last executing test programs: 12m36.432639227s ago: executing program 32 (id=1320): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000140)={0xe23, 0xff, 0x9, 0xd, 0x0, "9983b9127bd4259b"}) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/4068, 0xfe4) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0xf, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_usb_connect$midi(0x1, 0xe6, &(0x7f0000001300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0x9, 0x90, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x5, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x0, 0x4, [{0x5, 0x9}, {0x8, 0x6}, {0x0, 0x3a}, {0x2, 0x6}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x4, 0x80, 0x2a, {0xf, 0x25, 0x1, 0xb, "808fc15071e3a9ea6a38f0"}}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xf, 0x2, 0xb, {0x13, 0x25, 0x1, 0xf, "b66cc145316170142a97a5ab72e875"}}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0xf7, 0xfb, 0x43, {0xb, 0x25, 0x1, 0x7, "849d2df23feb26"}}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0xff, 0x7, 0x4, {0x13, 0x25, 0x1, 0xf, "28b29190f432e0eb41c8d1944a9551"}}}, {{0x9, 0x5, 0xa, 0x0, 0x14, 0x0, 0x5, 0xb, {0xb, 0x25, 0x1, 0x7, "e0197a80a76b9e"}}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0xc, 0xaf, {0xf, 0x25, 0x1, 0xb, "2a4ef35a42395e9dba1395"}}}]}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x201, 0x3, 0x5, 0x5, 0x10, 0xf4}, 0x5, &(0x7f0000001440)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x416}}, {0x0, 0x0}]}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000011c0)={0x0, 0x5}, &(0x7f0000001200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001240)={0x5, 0x2, 0x9, 0x3, r3}, 0x10) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x1, 0x0, 0x7, 0x58418, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) syz_read_part_table(0x609, &(0x7f0000000640)="$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") splice(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x7, 0xb) 9m31.170180127s ago: executing program 33 (id=2379): socket$phonet(0x23, 0x2, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x32, &(0x7f0000001b40)=ANY=[], 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x10080, 0x10, 0x4}, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x10}}, {0x20000010304, @local}, 0x12, {0x2, 0x4e1e, @multicast1}, 'lo\x00'}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(0xffffffffffffffff, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESDEC]) renameat(0xffffffffffffffff, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00') close(0x3) 8m38.957488379s ago: executing program 1 (id=2622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x8084) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x48810}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) ioprio_set$uid(0x3, r2, 0x2004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) recvmmsg(r3, &(0x7f00000085c0)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x100, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x3, 0x101, 0x800, 0x7}], 0x1, 0x20, 0x3, 0x1}) 8m38.940582249s ago: executing program 1 (id=2623): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0x9, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c206}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x41, 0x3, 0xa20, 0x8e0, 0x0, 0x0, 0x0, 0x0, 0x988, 0x1f0, 0x1f0, 0x988, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0xff000000, 0xff, 'ip6tnl0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x878, 0x8e0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x1}, {0x6, 0x2}, {0xa, 0x3}, {0x9a7}, {0xc, 0x1}, {0x800, 0x2}, {0xf, 0x3}, {0xa8, 0x2}, {0x101, 0x2}, {0x5, 0x3}, {0x7, 0x1}], [{0x10}, {0x1, 0x8001}, {0x3, 0x400000}, {0x3, 0x33}, {0x2}, {0x4c9, 0x8}, {0x3, 0x1000}, {0x8, 0xfffffc00}, {0x1, 0xd68}, {0x2, 0x3}, {0x9e, 0x101}], 0x3, 0x7}, {[{0x0, 0x2}, {0x10, 0x1}, {0x0, 0x3}, {0xffffff66, 0x1}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x2}, {0x919, 0x3}, {0xd92}, {0x1, 0x3}], [{0x5, 0x4}, {0x10001, 0x4}, {0x7, 0x82353e39}, {0x46dc6175, 0x400000}, {0x1}, {0x8}, {0x5, 0x7}, {0xfffffff7, 0x8}, {0x1, 0x3ff}, {0x6, 0x1ff}, {0x8, 0x5}], 0x8, 0x1}, {[{0x3, 0x3}, {0x7fffffff, 0x3}, {0xb9b, 0x3}, {0x5, 0x2}, {0xb776}, {0x2484, 0x1}, {0x2, 0x3}, {0x6, 0x3}, {0x1000}, {0xb14a}, {0x4, 0x2}], [{0x8, 0x7d}, {0x7, 0x7ff}, {0x4, 0xd93}, {0xffffff80, 0x7f}, {0xf, 0x2}, {0xfff, 0x6}, {0x7, 0x4}, {0x7, 0x9}, {0xffff, 0x40}, {0x8, 0x8}, {0x4, 0x6}], 0x0, 0x4}, {[{0x3, 0x1}, {0x1, 0x2}, {0xb, 0x3}, {0x7fffffff}, {0x9}, {}, {0x7a3c3ae0, 0x3}, {0x8, 0x1}, {0x86}, {0x9, 0x2}, {0x1, 0x1}], [{0x9, 0x81}, {0x6, 0x4}, {0xf17, 0xd4f}, {0x2, 0xffff}, {0x7, 0x7}, {0xfffffff8, 0x8000}, {0x8, 0x10}, {0x3}, {0x6, 0x9}, {0x40, 0x5}, {0x3, 0x6}], 0x7, 0x6}, {[{0x80}, {0x4, 0x1}, {0x9, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0xffffffff, 0x2}, {0x7, 0x1}, {0x80000000, 0x3}, {0x8}, {0x6, 0x1}, {0x0, 0x3}], [{0xffffff08, 0xb49}, {0x7, 0xfffff693}, {0x0, 0x4}, {0x1, 0x7fffffff}, {0x8c, 0x7}, {0x7ff, 0x9}, {0x4, 0x6}, {0xe, 0x400}, {0x438b61b5, 0x3ff}, {0x0, 0x1}, {0x5a33, 0xffff}], 0x7, 0x7}, {[{0x0, 0x3}, {0x7}, {0x3, 0x1}, {0x8, 0x2}, {0x10001, 0x3}, {0x8c, 0x2}, {0xc}, {0xfffffff9}, {0x3}, {0x1, 0x3}, {0x3, 0x1}], [{0x6, 0x81}, {0x2, 0x1}, {0x8001, 0x8}, {0x4, 0x6}, {0x8, 0x7ff}, {0xffff8d71, 0x8}, {0x4, 0xe}, {0x1000}, {0x7, 0x5}, {0x9, 0x8a4a}, {0x7, 0x371}], 0x3, 0x9}, {[{0x9, 0x3}, {}, {0x4a, 0x2}, {0x1, 0x1}, {0x4}, {0xd0, 0x1}, {0x9, 0x3}, {0xc, 0x1}, {0x5, 0x2}, {0x7, 0x6417ad6bcf2b63ac}, {0x72d7, 0x1}], [{0xf3, 0x6}, {0x6, 0x4}, {0x1000, 0xec3}, {0x6, 0xdc0000}, {0x3, 0x853}, {0x1, 0xbb}, {0x8d3, 0x4}, {0x83, 0x9}, {0x4, 0x5ae0c760}, {0xfffffffe, 0x5}, {0x6, 0x7}], 0xa, 0x7}, {[{0x9, 0x2}, {0x400, 0x2}, {0x1}, {0x1}, {0x73}, {0x9ba, 0x3}, {0xf4}, {0x8001}, {0x400, 0x2}, {0x8000}, {0x10, 0x2}], [{0x7, 0xa4}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x5}, {0x732, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0xffffffff}, {0x2, 0x3}, {0x6, 0x2}, {0x6, 0xfff}], 0x8, 0x7}, {[{0x4, 0x1}, {0x6d833589, 0x2}, {0xce2, 0x2}, {0x400}, {0x0, 0x3}, {0x5}, {0xd1, 0x2}, {0x5}, {0x8000}, {0x3}, {0x425e}], [{0x9, 0x9}, {0x4, 0x16}, {0x6, 0x8}, {0x2, 0x89e}, {0x8}, {0x1d7b, 0x5}, {0x80000001, 0x40}, {0x7, 0x5}, {0x2, 0x9}, {0xe21, 0x100}, {0x400, 0xe}], 0xa, 0x2}, {[{0x10, 0x1}, {0x10, 0x2}, {0xe1b, 0x3}, {0xecf, 0x2}, {0x800, 0x2}, {0x4}, {0x7, 0x4}, {0x100, 0x2}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x1}], [{0x80, 0x400}, {0x6, 0x2}, {0x4f8, 0x200}, {0x89c, 0xc}, {0xfff, 0x624}, {0x6, 0x7}, {0x2, 0x8}, {0x8, 0x5}, {0x0, 0x1000}, {0xe5, 0x1}, {0x4, 0x9}], 0x9, 0x9}, {[{0x3}, {0x8}, {0x5, 0x1}, {0xfffff800, 0x1}, {0x93cc, 0x2}, {0xfff, 0x1}, {0x5e4f168c, 0x2}, {}, {0x3bb4, 0x3}, {0x1, 0x3}, {0x7}], [{0xfffffb52, 0x8}, {0xff, 0x7fffffff}, {0x3, 0x9}, {0x8001, 0x101}, {0xa, 0x3}, {0x9, 0x9}, {0x9, 0x6}, {0x0, 0xa44}, {0xff, 0xc}, {0x7fffffff, 0x12f0b5c4}, {0x4, 0xe}], 0x8, 0x3}], 0x6, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x1000, 0x1, 0x1, 'syz1\x00', 'syz0\x00', {0xaf}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x3, 