 code=0x7ffc0000 [ 245.612550][ T28] audit: type=1326 audit(2000000042.378:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.5.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e7e4ce59 code=0x7ffc0000 [ 245.623151][ T9385] loop1: lost filesystem error report for type 5 error -117 [ 245.685190][ T28] audit: type=1326 audit(2000000042.378:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.5.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e7e4ce59 code=0x7ffc0000 [ 245.725038][ T9385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.755041][ T9394] netlink: 'syz.4.1516': attribute type 10 has an invalid length. [ 245.763080][ T9394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1516'. [ 245.847213][ T9400] loop5: detected capacity change from 0 to 512 [ 245.861422][ T9400] ext4: Unknown parameter 'euid' [ 245.927832][ T9403] loop5: detected capacity change from 0 to 512 [ 245.962965][ T9403] EXT4-fs (loop5): orphan cleanup on readonly fs [ 245.985377][ T9403] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 246.001411][ T9403] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 246.021130][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 246.027596][ C0] EXT4-fs (loop5): initial error at time 2000000042: ext4_mb_generate_buddy:1317 [ 246.036769][ C0] EXT4-fs (loop5): last error at time 2000000042: ext4_mb_generate_buddy:1317 [ 246.064792][ T9403] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1520: attempt to clear invalid blocks 2 len 1 [ 246.080007][ T8743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.120408][ T9403] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 246.120659][ T9403] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1520: invalid indirect mapped block 1819239214 (level 0) [ 246.168968][ T9403] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 246.169213][ T9403] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1520: invalid indirect mapped block 1819239214 (level 1) [ 246.203662][ T9403] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 246.204183][ T9403] EXT4-fs (loop5): 1 truncate cleaned up [ 246.229777][ T9403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.257853][ T9403] EXT4-fs error (device loop5): __ext4_remount:6837: comm syz.5.1520: Abort forced by user [ 246.269453][ T9403] EXT4-fs (loop5): Remounting filesystem read-only [ 246.279380][ T9403] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 246.314150][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'. [ 246.360309][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.407440][ T9418] loop8: detected capacity change from 0 to 1024 [ 246.423001][ T9418] EXT4-fs: Ignoring removed bh option [ 246.463000][ T9418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.607477][ T9426] netlink: 'syz.5.1527': attribute type 13 has an invalid length. [ 246.626291][ T9427] netlink: 'syz.4.1528': attribute type 13 has an invalid length. [ 246.650840][ T9426] netlink: 'syz.5.1527': attribute type 17 has an invalid length. [ 246.665094][ T9427] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1528'. [ 246.705257][ T8743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.930011][ T9433] ext4: Unknown parameter 'euid' [ 247.003631][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.042821][ T9436] netlink: 'syz.1.1531': attribute type 13 has an invalid length. [ 247.051965][ T9436] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1531'. [ 247.070748][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.078148][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.157282][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.168204][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.236051][ T9427] syz_tun: refused to change device tx_queue_len [ 247.242759][ T9427] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 247.331527][ T9426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.342472][ T9426] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.354100][ T9426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.377707][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.384828][ T9426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.396220][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.403409][ T9426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.426332][ T9426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.435574][ T9426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.453473][ T9426] veth1_macvtap: left promiscuous mode [ 247.459914][ T9426] veth0_macvtap: left promiscuous mode [ 247.474409][ T9426] veth0_macvtap: entered promiscuous mode [ 247.495551][ T9426] veth1_macvtap: entered promiscuous mode [ 247.507444][ T9426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.518750][ T9426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.530527][ T9426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.542029][ T9426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.554561][ T9426] hsr1: left promiscuous mode [ 247.560534][ T9426] vlan0: left allmulticast mode [ 247.565864][ T9426] bond_slave_0: left allmulticast mode [ 247.614028][ T9426] sit3: left allmulticast mode [ 247.663978][ T9436] syz_tun: refused to change device tx_queue_len [ 247.664742][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 247.676283][ T9436] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 