0x7}, {0x2, 0x5, 0xa}, {0x1, 0x6}, 0x100, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x848000000015, 0x805, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'nr0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c28fe12ce16223ae6f47b1f2e78c412d7937383346ce43e6d64359975145df1c8ac0eb097718924278f7fb661e64b4f32dcb31776007ca30f0f018f730610a7091c1538a4122318a46cdf51d23c5b785f73d74ad282eec2c00000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf2583000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r3 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) umount2(0x0, 0xa) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, 0x0}, 0x2404081c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0300ffff00", 0x5, 0x0, 0x0, 0x2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2503fffff9ff0000000016000000140001800d703a"], 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002540)=""/1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) getuid() ioctl$sock_ifreq(0xffffffffffffffff, 0x19a47, &(0x7f0000000180)={'veth0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) 8m38.578303521s ago: executing program 1 (id=2625): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xc8) socket(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x48, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4040040}, 0x4004001) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FICLONE(r3, 0x40049409, r7) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 8m38.576041621s ago: executing program 1 (id=2626): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@oldalloc}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8000000000000002}}, {@journal_checksum}, {@quota}, {@nolazytime}]}, 0x81, 0x783, &(0x7f0000001340)="$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") sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x1227, &(0x7f00000024c0)="$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") (async) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3c331, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x9, 0x200100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000011, r3, 0x0) (async) r4 = socket(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRES32=r5, @ANYRESOCT=0x0, @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4015}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xfffffffffffffff8}, 0xa2, 0x400010, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) (async) connect$rds(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) 8m38.290395152s ago: executing program 1 (id=2629): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r1], 0x18}], 0x1}, 0x0) sendmmsg$sock(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}}], 0x50, 0x40000) 8m36.498403162s ago: executing program 1 (id=2635): gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f5af33515e57b00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@desc={0x1, 0x0, @desc1}}) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x485adfb2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001e0001032a9d7000fedbdf24ac14140f00000000000000001e840100000000d40b00000000000b00000035000000000000000000000001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x17e) lseek(r4, 0xfffffffffffffffe, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x9}}, 0x20) semctl$GETALL(0x0, 0x0, 0xd, 0x0) close(0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}]}, 0x24}}, 0x24004094) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000040900010073797a30000000000900020073797a32000000002800048024000180c6f4bf1765787468647200001400028008000640000000010800054000000000140000001100010000000000000000000700000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r9 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r9, 0x2) open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) 8m36.321221383s ago: executing program 34 (id=2635): gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f5af33515e57b00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@desc={0x1, 0x0, @desc1}}) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x485adfb2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001e0001032a9d7000fedbdf24ac14140f00000000000000001e840100000000d40b00000000000b00000035000000000000000000000001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x17e) lseek(r4, 0xfffffffffffffffe, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x9}}, 0x20) semctl$GETALL(0x0, 0x0, 0xd, 0x0) close(0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}]}, 0x24}}, 0x24004094) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000040900010073797a30000000000900020073797a32000000002800048024000180c6f4bf1765787468647200001400028008000640000000010800054000000000140000001100010000000000000000000700000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r9 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r9, 0x2) open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) 7m22.814217192s ago: executing program 5 (id=3210): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="210000001cc01ded5d579834d84c5817dc07e8575ce096134b019f028abfe5f65e1b2bd02c6f8c54113c22c2f07adfd54cfdc625eaa01a7d010140ecba93b81254172735466e4356187cb37ae3bd607a97cc56c20e4fb369f7bd83a2b88eab5365c678025ef35ceba8f82dd72eb66a3aceb46ca3d1ea2d616cd9b6cfb28a4fd4f76c7e66704c441ec5d90513e0bf6b8f20b51914919a951ad34279f4d072fba55fc04f54fb6e8cb01b1372637acf7306647ff87cf57eb5bbef5dea3510d54727ff3fdf654b0d20dde6a41eec405df00ef3239f70eedb179ffa25644a2763c898d410794e78b22c48fa6ddf288aadb15ad88b0220"], 0x8) 7m22.741545262s ago: executing program 5 (id=3211): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) write$char_usb(r0, &(0x7f0000000240)="60e826d15f7a2d0f72f2eec927f33be150ab4c748c3cc252ed76eff1b70682f0974981baa2f03145f2b5c4e6e117024417ec13219209bcac19e0d4fa0b4e5da859e2f62d6357696dbdd5be34f6dac072d3c0308bcb78327973818fd78482ae2ed8f0da92859d32ead9dc34dc98ee197284bc67f9c80464ff11bc08a0b9ebb9ac4daaa9e96b481de3eaea084d49659bfb4e8dfc408e68f762965e7f9bc835988598d395807bea08c098375d67cc5c3868b61549da5a6ca582698e82a40304521e7eca0f4a844f5c9b935ad822d6ab423c5320d626e3d281913fd424abd2519de11ab0033f389843d5a1", 0xe9) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x4eda0a90bb2acc2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000040)) 7m22.560901683s ago: executing program 5 (id=3213): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$phonet(0x23, 0x2, 0x1) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) syz_emit_ethernet(0x32, &(0x7f0000001b40)=ANY=[], 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x10080, 0x10, 0x4}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x4, 0x0, 0xfff, 0x2, 0xff, 0x6}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESDEC]) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@delchain={0x10d4, 0x2c, 0xf31, 0x4, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x10a8, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x2}}, @TCA_FW_POLICE={0xcb4, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe6b3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6a7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x6, 0xfff, 0x3, 0x1, 0xffff7fff, 0x2, 0x1917, 0x1, 0x8, 0x1fc, 0x2, 0x2169, 0x7, 0x2, 0x4, 0x101, 0x6, 0x21, 0x9, 0x2, 0x5, 0xde13, 0x3555, 0x8, 0x8000, 0x9, 0x3, 0x5, 0xd, 0x8, 0x6, 0x3, 0x4, 0x80000001, 0xffff, 0x9, 0x2, 0x7, 0xb, 0xe, 0x2, 0x5f, 0x7fffffff, 0x4, 0xffffffff, 0x101, 0x10001, 0x32, 0xff, 0xc6, 0x1454, 0x80, 0x200, 0x0, 0x65f6, 0x80000000, 0x7, 0x7, 0xc0, 0x100, 0x6, 0xfff, 0x7f, 0x8001, 0x6, 0x400000, 0x9, 0x2, 0xb4d, 0x4, 0x6, 0xfffffffa, 0xfffffffc, 0x16, 0x0, 0x1, 0x1200000, 0x9, 0x9, 0x2, 0x51, 0xfff, 0x1000, 0x0, 0xfff, 0x10000000, 0x7fffffff, 0x8, 0xfffffcea, 0x8c, 0x63, 0x346b, 0x2, 0x7fffffff, 0x6, 0x0, 0x8000, 0x17b7, 0x3ff, 0x4ee3, 0x7, 0x2, 0x2, 0x8001, 0x1000, 0x1, 0x7fff, 0xffffffff, 0x0, 0x70, 0x3, 0x168740, 0xfc, 0x7, 0x5, 0x3, 0x0, 0x1, 0x1, 0x7f, 0x8, 0x7, 0x81, 0x8, 0x6, 0x7, 0x3, 0x200, 0xffffffff, 0x7fff, 0x8, 0xdc09, 0x1, 0x4, 0x5, 0xffffff00, 0x1, 0x9, 0x2, 0x80000001, 0xd, 0x10000, 0x6, 0xd260, 0x80000001, 0x1000, 0x2, 0x6, 0xfffffff3, 0x4, 0x6, 0x7fff, 0x5, 0xe, 0x39e2, 0x0, 0x1, 0x3c19, 0x1, 0x101, 0xfffffffa, 0x4, 0x4, 0x5, 0x0, 0x1000, 0x0, 0xda9, 0x400, 0x801d, 0x4, 0x8, 0x2, 0x9, 0x4e, 0x1, 0x5, 0x5ca8, 0x5, 0x1, 0xdb2, 0x0, 0x6, 0x800, 0x9, 0x2, 0x1, 0x0, 0xc4b, 0x800, 0x7fff, 0x777, 0x9, 0x800, 0x1, 0xac57, 0x0, 0xf6, 0x3, 0x6f, 0x6, 0x3, 0x37e, 0x4, 0x7ff, 0x8001, 0x3bf, 0x4, 0x86, 0x2, 0x6, 0x3, 0xc9a8, 0x6, 0xe030, 0x0, 0x4000045, 0x0, 0x7af1, 0x4, 0x57a, 0x2, 0x2, 0x2, 0x8, 0x9, 0x6, 0x4, 0xda42, 0x2da, 0x6, 0x0, 0x5, 0x4, 0x9, 0x1, 0x80, 0x9, 0x4, 0x1, 0x47, 0x9c09, 0x5, 0x0, 0x81, 0x8d, 0x1, 0x8, 0x2, 0xfffffff8, 0x3, 0x9, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0xb0ba, 0x606, 0x0, 0xc5, 0x6b0, 0x3, 0x3, 0xfffffe00, 0x3, 0x2, 0x100, 0x2, 0x6, 0xb5, 0x101, 0x8, 0x1ff, 0x2, 0x5, 0xeb7, 0xf51, 0xc7d0, 0x6, 0x3, 0x8, 0x0, 0xffffffff, 0x81, 0x5, 0x1ff, 0x8, 0x1d3, 0x7ff, 0x4, 0x4, 0x0, 0x7fffffff, 0x9, 0x9a6, 0x8, 0x9, 0x4, 0x10, 0x4, 0x2e14, 0x9, 0xf6b4, 0x4, 0x2d4c, 0x7, 0x1d, 0x3, 0x5, 0xd, 0x98d3, 0x7fff, 0xfffffffd, 0xfff, 0x6, 0xc, 0x6, 0x9, 0x7, 0x4, 0x1, 0x5, 0x80000000, 0xd, 0xffff, 0x2, 0xdff, 0x7d77, 0x4, 0x4, 0x5, 0x1, 0x4, 0x8, 0x6, 0xfff, 0x3, 0xa33f, 0x9, 0x2, 0x3, 0x9, 0xffff, 0x4, 0xff, 0x0, 0x6, 0xc432, 0xa681, 0x8f9, 0x5, 0x9, 0x9, 0x9, 0x800, 0x3, 0x0, 0xffff8001, 0x7, 0x6, 0x1, 0x0, 0x1, 0x7, 0x6, 0x7, 0x2, 0x8, 0x80000000, 0x5, 0x8, 0x9, 0x0, 0xfffff801, 0xf, 0x0, 0x9, 0xe0, 0xa, 0x0, 0x9, 0x2, 0x3a4, 0xa, 0xa8, 0x1, 0x2, 0x7c, 0x9, 0xf100, 0x9ab, 0x80000000, 0x8178, 0xffffffff, 0x4, 0x4, 0x7, 0x5, 0xffffffff, 0x4b732db3, 0x1000, 0x9, 0xfffffff1, 0x8, 0x8, 0x2, 0x7fffffff, 0x0, 0x9, 0x200, 0x5, 0x8, 0x5, 0x1, 0x7, 0x6, 0x400, 0x0, 0x2, 0x0, 0x1000, 0xfff, 0xf6, 0xca2, 0x5, 0x1ecc00, 0x5, 0xfff, 0x9, 0x0, 0x2, 0x4, 0xd0a1, 0x8, 0x2, 0x9, 0x5, 0x64b6, 0x9, 0x9, 0x40, 0x4, 0x2224, 0xa, 0x9, 0x5bf89f3f, 0x7, 0x6, 0x1ff, 0x2bbeaa6a, 0x6, 0x4, 0x100, 0xfff, 0xfff, 0x7ff, 0x80000001, 0xe63, 0x400, 0x8, 0xb1, 0x8, 0x1000, 0x100, 0x2, 0x1f, 0xd, 0x5, 0x1000, 0xbb10, 0x101, 0x3b, 0xfffffff9, 0x7, 0x5, 0xffff1ab0, 0x10001, 0x6, 0x0, 0x2c, 0x3, 0x6, 0x7, 0x80000001, 0x6, 0x7fffffff, 0x79e, 0x2, 0x3, 0x5, 0x3, 0x9, 0x80, 0x7ff, 0xdb, 0xfffffff8, 0x5, 0x9176, 0xffffffff, 0x45a, 0xf0, 0x3, 0x7441e137, 0xb0, 0x401, 0x1, 0x80000000, 0x0, 0x9, 0xf, 0x8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x10000000, 0x88d, 0x1, 0x6, {0x7, 0x0, 0x836, 0x3, 0x6}, {0x8, 0x2, 0x1, 0x9, 0xc70a, 0xe09}, 0x9, 0x2, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0xfffffffe, 0x5, 0x6, 0x8, 0x4, 0x5, 0x3ddd, 0x22, 0x3, 0x100, 0x5, 0x6, 0x2, 0x8459, 0x30f, 0x2, 0xfffffffa, 0x7ab1b464, 0x8, 0x42, 0xfff, 0x8, 0x4, 0x6, 0x6, 0x7, 0xfffffff8, 0x9534, 0x7, 0x6563, 0x0, 0xa, 0x8, 0x1, 0x3, 0x8, 0x5, 0x3, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0xc6d, 0x6, 0xb, 0x1, 0x10000, 0x9949, 0x10, 0x6, 0xeb26, 0x0, 0x3ff, 0x587fbafb, 0xfe7, 0xc, 0x9, 0x1ff, 0x80000001, 0x8, 0x4, 0x0, 0x1, 0x140, 0x6, 0x3d, 0x69, 0x92f3, 0x3e849cd3, 0x1, 0x7, 0x14ea, 0xffffffff, 0xe, 0x4, 0xfffffffa, 0xff, 0xfffffeeb, 0x30, 0x2, 0x400, 0xffff912a, 0x3, 0x3, 0x4, 0x6000, 0x4, 0x2, 0x10, 0xe4d1, 0xb, 0x5, 0x2, 0x5, 0x6, 0x7, 0x100, 0x45, 0x1000, 0x1, 0x6, 0xe9f, 0x9aa3, 0x3, 0x6, 0xd, 0x81, 0x6, 0x8, 0x5, 0x6, 0x3, 0xa4d1, 0x7, 0x80000004, 0x2, 0xffff, 0x7, 0xa23, 0x2, 0x8, 0x9, 0x5, 0x1, 0x1, 0x40, 0xdd72, 0x0, 0xfffffc01, 0x8, 0x3ff, 0x81, 0x5, 0x101, 0xed96, 0x9, 0xabd, 0x7, 0x8, 0xffffffff, 0x8, 0xcec, 0x40, 0xff, 0xbdd, 0xef, 0x5, 0x5, 0x1, 0x7ff, 0xe9a, 0x8001, 0x4, 0x3, 0x80000001, 0x6, 0x6, 0x3, 0x7, 0x0, 0x5, 0x8, 0x7, 0x8, 0x8000, 0x176, 0x1, 0x4, 0x3, 0x9, 0x97f6, 0x5b7817ec, 0x2e, 0x6, 0xd, 0xfbf, 0x8, 0x3, 0x9, 0x3ff, 0x42b, 0x8, 0x4, 0x7, 0x3, 0x0, 0x3, 0x6, 0x0, 0x2, 0x9, 0x7, 0x5, 0x8, 0x200, 0x0, 0x101, 0x7ff, 0x6, 0x0, 0x40, 0x0, 0x9, 0x7fff, 0x4, 0x2, 0x9, 0x8, 0x0, 0xd, 0x4, 0x9, 0xfc0, 0xfffffffa, 0x7, 0x1, 0x7a4, 0x8, 0x1, 0x200, 0x98, 0x401, 0x5, 0xf2b, 0x26ec, 0xfffffffb, 0x9, 0x7, 0x8, 0x5, 0x0, 0x9, 0x0, 0x4, 0x5, 0x1, 0x3b, 0x6, 0x1, 0x9, 0x1, 0xffff, 0x5, 0x10, 0x1, 0xfffffff1, 0x17740, 0x3b69, 0x6, 0x9, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0xd95, 0x1, 0xd, {0x81, 0x1, 0x1953, 0x0, 0x40, 0x8}, {0x10, 0x0, 0x5, 0x4, 0xf3e0, 0x1}, 0x0, 0x400}}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_FW_ACT={0x3c4, 0x4, [@m_bpf={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x9b, 0x6, "9b3b21805e8905d7bf8c435e41c67e0c3aed91c63663ae4ae6615a5cbd7718bac5883437fc4425ad3e194ee0a25f38da4e08dd5e0242d51bd321d44422657ee367cce6ecc6ced581a003095c833bf3580add3f94ae6dec3655818c213b947dc5e04595efcebc73e2f800ebe4a76f2e889fff6e39f0cc607f72fecf70fe06719509dabc24bae7274c50de7815a49203f12e491b7764dbba"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0xbc, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8000, 0x3, 0x5, 0x4}, 0x2}}]}, {0x6f, 0x6, "233e125aab6617c76cf05baa35245e5c1bb02bffcd24c2db40f709ad172b820893be7c62736af55f6c7c9d840bc13ea03d1d80a672ab152b3eecee2d5e7e78df30038d90bc1c599588122882be1e8c8f4df4adb2cb99c9e6c885d891ee19afaa07ff95560e89e4faeb0cd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x64, 0x14, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xffbf}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x401, 0x6, 0x6, 0x9}}]}, {0x18, 0x6, "fc9e5104d32a28960d22948b3ef7a7d121062ae9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xe0, 0x14, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4c, 0xfffffffe, 0x3, 0x9, 0xffffffff}, 0x4a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x6, 0x3, 0xb}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x86d6, 0x10000000, 0x8, 0x3d5}, 0x7}}]}, {0x5c, 0x6, "7d9c495b6c5e6d0914d470f97a6142a4c883263538b98a6c0f44568dedea59e57c08e2582cd494d5651ee3e316346ce2ec9ebbd13313b829c24187901d2681cf48d83a67c765e683d1f85d5e89c9c48b07ce3aa9e68bffc3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xf0, 0x12, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, 'fw\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0xe73, 0x20000000, 0x8, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x84, 