247.813094][ T9464] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 247.829890][ T9461] set_capacity_and_notify: 1 callbacks suppressed [ 247.829903][ T9461] loop5: detected capacity change from 0 to 512 [ 247.833483][ T9464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1536'. [ 247.853251][ T9464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.877398][ T9464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.890496][ T9464] bond1: (slave geneve2): making interface the new active one [ 247.963435][ T9466] loop8: detected capacity change from 0 to 764 [ 248.037196][ T9466] Symlink component flag not implemented [ 248.043476][ T9466] Symlink component flag not implemented [ 248.124802][ T9464] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 248.134268][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 248.574870][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 248.609519][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 248.629860][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 248.680521][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 248.680535][ T28] audit: type=1400 audit(2000000045.458:2028): avc: denied { write } for pid=9469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.738368][ T28] audit: type=1400 audit(2000000045.508:2029): avc: denied { write } for pid=9480 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.804166][ T9461] EXT4-fs (loop5): 1 orphan inode deleted [ 248.810327][ T9461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.822999][ T9461] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.027724][ T9499] loop1: detected capacity change from 0 to 2048 [ 249.112707][ T9499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.154218][ T28] audit: type=1400 audit(2000000045.938:2030): avc: denied { write } for pid=9498 comm="syz.1.1541" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.175993][ T9499] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1541: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 249.239090][ T28] audit: type=1400 audit(2000000046.008:2031): avc: denied { write } for pid=9483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.266296][ T9499] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1541: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 249.386852][ T28] audit: type=1400 audit(2000000046.048:2032): avc: denied { write } for pid=9498 comm="syz.1.1541" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.394400][ T1908] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 249.419461][ T9512] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1541: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 249.436085][ T28] audit: type=1400 audit(2000000046.208:2033): avc: denied { write } for pid=9498 comm="syz.1.1541" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.458283][ T28] audit: type=1400 audit(2000000046.228:2034): avc: denied { write } for pid=9517 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.480368][ T1908] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 249.481867][ T9520] loop8: detected capacity change from 0 to 512 [ 249.495459][ T9520] ext4: Unknown parameter 'euid' [ 249.536105][ T9521] atomic_op ffff88815b8e8928 conn xmit_atomic 0000000000000000 [ 249.554518][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.564493][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.591986][ T9528] netlink: 'syz.5.1542': attribute type 13 has an invalid length. [ 249.599837][ T9528] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1542'. [ 249.609962][ T28] audit: type=1326 audit(2000000046.358:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.5.1542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1e7e4ce59 code=0x0 [ 249.676332][ T9531] FAULT_INJECTION: forcing a failure. [ 249.676332][ T9531] name failslab, interval 1, probability 0, space 0, times 0 [ 249.689146][ T9531] CPU: 1 UID: 0 PID: 9531 Comm: syz.2.1547 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.689244][ T9531] Tainted: [W]=WARN [ 249.689251][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.689262][ T9531] Call Trace: [ 249.689269][ T9531] [ 249.689278][ T9531] __dump_stack+0x1d/0x30 [ 249.689350][ T9531] dump_stack_lvl+0x95/0xd0 [ 249.689373][ T9531] dump_stack+0x15/0x1b [ 249.689392][ T9531] should_fail_ex+0x263/0x280 [ 249.689428][ T9531] should_failslab+0x8c/0xb0 [ 249.689482][ T9531] __kmalloc_cache_node_noprof+0x6b/0x470 [ 249.689513][ T9531] ? avc_has_perm_noaudit+0xab/0x130 [ 249.689566][ T9531] ? __get_vm_area_node+0x106/0x1d0 [ 249.689598][ T9531] __get_vm_area_node+0x106/0x1d0 [ 249.689767][ T9531] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 249.689790][ T9531] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 249.689821][ T9531] ? cred_has_capability+0x224/0x2a0 [ 249.689982][ T9531] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 249.690007][ T9531] __vmalloc_noprof+0xa4/0xf0 [ 249.690027][ T9531] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 249.690050][ T9531] bpf_prog_alloc_no_stats+0x47/0x390 [ 249.690118][ T9531] ? bpf_prog_alloc+0x2a/0x150 [ 249.690138][ T9531] bpf_prog_alloc+0x3c/0x150 [ 249.690181][ T9531] bpf_prog_load+0x50d/0x1030 [ 249.690217][ T9531] ? security_bpf+0x2b/0x90 [ 249.690240][ T9531] __sys_bpf+0x505/0x7e0 [ 249.690329][ T9531] __x64_sys_bpf+0x41/0x50 [ 249.690349][ T9531] x64_sys_call+0x10cb/0x3020 [ 249.690373][ T9531] do_syscall_64+0x12c/0x3b0 [ 249.690473][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.690520][ T9531] RIP: 0033:0x7fcc0e14ce59 [ 249.690539][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.690560][ T9531] RSP: 002b:00007fcc0cb7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.690626][ T9531] RAX: ffffffffffffffda RBX: 00007fcc0e3c6090 RCX: 00007fcc0e14ce59 [ 249.690676][ T9531] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 249.690691][ T9531] RBP: 00007fcc0cb7e090 R08: 0000000000000000 R09: 0000000000000000 [ 249.690706][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.690721][ T9531] R13: 00007fcc0e3c6128 R14: 00007fcc0e3c6090 R15: 00007fff018f24f8 [ 249.690741][ T9531] [ 249.690748][ T9531] syz.2.1547: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 249.777775][ T9541] pim6reg2: entered allmulticast mode [ 249.788537][ T9531] ,cpuset= [ 249.899477][ T28] audit: type=1400 audit(2000000046.638:2036): avc: denied { write } for pid=9526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.911418][ T9531] /,mems_allowed=0 [ 250.038619][ T9531] CPU: 1 UID: 0 PID: 9531 Comm: syz.2.1547 Tainted: G W syzkaller #0 PREEMPT(full) [ 250.038651][ T9531] Tainted: [W]=WARN [ 250.038659][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.038671][ T9531] Call Trace: [ 250.038679][ T9531] [ 250.038695][ T9531] __dump_stack+0x1d/0x30 [ 250.038721][ T9531] dump_stack_lvl+0x95/0xd0 [ 250.038743][ T9531] dump_stack+0x15/0x1b [ 250.038843][ T9531] warn_alloc+0x145/0x1c0 [ 250.038872][ T9531] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 250.038905][ T9531] ? cred_has_capability+0x224/0x2a0 [ 250.038934][ T9531] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 250.038964][ T9531] __vmalloc_noprof+0xa4/0xf0 [ 250.038987][ T9531] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 250.039012][ T9531] bpf_prog_alloc_no_stats+0x47/0x390 [ 250.039079][ T9531] ? bpf_prog_alloc+0x2a/0x150 [ 250.039169][ T9531] bpf_prog_alloc+0x3c/0x150 [ 250.039195][ T9531] bpf_prog_load+0x50d/0x1030 [ 250.039285][ T9531] ? security_bpf+0x2b/0x90 [ 250.039308][ T9531] __sys_bpf+0x505/0x7e0 [ 250.039342][ T9531] __x64_sys_bpf+0x41/0x50 [ 250.039367][ T9531] x64_sys_call+0x10cb/0x3020 [ 250.039422][ T9531] do_syscall_64+0x12c/0x3b0 [ 250.039458][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.039482][ T9531] RIP: 0033:0x7fcc0e14ce59 [ 250.039501][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.039521][ T9531] RSP: 002b:00007fcc0cb7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.039550][ T9531] RAX: ffffffffffffffda RBX: 00007fcc0e3c6090 RCX: 00007fcc0e14ce59 [ 250.039564][ T9531] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 250.039608][ T9531] RBP: 00007fcc0cb7e090 R08: 0000000000000000 R09: 0000000000000000 [ 250.039657][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.039669][ T9531] R13: 00007fcc0e3c6128 R14: 00007fcc0e3c6090 R15: 00007fff018f24f8 [ 250.039694][ T9531] [ 250.039721][ T9531] Mem-Info: [ 250.250241][ T9531] active_anon:15537 inactive_anon:15845 isolated_anon:0 [ 250.250241][ T9531] active_file:24928 inactive_file:2616 isolated_file:0 [ 250.250241][ T9531] unevictable:1 dirty:220 writeback:0 [ 250.250241][ T9531] slab_reclaimable:3950 slab_unreclaimable:98343 [ 250.250241][ T9531] mapped:32494 shmem:18794 pagetables:2416 [ 250.250241][ T9531] sec_pagetables:0 bounce:0 [ 250.250241][ T9531] kernel_misc_reclaimable:0 [ 250.250241][ T9531] free:1767575 free_pcp:9394 free_cma:0 [ 250.297054][ T9531] Node 0 active_anon:62148kB inactive_anon:63380kB active_file:99712kB inactive_file:10464kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:129976kB dirty:880kB writeback:0kB shmem:75176kB kernel_stack:4528kB pagetables:9664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 250.337008][ T9531] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.395086][ T9531] lowmem_reserve[]: 0 2878 7857 7857 [ 250.400490][ T9531] Node 0 DMA32 free:2944408kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948036kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 250.402437][ T9572] sg_write: data in/out 48/10 bytes for SCSI command 0x5d-- guessing data in; [ 250.402437][ T9572] program syz.1.1552 not setting count and/or reply_len properly [ 250.432174][ T9531] lowmem_reserve[]: 0 0 4978 4978 [ 250.477115][ T9531] Node 0 Normal free:4110728kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50664kB inactive_anon:63380kB active_file:99712kB inactive_file:10464kB unevictable:4kB writepending:880kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:47516kB local_pcp:27760kB free_cma:0kB [ 250.510980][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1550'. [ 250.511497][ T9531] lowmem_reserve[]: 0 0 0 0 [ 250.525059][ T9531] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.538226][ T9531] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944408kB [ 250.573160][ T9531] Node 0 Normal: 1008*4kB (UE) 2021*8kB (UME) 1672*16kB (UME) 1261*32kB (UME) 666*64kB (UME) 330*128kB (UME) 265*256kB (UME) 186*512kB (UME) 165*1024kB (UME) 85*2048kB (UME) 838*4096kB (UM) = 4110728kB [ 250.616923][ T9531] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 250.627473][ T9531] 43975 total pagecache pages [ 250.632697][ T9531] 198 pages in swap cache [ 250.637232][ T9531] Free swap = 120876kB [ 250.642099][ T9531] Total