0x5, 0x2}}]}, {0x89, 0x6, "78de36a1ef56d95115f3089ef15361d17ddee504353282b1596873d1eedf349f4f192dccb06f4abed8b253a35eee24cc0b53c612d9240ef470989d59f84232ef715a924631593f428fce429c95910375197d374e922ed37b22139c1aadf60cfc93c03b6c7843ad44b62effc4f9a2634a4f12f5d23242eb3c165960ff2e413e87a4e86c9974"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}]}}]}, 0x10d4}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) 7m22.387571254s ago: executing program 5 (id=3214): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x60, 0x453, 0x100, 0x70bd2c, 0x25dfdbfe, "fa10fce0b16e8432162e51db10f8d5e877e06b419897d73b1515af92afc75bb4b8baf81098ef39afbee9fffe0d2952f3b58e1aa158b401566c7301f04b6e544f2313cb7c8585e6ef0dcf93c50e4d", ["", "", ""]}, 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x4040) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, 0x0, 0x0) syz_emit_ethernet(0x381, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x0) accept4(r1, 0x0, 0x0, 0x80800) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r3, 0xc0185879, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) listen(r4, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='binfmt_misc\x00', 0xd, 0x0) mount$bpf(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x8144e1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 7m21.917566047s ago: executing program 5 (id=3219): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x4, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x40004) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x260000, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x1001, 0xd, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@dev, @initdev}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000007c0)=0x4) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4040000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x2, @perf_bp={0x0, 0x1}, 0x10c8ec, 0x0, 0x1, 0x3, 0x6, 0x5ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x3d13, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0d04ec965599eaf879e220fe2f30b1c3b5fb0509499b5d9f4e8c128c3373c36284c461941701ec6dac3f584c4efff6a2aed3c588cec3804d25f97bc08ef4520ef31960389c732426481b4cce3be03ea081b85e3bf669378ca34c2b05f9dc0d2dd882e53887170441e9", @ANYRES32, @ANYRES64=r1], 0x4) 7m21.21348097s ago: executing program 5 (id=3220): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x3}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x440, 0x0, 0x9, 0x4, 0x6, 0x800, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000884000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r2, 0x11, 0x68, &(0x7f0000000080)=0x2, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x1adf, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 7m21.21318413s ago: executing program 35 (id=3220): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x3}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x440, 0x0, 0x9, 0x4, 0x6, 0x800, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000884000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r2, 0x11, 0x68, &(0x7f0000000080)=0x2, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x1adf, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 5m22.639997455s ago: executing program 7 (id=3936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ae4000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000eeff8e00000000000000000000000005000300050000001100040061637469766562615e6b635a4b"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 5m22.331567267s ago: executing program 7 (id=3938): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="7fb664af0a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x16, 0x4, @tid=r4}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f00000015c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000000)="e4", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000180)="f9aa819d4b", 0x5}], 0x1}}], 0x2, 0x240048d1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000", @ANYRES32], 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x4058534c, &(0x7f0000000080)={0x80, 0x2000002b, 0x7, 0x7, 0x9, 0x2}) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$setregs(0xd, r9, 0x5, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) setsockopt(r6, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 5m21.974971069s ago: executing program 7 (id=3941): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)) 5m21.568662141s ago: executing program 7 (id=3944): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@jqfmt_vfsv1}]}, 0x0, 0x5ee, &(0x7f0000000280)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000080000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4023, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xd}, 0x10c0e9, 0x0, 0x0, 0x3, 0x6, 0x6, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) lgetxattr(&(0x7f0000000140)='.\x00', &(0x7f0000000240)=@random={'btrfs.', '^\\.&!\x00'}, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_raw(r2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x21, &(0x7f0000000cc0)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbac}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x600000000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f40)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x579}}, './file0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_GET_BYNAME(r4, 0x0, 0x200408c5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup2(r7, r6) connect$inet(r8, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) 5m21.238275562s ago: executing program 7 (id=3947): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x113, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4008000) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/4068, 0xfe4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) fcntl$notify(r1, 0x402, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x85}, 0x9}, 0x80, 0x0}, 0x0) 5m18.814289955s ago: executing program 7 (id=3964): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64], 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async, rerun: 32) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000100)={{0x3a, @local, 0x4e21, 0x4, 'lc\x00', 0x0, 0x9, 0x75}, {@multicast2, 0x4e24, 0x4, 0x3, 0x471, 0x1}}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000220000000000000000000000850000002000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="3f42d59e90bb5f6b90b47c000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) (rerun: 64) recvfrom$inet(r3, &(0x7f0000000200)=""/6, 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1510) 5m18.792229995s ago: executing program 36 (id=3964): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64], 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async, rerun: 32) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000100)={{0x3a, @local, 0x4e21, 0x4, 'lc\x00', 0x0, 0x9, 0x75}, {@multicast2, 0x4e24, 0x4, 0x3, 0x471, 0x1}}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000220000000000000000000000850000002000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="3f42d59e90bb5f6b90b47c000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) (rerun: 64) recvfrom$inet(r3, &(0x7f0000000200)=""/6, 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1510) 4m28.754924288s ago: executing program 6 (id=4266): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f0000000240)="ce325319ca1049e0125e193ead5a034988099c1568ae4127619fa848fb65dfd0d1fb12afba7484462618914dff7db390f336b40ea19f69b4e914c9") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6d, 0xfffffffffffffb01, 0x2, 0x9e, 0x6, 0x7}}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x2, {0x1}}]}}}]}, 0x98}}, 0x4040) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x64, 0x0, 0x4cc6ff6c9e32d327, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44081}, 0x4008010) unshare(0x40000800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4044000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 4m26.63368985s ago: executing program 6 (id=4278): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f0000000240)="ce325319ca1049e0125e193ead5a034988099c1568ae4127619fa848fb65dfd0d1fb12afba7484462618914dff7db390f336b40ea19f69b4e914c94ecc05e8337b7ee01dc95194b963eb48a12e4a") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6d, 0xfffffffffffffb01, 0x2, 0x9e, 0x6, 0x7}}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x2, {0x1}}]}}}]}, 0x98}}, 0x4040) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x64, 0x0, 0x4cc6ff6c9e32d327, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44081}, 0x4008010) unshare(0x40000800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4044000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 4m24.430532792s ago: executing program 6 (id=4296): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="7fb664af0a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x16, 0x4, @tid=r4}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000", @ANYRES32], 0x50) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000080)={0x80, 0x2000002b, 0x7, 0x7, 0x9, 0x2}) ptrace(0x10, r8) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$setregs(0xd, r8, 0x5, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) setsockopt(r6, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 4m23.8433192s ago: executing program 6 (id=4298): r0 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e6, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0xf, &(0x7f00000002c0)) write$selinux_load(0xffffffffffffffff, 0x0, 0x11000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"92bf"}}, @common=@eui64={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8001, 0x1000, 0x8, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0xfb86, 0x49b76e82], 0xffff, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x128}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7ba56ff6446ab50738766362ab553ee5ca1c8ede4efdea41797176d3eb4c"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) (async) ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x11) (async) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x11) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x438501, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x438501, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0xb, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x8043, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x86000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x86000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @dev={0xac, 0x14, 0x14, 0x37}}}) (async) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @dev={0xac, 0x14, 0x14, 0x37}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x2}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}}, 0x5, 0x7}, &(0x7f0000000300)=0x90) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}}, 0x5, 0x7}, &(0x7f0000000300)=0x90) 4m22.370714352s ago: executing program 6 (id=4308): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="7fb664af0a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x16, 0x4, @tid=r4}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000", @ANYRES32], 0x50) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000080)={0x80, 0x2000002b, 0x7, 0x7, 0x9, 0x2}) ptrace(0x10, r8) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$setregs(0xd, r8, 0x5, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) setsockopt(r6, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 4m19.834365649s ago: executing program 6 (id=4329): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) close(r6) socket$kcm(0x2, 0x200000000000001, 0x106) r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r7, r7, 0x4) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0x80000000, 0x4) 4m19.834113169s ago: executing program 37 (id=4329): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) close(r6) socket$kcm(0x2, 0x200000000000001, 0x106) r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r7, r7, 0x4) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0x80000000, 0x4) 35.089754174s ago: executing program 3 (id=5588): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0xde, 0x2, 0x7, 0x7d, 0x8000000000000002, 0x4, 0x2, 0x2cf1}) 34.871356261s ago: executing program 3 (id=5592): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x408}, r3, 0x8}}, 0x48) socket$netlink(0x10, 0x3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x61004, 0x0, 0xffffffff, 0x6da, 0x1, 0x0, 0x0, 0x1, 0x8f}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000100)={{0x80, 0x10}, 'port0\x00', 0x20, 0x90000, 0x2, 0x0, 0xceb9, 0x9, 0x90, 0x0, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x0, 0x0, 0x200000}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x14) uname(&(0x7f0000000080)=""/209) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r6}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) 34.709999696s ago: executing program 3 (id=5593): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x200, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000440)="4108747ee4b46f7f324b75ef5708e1f1", 0x10) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x255, 0x6, 0x6], [0x106, 0x7, 0x1, 0x9, 0x8002, 0x4, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x7, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0x10a51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x796, 0x5, 0x931, 0x1000101, 0x3, 0x1000000000008001, 0x8000000000000000, 0x7, 0xc, 0x8, 0xffffeffffffffffa, 0x6a7, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff8, 0x4, 0x0, 0x5, 0x10001, 0x8, 0x80008000, 0x7ffffffffffffffe, 0x8, 0xfffffffffffffffc, 0xbaa, 0x5bc, 0x1, 0x1, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x7, 0x3, 0xb, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0xe, 0x100000002, 0xf, 0x4, 0x8, 0x7, 0x8, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x200000100000003, 0x4, 0x7, 0x406, 0x9, 0x6, 0x5, 0xfffffffffffffffd, 0x3, 0x40, 0x7fffffff, 0x88, 0x3, 0x1]}) (async, rerun: 64) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() (async) mkdir(0x0, 0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r5 