swap = 124996kB [ 250.646429][ T9531] 2097051 pages RAM [ 250.650356][ T9531] 0 pages HighMem/MovableOnly [ 250.655650][ T9531] 81643 pages reserved [ 250.832652][ T9593] loop2: detected capacity change from 0 to 512 [ 250.844052][ T9593] ext4: Unknown parameter 'euid' [ 250.856044][ T9593] netlink: 'syz.2.1559': attribute type 4 has an invalid length. [ 250.865470][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 250.876458][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 250.964701][ T9600] netlink: 'syz.2.1563': attribute type 13 has an invalid length. [ 250.992745][ T9600] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1563'. [ 251.054304][ T9600] syz_tun: refused to change device tx_queue_len [ 251.080856][ T9600] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 251.138223][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1564'. [ 251.349498][ T9595] loop5: detected capacity change from 0 to 2048 [ 251.410978][ T9595] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.439589][ T9619] program syz.2.1568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.479449][ T9595] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.552188][ T9595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.600535][ T9632] netlink: 'syz.2.1573': attribute type 13 has an invalid length. [ 251.608606][ T9632] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1573'. [ 251.618318][ T9632] syz_tun: refused to change device tx_queue_len [ 251.624680][ T9632] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 251.644701][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'. [ 251.699845][ T9610] loop8: detected capacity change from 0 to 2048 [ 251.710496][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.720231][ T9610] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 15 [ 251.892824][ T9653] loop5: detected capacity change from 0 to 512 [ 251.905964][ T9651] loop8: detected capacity change from 0 to 512 [ 251.919930][ T9653] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 251.951952][ T9651] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 251.960438][ T9653] EXT4-fs (loop5): orphan cleanup on readonly fs [ 251.970990][ T9653] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 251.986260][ T9651] EXT4-fs (loop8): orphan cleanup on readonly fs [ 251.997918][ T9651] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 252.012972][ T9653] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 252.020341][ T9653] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #16: comm syz.5.1581: corrupted xattr block 31: invalid header [ 252.035322][ T9651] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 252.042348][ T9653] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 252.043128][ T9653] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 252.043495][ T9651] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #16: comm syz.8.1580: corrupted xattr block 31: invalid header [ 252.052268][ T9653] EXT4-fs (loop5): 1 orphan inode deleted [ 252.055927][ T9653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.062310][ T9651] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 252.094476][ T9651] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 252.101124][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 252.104992][ T9651] EXT4-fs (loop8): 1 orphan inode deleted [ 252.112738][ C1] EXT4-fs (loop8): initial error at time 2000000048: ext4_xattr_delete_inode:2972: inode 16 [ 252.112774][ C1] EXT4-fs (loop8): last error at time 2000000048: ext4_xattr_delete_inode:2972: inode 16 [ 252.147548][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.157024][ T9651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.241058][ T8743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.304137][ T9684] loop8: detected capacity change from 0 to 128 [ 252.320998][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 252.428884][ T9700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1598'. [ 252.486447][ T9707] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 252.495169][ T9707] EXT4-fs (loop8): orphan cleanup on readonly fs [ 252.502477][ T9707] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 252.518902][ T9707] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 252.526445][ T9707] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #16: comm syz.8.1601: corrupted xattr block 31: invalid header [ 252.540295][ T9707] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 252.540664][ T9707] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 252.541118][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 252.550040][ T9707] EXT4-fs (loop8): 1 orphan inode deleted [ 252.558930][ C1] EXT4-fs (loop8): initial error at time 2000000049: ext4_xattr_delete_inode:2972: inode 16 [ 252.558967][ C1] EXT4-fs (loop8): last error at time 2000000049: ext4_xattr_delete_inode:2972: inode 16 [ 252.600736][ T9707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.651568][ T8743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.846154][ T9735] netlink: 'syz.8.1610': attribute type 13 has an invalid length. [ 252.854962][ T9735] syz_tun: refused to change device tx_queue_len [ 252.861792][ T9735] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 253.388834][ T9746] 9pnet_virtio: no channels available for device 127.0.0.1 [ 253.494205][ T9745] vlan0: entered