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000180)={0x8, {{0xa, 0x4e22, 0xfff, @mcast2, 0xb}}, {{0xa, 0x4e1d, 0x3fb, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcd004ef}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast1, 0x6}}, {{0xa, 0x4c21, 0x4e11, @empty, 0x1000}}}, 0x108) (async, rerun: 32) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (rerun: 32) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) (async, rerun: 32) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x4}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x2}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0xa, [@enum64={0x8, 0x6, 0x0, 0x13, 0x1, 0x0, [{0x3, 0x605, 0x3}, {0x10, 0x2000, 0x4}, {0xd, 0x10, 0xd7a4}, {0x3, 0x80, 0x9}, {0x9, 0x7ff, 0xe}, {0xb, 0x8, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @var={0x8, 0x0, 0x0, 0xe, 0x3, 0x1}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @var={0x7, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x30, 0x30, 0x30, 0x2e, 0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000000200)=""/164, 0xca, 0xa4, 0x0, 0x3}, 0x28) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x529, 0x0, 0x7, 0x4088a, 0xffffffffffffffff, 0x10, '\x00', 0x0, r7, 0x3, 0x5, 0x3}, 0x50) (async) timer_settime(0x0, 0x1, &(0x7f0000000000), 0x0) (async, rerun: 32) timer_delete(0x0) (rerun: 32) 34.59298043s ago: executing program 3 (id=5595): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x401}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48011}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@local, 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@loopback, 0x0, 0x0, 0x2, 0x1, 0x3}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000080) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'xfrm0\x00', {0x2}, 0x8005}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000003c0)={0x0, 'batadv0\x00', {}, 0x10}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000200)=0xfffffffd, 0x4) close(0x3) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x0, 0x0, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0xbab]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r7 = getpgid(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r8 = syz_pidfd_open(r7, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) pidfd_getfd(r8, r8, 0x0) 33.751580977s ago: executing program 3 (id=5603): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000280)=r2, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001014010000000000000000000800", @ANYRES32=r4], 0x30}}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1ef, &(0x7f0000000b80)="$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") listxattr(0x0, 0x0, 0x0) rename(&(0x7f0000000100)='./file0\x00', 0x0) pread64(r0, 0x0, 0x0, 0x151) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getegid() r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x114, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xec, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f24aebc57cd4a30f0e2b00586d3a576e282224dd1c0583ec969cfe8de046ceb"}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 32.612819784s ago: executing program 3 (id=5613): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) readv(r0, &(0x7f0000002800)=[{&(0x7f0000000580)=""/4096, 0x1000}, {0x0}], 0x2) 32.594921294s ago: executing program 38 (id=5613): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) readv(r0, &(0x7f0000002800)=[{&(0x7f0000000580)=""/4096, 0x1000}, {0x0}], 0x2) 6.680417126s ago: executing program 0 (id=5885): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001014010000000000000000000800", @ANYRES32=r2], 0x30}}, 0x94) 6.170150912s ago: executing program 4 (id=5886): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\-\x00', 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000540)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x350, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0x8, 0x2}, {0x85, 0x0, 0x0, 0xc9}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6b09074f00302901fc02000000000000"], 0x0) 6.041717276s ago: executing program 0 (id=5888): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4884) r3 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2040041}, 0x800) unshare(0x6a040000) unshare(0x22020600) socket$netlink(0x10, 0x3, 0x0) unshare(0x2030000) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='!~u\t&0&&&') syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f00000003c0)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x1c, r5, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd49920d376554f52}, 0x4000048) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x6) 5.715864077s ago: executing program 9 (id=5890): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) 5.485920044s ago: executing program 9 (id=5892): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '/(\''}}, {@ignoreqv}, {@aname={'aname', 0x3d, '-),'}}, {@ignoreqv}], [{@euid_eq}, {@fowner_eq}, {@uid_gt}, {@dont_measure}]}}) 5.211196683s ago: executing program 9 (id=5893): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c52, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8,uid=', @ANYRES64=r3, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRES16=r1, @ANYRESOCT=r3], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffbfffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xffff7ffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0x241c4000, 0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001100)) 5.109395996s ago: executing program 4 (id=5894): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x33b, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) r2 = geteuid() sendmsg$nl_generic(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, 0x1c, 0x400, 0x70bd2c, 0x25dfdbff, {0x1c}, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0xf7, 0x0, 0x0, @binary}, @typed={0x8, 0xb, 0x0, 0x0, @uid=r2}, @generic="486afc1853140728b861db651325e78a13164430cbf409ad948e0bc533e8107db4f0fbd26b08527b9b1fccfa8ba47e9d658fa50463082867802a8470e5ff45d27723a24f666acac939f851760e4203237ae105d3d98467122cccfd0a2624043b1d7fc91068dca5fc81c709def66d8a5bad9c640aa26a8122e2a89513bbd7983990a1f518df3144f8717073ca9c99f9300392", @nested={0x18, 0x132, 0x0, 0x1, [@typed={0xc, 0x144, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x7c}, @nested={0x4, 0xa3}]}, @generic="e58441bc4bb4bdffb7907c9231bba75ef2a32ee521a74769fedd0a5e522863f8db562d490700fb6ac89ac895819d7fc0b02cfc1d79"]}, 0x108}}, 0x2004c084) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockname$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) (async) getsockopt$sock_cred(r4, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="e40000", @ANYRES32=r7], 0xe4}, 0x1, 0x0, 0x0, 0x8010}, 0x20004011) (async) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x26}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf004}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x40) (async) r10 = shmget(0x1, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r10, 0xf, &(0x7f0000000380)=""/44) 4.961647381s ago: executing program 4 (id=5895): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$unix(r1, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=@delsa={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbfe, {@in=@loopback, 0x4d4, 0x2, 0x6c}}, 0x28}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f0000000900)}], 0x3) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x1, 0x4) 4.031992791s ago: executing program 0 (id=5897): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000140)='./file1\x00') 3.663282813s ago: executing program 2 (id=5904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000dfffffff621121000000000040000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000300)=@ethtool_coalesce={0xf, 0x6181fecd, 0x6aaa, 0xffffffff, 0xef27, 0x200, 0x0, 0x281, 0x6, 0xff, 0x4, 0x2, 0x8, 0x1ff, 0x9ba, 0x200, 0x3, 0x2ab5, 0x7fff, 0x0, 0x852, 0x2, 0x9}}) socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x9, 0x200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2ce3ff00", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250c0000001800058008000100756470000c0002800800040001800000"], 0x2c}, 0x1, 0x0, 0x0, 0xc0d8}, 0x50) mmap$xdp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'geneve1\x00', {}, 0x6}) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f00000001c0)="d921d56e05d3f4ac4c70fbdf44fba87d05019aed3136e69f2eb57bf53e7c4e19848bc8aebabe", &(0x7f0000001ec0)="3422d4609a6f9563cdeeafb8a8b298dc1717c6b84bf2745f480be82f36d6f61aa5d3f0eeb474124d8246515e3a1a48aa11e26940d7f02e0cc560b6c751cd5487c4ded0672e503345fda1ab5d00aaa674ab4c9371902960681dd829bb09ac602350e9cf150a3df84f5e6d7745c38444117ba77cc269c4cb82165de5e06d7f5047ea91c5da511a8fc389c1b3199c13499a29473a8b2c48a6d324c430fa50cbe378291ed88ebdc77c2833c371c41f5e11e0c594b2f7978ca4fdfae394f313eeff9c7effcba2c0320b59c9eb2dd92f5fc6440a1d33f5c90e61bcd70d8eb9ad7396644eb110159cfcaee77307c9c72557e30a212e9c959928b9282cfdaa16172e76ea918c95c13ae6ba10c566a418193f808cc068256eae320b52c28994be5c12a9743ca85507865c99758eae0cb7d9ac5350b79467d6123d0c84ba5d2fa98dc58addbb470b8365aa3a52f86a70c354526653b224d74751e157fb0407e83db8413847819f44e974635f101c77075b503db198fb0e703823f6ce8c14e699fdb5b7211c1cfc9849c678880b2b922eab50a45b959a8ebc0b0903523266583b359f029f36a15e7043b76803be6eddfc3b8d98a40365e18bda781d7c558332c11fd435ed4fbf019c7636b2bf0344322f19d0f63783d875ecc2df5c885315f018adeeff01f3292080947815838ffbc33605aacb77282b758f0241527b236ec9b53b4e1358c4b9d9ba2808125c66dd6988a924453da932c667b18d4006bf675825fed84d6478e67cbc1dc756bfbba771d6a02dcae396b59d2ea10fad35ba4afcb3e0ab85f9c34b97d8637f90420e1ea88e66902cf44059b08588d27e2fc51ba6242fb428209a76878472b6e74425eab4bf91ef501e505f47588fdbe9c2a71b05a73e324658566cebfd25ac364351d36544d418fe6232ff863c6f3af4844d6be15a8079a52c1f746bf6eb5c3c484fd412b53be046774a8234cf006c18d12197989805e8eebbf5ec34f79618716cdac2fb7884a4184668f63cc4063a0234d6602a129d98203d22149d503ddd6e1f1214c90ab4c1389a2a3b64acaddd1ee9a7532cbd86d08d43a04704034dc9be7aaee7e08dd49a5ff41d596bd051b5ad0f574a715c9b9823e2bba8fd6827e4989ad0aa9431545d9f916f961972862b291396c8362b8314c42f3247c5b2ca9dbd94a9c214c4d8378f901af1e82c718c38b96f0cc9bea695061786cdee72c06f8d8ff52cbfbe3e6f34b4e1039bf533a4c13906af7f721ca399c55bf8b44fdfec745e505528bc80ea85960fead3c21063b8bafeae020fd29aa2db1e790b0aa11a74477cb8dca5aed3e0f9df444bb247ccb3384d56bd4f6e7d188df8eac71d4464cc28ee989ff4e8439987b7045d6c1b8ce7fd81c15cf92e3cc53563658f868a7ec20d60688fd66341f4b6d8b1d1a959402fa1866a4ffea9b7606e3b89aba76315e0dd58844f684b1f7591a882d2df7c6b4513fde1a800620a87aeb31ef5e1060475b05489798b2d91cfa7ba3194c047846cebb0c1c24220545e93bb9017aeea9caeb90f59fe3bd54e8bed5ba7d7c8f31d19e10373774f12ec8f5349f3ac113584e99f96d89472e3ebd2af494c34a0ff01754df64d51bd978cd3ad9b5ebfb9bd8a637ce178851fa0e7872f7af826565f8c212fa84d09086706e449e2a6c33742a1a6c7d9a73d699fff8ee334cffe93dd204a3a6223dd0b59d7f37a6f66c9bd692f11d92201164e3fbf9b68ed3f4257f92e267344f340de262f9bf0f3a302831951d038d0e70630112c9ef734e9a1ffc07f03107942c20f50086e142a44a7bc0596897f76981f8bdfef2eaaf17059ac147be70174f01c555039db6a7ddd7968f7edd720d6f8592da47a50f0a5f0e2fb1c09394b107f9c17234dcff2bb5782d29eb6a37f007acb770358ee89ce1f3cc48c0985560c3b17850c63922b3460ab2592b197c7c8e4014cea72e0adacb5c4fdc6e29440e90835300a07cd8e5847b45c84979c46f78b7fa61a361e4343b4d045e4e79df94517a309336417b97740abf1f31c21cbf1bc12e23ff696fe3bcad335c37b5a15d3a265e3fea51615b02341bf026aaf3f6622e21c7b8e8cd57d0b5bfc612b691888a17333f2d984f661a18f21436e8c77c96cafc0c9acc6aadac76612e6d20ccfe7d3f6d8cbb408bc7040f3431934c780c955e771e230024d5875f7ef89b9ced6d633e88d08f77d2695b88e9e10e0a4d59a14e40598eac1926fdb4a95f5deea59e133f1886969b0b35535766d7adf169ab49f55ff581704a8a38d00dc12ce572ae94f79752f63c7291279c7a0da6ce6ddda5ca462a582f43bad073f2790d7c595a971e56356722194cca297cb023b93e8c9639362c1daae87c0ed08fce0f1834c07bacda0fa78c9d9d35b63bbe193a0ac5344537958be5272604f089f0e0cfe243e690c25cecf4ae0f2e7db08b9ac1bf0ee681548cfd1556061e5c340c078b8a68db8df79a84e3c27343dc41986c4a84a900dc0141b7a08ffef87f7eead659e35c5d37417c7adf6a8519efea8b38c99e576253c96d75a973d8b6fd3d063646f29a3a6614149d6ab71b32133601f9a92f1d8ed82284da3606a66d81087cc3754e8c8dbf20b3433dab435715e64e6c517bb41e76403b40760e59df73436ed7def8fdc76afa608c72c2eec4b4906729b4dcdc309db58655e0eb9996b25dc1cc26e5bcdf7b2f59c80ed72192770371468f89b8d029e89dea763c784af9db3d43c86a367667ab6b091cd6adf42bfa6b2847083c6d332d1f9e80298f9101fefc467e9ade86aca60dceae987d30b749a50a5d4c6093fb5f697af7df795b7e5a2eb4ded04f82398204f9d5fada8164147d85cbeaf320d5efab0c69280dc0483a80024beed623416f4783233803f9a79eb0bce3090f1d7b5b40e5dab317324d3c2240ea16d88db083b3bed6f4860cd2ed63b13a3d64b86c3dcd0d5ab287d0f1e958b88b21a934b217401d19ac10cf6f953f658ae1e55789cbbb7fbdeb57c9b844436f294ff8e38bf2fb7bdc4d125913a4d6ab4feb8e5c3e891d60a1484a4e33ad3bf41722401ac97e34fe384a372280936bdc197096fb2fd4adf5d125c4d64bc6515fec1d9cf7f8b08f38e5bb8fcfa1d1892ebd63b43bd65d3ceb43970f7e01ed2750aae59d33f496134c0121412c0b1fa5cab44c4098dcd6fe2d126978e12330472163b7d38eea20c69b94449992c82e8dd7e36b6688b865afafe251f9ab01321385ca9c66a00ad59727a9f65db3fbf653ca0d11232b6ad6eb2cba594cf483987f809f36ef9fefd8484583e9e194f2d8c6e3ffe8fd59d24d80c914ed12d230eef4ef3ba318e2b006b2b0cfddf664129a55a33d34328545f3cee0ad0894904e4a7b8958d73f1c98f6368ada330537a4437d1d0d80a24cbce97894ffa5040f9619eb2dadea25f46053167817cc8a6d8445a6d51324a1283d4e487b04eeb7c82b0d56d11a960e561bd327eb91248cdacc8a32a2dba02c133833f105374f8b030310a96827bb2b1f3636e9afae326bc41e6906dc3d77262ae98afbf4379ac80379dcebccb0612bcbb8269f0d0433fbffe49476c6bb2c880d77881b3cc80c9f937e0562464229e1de34237ebc76804625a57c5a6a8df709a9cd1a64274129976fb2e84cc254dba7dfc168a599c5278a043e38a2dccd0fdaeaef59534014fd355fff118da5b44f7b36dbd74756c3ef6e86f6be64b0da3ed3fed25b031bd8cd9e4eaea29c9182136773f48d86e228a1023c2f0ef76e9257f4ba77e9dc114df1755273c6845733d60e52d070a85f9975b1d6fcf9db156b02a282322d50613aaf9d7c56dcfe2206bc69633f8d6b521715ae175d6a62e1b30fed8811d752d5d6f8ee451f1fe95be2c483b81623afdd4259a89ea7e9bbe943b60769a843a79af7f880af714a5d2dfe7d81ef991e89244e7ecd48a6e5a8f54d476c5b90662c7022c90a37b635f462d4581480bdf6b100e857cc4164f7342fa9f665c83b711ec253860e5802ccccf5502b2b0e3fe06675589245a27f58a2f11ea57474a6cf95b7f33e18ad34756a0684a08ec51ba5e4e784be900d7e7cf961012ac833ac7b8729a8bd9a7fb91a342f5d40eedec47982bd1226719a45026ca9a2b53ec25aefaa414b75a595d4ae8f96a581e7d492b02f5ffb2f96682b3aba7440313fd0a05139bd3cac57f2b5e1e916c873e55288e4de104f3103b006ac703b664931af66fe7e186aaba5fc61d8f3bbc8f21c867e48523d18dc2092889c2cf6ec851140918ec89f7256693eb8930759c369ba67bcbecbbf67725604e5182f6052af95cf2dd1898e030636e8460db6c39b4b9d882eb851bd94bfa3c"}}, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f40)={0x1, &(0x7f0000000f00)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) 