promiscuous mode [ 253.657395][ T9745] bridge0: entered promiscuous mode [ 253.988250][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 253.988267][ T28] audit: type=1326 audit(2000000049.818:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e14ce59 code=0x7ffc0000 [ 254.019863][ T28] audit: type=1326 audit(2000000049.818:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e14ce59 code=0x7ffc0000 [ 254.092730][ T28] audit: type=1326 audit(2000000049.818:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcc0e14ce59 code=0x7ffc0000 [ 254.466303][ T28] audit: type=1326 audit(2000000049.818:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e14ce59 code=0x7ffc0000 [ 254.814222][ T9775] set_capacity_and_notify: 1 callbacks suppressed [ 254.814238][ T9775] loop1: detected capacity change from 0 to 128 [ 254.849291][ T9766] loop8: detected capacity change from 0 to 128 [ 254.858760][ T28] audit: type=1326 audit(2000000049.868:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e14ce59 code=0x7ffc0000 [ 254.885943][ T28] audit: type=1326 audit(2000000049.868:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e14ce59 code=0x7ffc0000 [ 254.933295][ T28] audit: type=1326 audit(2000000049.868:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e14ce59 code=0x7ffc0000 [ 254.976490][ T9766] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.035638][ T9766] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.061236][ T28] audit: type=1326 audit(2000000049.868:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e14ce59 code=0x7ffc0000 [ 255.134741][ T9784] netlink: 'syz.4.1625': attribute type 4 has an invalid length. [ 255.165944][ T28] audit: type=1326 audit(2000000049.868:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e14ce59 code=0x7ffc0000 [ 255.192205][ T9784] __nla_validate_parse: 7 callbacks suppressed [ 255.192224][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'. [ 255.231208][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 255.271150][ T28] audit: type=1326 audit(2000000049.868:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcc0e14cbc2 code=0x7ffc0000 [ 255.332639][ T8743] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.418108][ T9789] futex_wake_op: syz.4.1626 tries to shift op by 144; fix this program [ 255.598955][ T9802] random: crng reseeded on system resumption [ 255.681694][ T9804] loop8: detected capacity change from 0 to 512 [ 255.688775][ T9804] EXT4-fs: dax option not supported [ 257.740103][ T9813] loop5: detected capacity change from 0 to 1024 [ 257.749093][ T9802] 9pnet_fd: Insufficient options for proto=fd [ 257.755585][ T9813] EXT4-fs: test_dummy_encryption option not supported [ 258.033310][ T9819] loop2: detected capacity change from 0 to 256 [ 258.060607][ T9819] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.086960][ T9819] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 258.101840][ T9822] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1634'. [ 258.115214][ T9819] FAT-fs (loop2): Filesystem has been set read-only [ 258.130683][ T9819] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 258.185520][ T9824] loop1: detected capacity change from 0 to 1024 [ 258.195546][ T9824] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 258.219074][ T9824] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 258.229717][ T9824] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 258.240304][ T9824] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #5: comm syz.1.1636: unexpected bad inode w/o EXT4_IGET_BAD [ 258.256810][ T9824] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 258.257072][ T9824] EXT4-fs (loop1): no journal found [ 258.266141][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 258.266160][ C0] EXT4-fs (loop1): initial error at time 2000000055: ext4_get_journal_inode:5896: inode 5 [ 258.266185][ C0] EXT4-fs (loop1): last error at time 2000000055: ext4_get_journal_inode:5896: inode 5 [ 258.347800][ T9824] EXT4-fs (loop1): can't get journal size [ 258.377062][ T9824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.406075][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.489058][ T9826] loop2: detected capacity change from 0 to 2048 [ 258.500849][ T9826] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.507980][ T9826] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.556254][ T9826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.620439][ T9847] loop5: detected capacity change from 0 to 512 [ 258.637213][ T9847] netlink: 131336 bytes leftover after parsing attributes in process `syz.5.1644'. [ 258.656576][ T9847] netlink: zone id is out of range [ 258.780995][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.851593][ T9858] netlink: 'syz.5.1647': attribute type 13 has an invalid length. [ 258.859752][ T9858] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1647'. [ 258.911912][ T9862] loop1: detected capacity change from 0 to 128 [ 258.919015][ T9862] msdos: Unknown parameter '0x000000000000000300000000000000000000' [ 258.952470][ T9860] loop2: detected capacity change from 0 to 1024 [ 258.961660][ T9860] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 259.014366][ T9869] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1650'. [ 259.048380][ T9860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.069177][ T9869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.082958][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 259.082972][ T28] audit: type=1400 audit(2000000055.868:2182): avc: denied { write } for pid=9868 comm="syz.1.1650" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.110958][ T28] audit: type=1400 audit(2000000055.868:2183): avc: denied { read } for pid=9868 comm="syz.1.1650" path="/333/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 259.134268][ T28] audit: type=1400 audit(2000000055.868:2184): avc: denied { write } for pid=9868 comm="syz.1.1650" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 259.500211][ T9879] FAULT_INJECTION: forcing a failure. [ 259.500211][ T9879] name failslab, interval 1, probability 0, space 0, times 0 [ 259.513288][ T9879] CPU: 1 UID: 0 PID: 9879 Comm: syz.4.1651 Tainted: G W syzkaller #0 PREEMPT(full) [ 259.513378][ T9879] Tainted: [W]=WARN [ 259.513386][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.513400][ T9879] Call Trace: [ 259.513407][ T9879] [ 259.513416][ T9879] __dump_stack+0x1d/0x30 [ 259.513441][ T9879] dump_stack_lvl+0x95/0xd0 [ 259.513542][ T9879] dump_stack+0x15/0x1b [ 259.513565][ T9879] should_fail_ex+0x263/0x280 [ 259.513595][ T9879] should_failslab+0x8c/0xb0 [ 259.513623][ T9879] __kmalloc_noprof+0xb8/0x4d0 [ 259.513656][ T9879] ? io_cache_alloc_new+0x2a/0xb0 [ 259.513684][ T9879] io_cache_alloc_new+0x2a/0xb0 [ 259.513791][ T9879] io_msg_alloc_async+0xf9/0x190 [ 259.513815][ T9879] io_sendmsg_prep+0x234/0x2f0 [ 259.513842][ T9879] io_submit_sqes+0x736/0x1170 [ 259.513914][ T9879] __se_sys_io_uring_enter+0x25c/0xfc0 [ 259.513952][ T9879] ? exit_to_user_mode_loop+0xf4/0x820 [ 259.514044][ T9879] __x64_sys_io_uring_enter+0x78/0x90 [ 259.514074][ T9879] x64_sys_call+0x1e16/0x3020 [ 259.514133][ T9879] do_syscall_64+0x12c/0x3b0 [ 259.514181][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.514204][ T9879] RIP: 0033:0x7f1d679bce59 [ 259.514220][ T9879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.514238][ T9879] RSP: 002b:00007f1d6640f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 259.514260][ T9879] RAX: ffffffffffffffda RBX: 00007f1d67c35fa0 RCX: 00007f1d679bce59 [ 259.514276][ T9879] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 259.514371][ T9879] RBP: 00007f1d6640f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.514385][ T9879] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 259.514397][ T9879] R13: 00007f1d67c36038 R14: 00007f1d67c35fa0 R15: 00007ffc6e92d578 [ 259.514416][ T9879] [ 259.739914][ T9882] EXT4-fs: test_dummy_encryption option not supported [ 259.807694][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.011030][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.032901][ T9896] set_capacity_and_notify: 2 callbacks suppressed [ 260.032917][ T9896] loop1: detected capacity change from 0 to 128 [ 260.033628][ T1908] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.065551][ T9896] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.079694][ T9896] ext4 filesystem being mounted at /334/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 260.275994][ T9901] loop2: detected capacity change from 0 to 2048 [ 260.295222][ T9901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.307794][ T9901] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.334057][ T28] audit: type=1400 audit(2000000057.108:2185): avc: denied { write } for pid=9886 comm="syz.2.1653" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.355742][ T9898] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1653: bg 0: block 345: padding at end of block bitmap is not set [ 260.370066][ T28] audit: type=1400 audit(2000000057.108:2186): avc: denied { create } for pid=9886 comm="syz.2.1653" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 260.412221][ T9898] EXT4-fs (loop2): Remounting filesystem read-only [ 260.430566][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.494925][ T9910] netlink: 'syz.1.1660': attribute type 13 has an invalid length. [ 260.502816][ T9910] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1660'. [ 260.548455][ T9910] syz_tun: refused to change device tx_queue_len [ 260.553804][ T28] audit: type=1326 audit(2000000057.328:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x0 [ 260.554906][ T9910] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 260.647152][ T9916] netlink: 'syz.1.1662': attribute type 13 has an invalid length. [ 260.659974][ T9916] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1662'. [ 260.669916][ T9916] syz_tun: refused to change device tx_queue_len [ 260.676533][ T9916] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 260.693331][ T28] audit: type=1326 audit(2000000057.478:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.1.1662" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x0 [ 260.764805][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.804784][ T28] audit: type=1400 audit(2000000057.588:2189): avc: denied { accept } for pid=9919 comm="syz.5.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.830503][ T9920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.840246][ T9920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.927113][ T9925] loop2: detected capacity change from 0 to 512 [ 260.953129][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 261.099619][ T9947] loop8: detected capacity change from 0 to 2048 [ 261.115437][ T9947] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.122839][ T9947] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.134988][ T9947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.177653][ T8743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.321999][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1675'. [ 261.369715][ T9961] netlink: 'syz.5.1676': attribute type 4 has an invalid length. [ 261.377707][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1676'. [ 261.386984][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1676'. [ 261.414526][ T9963] serio: Serial port ttyS3 [ 261.476676][ T9963] loop5: detected capacity change from 0 to 1024 [ 261.484209][ T9963] ext4: Unknown parameter 'hash' [ 261.567205][ T28] audit: type=1400 audit(2000000058.308:2190): avc: denied { attach_queue } for pid=9968 comm="syz.5.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 262.212299][T10042] loop8: detected capacity change from 0 to 2048 [ 262.239309][T10042] ext2: Unknown parameter 'dont_appraise' [ 262.297497][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1697'. [ 262.308027][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1697'. [ 262.317387][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1697'. [ 262.470975][T10083] loop1: detected capacity change from 0 to 128 [ 262.487172][T10083] EXT4-fs: Ignoring removed nobh option [ 262.514502][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'. [ 262.546079][T10083] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.561707][T10083] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.620363][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.718977][ T28] audit: type=1326 audit(2000000059.488:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x7ffc0000 [ 262.768729][T10130] loop1: detected capacity change from 0 to 512 [ 262.781654][T10130] EXT4-fs: Ignoring removed bh option [ 262.789339][T10130] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.813762][T10130] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 262.832855][T10130] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 262.846603][T10130] EXT4-fs (loop1): orphan cleanup on readonly fs [ 262.909302][T10134] loop5: detected capacity change from 0 to 128 [ 262.959651][T10130] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1706: Failed to acquire dquot type 1 [ 262.994951][T10130] loop1: lost filesystem error report for type 5 error -5 [ 263.001405][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 263.015080][ C1] EXT4-fs (loop1): last error at time 2000000059: ext4_acquire_dquot:7034 [ 263.071629][T10130] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1706: Invalid block bitmap block 0 in block_group 0 [ 263.085057][T10130] loop1: lost filesystem error report for type 5 error -117 [ 263.085540][T10130] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1706: Invalid block bitmap block 0 in block_group 0 [ 263.114779][T10130] loop1: lost filesystem error report for type 5 error -117 [ 263.116667][T10130] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1706: Invalid block bitmap block 0 in block_group 0 [ 263.137449][T10130] loop1: lost filesystem error report for type 5 error -117 [ 263.137868][T10130] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1706: Failed to acquire dquot type 1 [ 263.156445][T10130] loop1: lost filesystem error report for type 5 error -28 [ 263.156943][T10130] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1706: Failed to acquire dquot type 1 [ 263.175480][T10130] loop1: lost filesystem error report for type 5 error -28 [ 263.175834][T10130] EXT4-fs (loop1): 1 orphan inode deleted [ 264.432452][T10140] loop2: detected capacity change from 0 to 512 [ 264.450776][T10130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.487014][T10140] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1709: inode has both inline data and extents flags [ 264.500225][T10140] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.500924][T10140] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1709: couldn't read orphan inode 15 (err -117) [ 264.521894][T10140] loop2: lost filesystem error report for type 5 error -117 [ 264.523443][T10140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.545412][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 264.545428][ T28] audit: type=1326 audit(2000000062.227:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5993dd68e code=0x7ffc0000 [ 264.637624][T10142] EXT4-fs: Ignoring removed nobh option [ 264.680402][T10142] EXT4-fs (loop8): orphan cleanup on readonly fs [ 264.688742][T10142] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.1710: EA inode hash validation failed [ 264.746548][ T28] audit: type=1326 audit(2000000062.227:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa59941b297 code=0x7ffc0000 [ 264.773906][T10142] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 264.793441][T10142] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.1710: corrupted inode contents [ 264.853960][T10130] syz.1.1706 (10130) used greatest stack depth: 7552 bytes left [ 264.861976][ T28] audit: type=1326 audit(2000000062.227:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5993dd68e code=0x7ffc0000 [ 264.931846][ T28] audit: type=1326 audit(2000000062.227:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x7ffc0000 [ 264.961559][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.975526][T10142] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.976754][T10142] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #15: comm syz.8.1710: mark_inode_dirty error [ 264.986524][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 264.986660][ C1] EXT4-fs (loop8): initial error at time 2000000062: ext4_do_update_inode:5690: inode 15 [ 264.986844][ C1] EXT4-fs (loop8): last error at time 2000000062: ext4_do_update_inode:5690: inode 15 [ 265.049759][ T28] audit: type=1326 audit(2000000062.227:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x7ffc0000 [ 265.155705][ T28] audit: type=1326 audit(2000000062.227:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fa59941ce59 code=0x7ffc0000 [ 265.191849][T10167] program syz.5.1718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.211424][T10142] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.215116][T10142] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.1710: corrupted inode contents [ 265.323149][ T28] audit: type=1326 audit(2000000062.227:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x7ffc0000 [ 265.370458][T10142] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.375960][T10142] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.1710: mark_inode_dirty error [ 265.411764][T10169] set_capacity_and_notify: 1 callbacks suppressed [ 265.411792][T10169] loop1: detected capacity change from 0 to 512 [ 265.427231][ T28] audit: type=1326 audit(2000000062.227:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x7ffc0000 [ 265.454851][T10142] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.456005][T10142] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.1710: mark inode dirty (error -117) [ 265.523848][T10142] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.524008][T10142] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 265.548870][ T28] audit: type=1326 audit(2000000062.227:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x7ffc0000 [ 265.574801][T10142] EXT4-fs (loop8): 1 orphan inode deleted [ 265.580914][T10142] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 265.592897][ T28] audit: type=1326 audit(2000000062.227:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.1.1706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59941ce59 code=0x7ffc0000 [ 265.634018][T10169] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 265.653348][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.672653][T10169] EXT4-fs (loop1): mount failed [ 265.761704][ T8743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.944405][T10181] loop2: detected capacity change from 0 to 8192 [ 266.147013][T10196] loop2: detected capacity change from 0 to 164 [ 266.154813][T10196] iso9660: Unknown parameter '' [ 266.299445][T10207] loop5: detected capacity change from 0 to 4096 [ 266.306488][ T7606] ================================================================== [ 266.308125][T10207] EXT4-fs: Ignoring removed orlov option [ 266.314595][ T7606] BUG: KCSAN: data-race in set_nlink / set_nlink [ 266.314616][ T7606] [ 266.314622][ T7606] read to 0xffff88810809a928 of 4 bytes by task 2981 on cpu 1: [ 266.314638][ T7606] set_nlink+0x29/0xb0 [ 266.314653][ T7606] kernfs_iop_permission+0x1e5/0x220 [ 266.345890][ T7606] inode_permission+0x31f/0x3b0 [ 266.350734][ T7606] link_path_walk+0x779/0xe30 [ 266.355398][ T7606] path_lookupat+0x8c/0x500 [ 266.359890][ T7606] filename_lookup+0x190/0x390 [ 266.364729][ T7606] vfs_statx+0x96/0x170 [ 266.368882][ T7606] vfs_fstatat+0x118/0x170 [ 266.373284][ T7606] __se_sys_newfstatat+0x55/0x3e0 [ 266.378298][ T7606] __x64_sys_newfstatat+0x55/0x70 [ 266.383314][ T7606] x64_sys_call+0x2c64/0x3020 [ 266.387997][ T7606] do_syscall_64+0x12c/0x3b0 [ 266.392584][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.398464][ T7606] [ 266.400774][ T7606] write to 0xffff88810809a928 of 4 bytes by task 7606 on cpu 0: [ 266.408385][ T7606] set_nlink+0x99/0xb0 [ 266.412442][ T7606] kernfs_iop_permission+0x1e5/0x220 [ 266.417723][ T7606] inode_permission+0x31f/0x3b0 [ 266.422569][ T7606] link_path_walk+0x779/0xe30 [ 266.427334][ T7606] path_openat+0x1c6/0x2050 [ 266.431828][ T7606] do_file_open+0x16c/0x290 [ 266.436322][ T7606] do_sys_openat2+0x94/0x130 [ 266.440916][ T7606] __x64_sys_openat+0xf2/0x120 [ 266.445684][ T7606] x64_sys_call+0x1e39/0x3020 [ 266.450363][ T7606] do_syscall_64+0x12c/0x3b0 [ 266.454956][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.460839][ T7606] [ 266.463144][ T7606] value changed: 0x00000008 -> 0x00000009 [ 266.468841][ T7606] [ 266.471151][ T7606] Reported by Kernel Concurrency Sanitizer on: [ 266.477284][ T7606] CPU: 0 UID: 0 PID: 7606 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 266.487861][ T7606] Tainted: [W]=WARN [ 266.491650][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.501694][ T7606] ================================================================== [ 266.526750][T10207] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 266.770658][T10210] loop5: detected capacity change from 0 to 512 [ 266.780033][T10210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.882039][T10210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.894592][T10210] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.134101][ T3996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.