3.640317553s ago: executing program 8 (id=5905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (fail_nth: 1) 3.635068934s ago: executing program 9 (id=5906): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a834"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008000100010000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000314010025bd7000ffdbdf250900020073797a3200000000080041007369770014003300766574683100000000120000000000000900020073797a300000001f0800410072786500140033007866726d3000"/96], 0x60}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000) unshare(0x64000600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44081}, 0x88c0) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 3.241508916s ago: executing program 8 (id=5907): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x6c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x100}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xbf, 0x7, 0xa, @ipv4={'\x00', '\xff\xff', @local}, @private0, 0x10, 0x1, 0x0, 0x3}}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') preadv(r7, &(0x7f0000002b40)=[{&(0x7f0000001b40)=""/4096, 0x1000}], 0x1, 0x5, 0xfffff073) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', r6, @fallback=0x1a, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r9, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a79000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000414000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4cfc, &(0x7f0000000bc0)={0x0, 0x3cb1, 0x2000, 0xa, 0x20002f6}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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") syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') 3.241022287s ago: executing program 0 (id=5908): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4884) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2040041}, 0x800) unshare(0x6a040000) unshare(0x22020600) socket$netlink(0x10, 0x3, 0x0) unshare(0x2030000) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='!~u\t&0&&&') syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f00000003c0)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x1c, r4, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd49920d376554f52}, 0x4000048) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x6) 2.606037856s ago: executing program 2 (id=5909): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@nodiscard}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x3, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r0}, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0x40084503, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000005a80)=@ethtool_eeprom={0xb, 0x1000, 0xceca}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc800) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00', @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20) io_setup(0x1, 0x0) sync() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) 2.058964204s ago: executing program 2 (id=5910): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000200)=0x84) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001014010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) 1.826244311s ago: executing program 2 (id=5911): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=@delsa={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbfe, {@in=@loopback, 0x4d4, 0x2, 0x6c}}, 0x28}}, 0x0) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f0000000900)}], 0x3) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x1, 0x4) 1.735889304s ago: executing program 0 (id=5912): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888105", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.485617343s ago: executing program 0 (id=5913): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f0000000240)="ce325319ca1049e0125e193ead5a034988099c1568ae4127619fa848fb65dfd0d1fb12afba7484462618914dff7db390f336b40ea19f69b4e914c94ecc05e8337b7ee01dc95194b963eb48a12e4a") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6d, 0xfffffffffffffb01, 0x2, 0x9e, 0x6, 0x7}}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x2, {0x1}}]}}}]}, 0x98}}, 0x4040) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x64, 0x0, 0x4cc6ff6c9e32d327, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44081}, 0x4008010) unshare(0x40000800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4044000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) gettid() syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 1.405947215s ago: executing program 8 (id=5914): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) 1.321631788s ago: executing program 8 (id=5915): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '/(\''}}, {@ignoreqv}], [{@euid_eq}, {@fowner_eq}, {@uid_gt}, {@dont_measure}]}}) 1.299685138s ago: executing program 4 (id=5916): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\-\x00', 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000540)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x350, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1c0, 0x1e0, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0x8, 0x2}, {0x85, 0x0, 0x0, 0xc9}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6b09074f00302901fc02000000000000"], 0x0) 1.293376158s ago: executing program 8 (id=5917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f00000003c0)="f9d33075218151db3d316f3a277f", 0xe, 0x4004011, &(0x7f0000000080)={0x11, 0x11, r3, 0x1, 0xdb, 0x6, @multicast}, 0x14) (fail_nth: 2) 948.39202ms ago: executing program 2 (id=5918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000140)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r4, &(0x7f00000003c0)="f9d33075218151db3d316f3a277f", 0xe, 0x4004011, &(0x7f0000000080)={0x11, 0x11, r3, 0x1, 0xdb, 0x6, @multicast}, 0x14) 857.537383ms ago: executing program 8 (id=5919): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x8}, 0x1a1ed, 0x1000, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x9, 0xffffffff, 0x7, 0x4, 0x54}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x8000000, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @local, @loopback, {[@noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xec, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xa5, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b00)={'ip_vti0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x0, 0x40, 0x9, 0x5, {{0x2c, 0x4, 0x0, 0x5, 0xb0, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @empty, {[@ssrr={0x89, 0x7, 0x29, [@loopback]}, @lsrr={0x83, 0x7, 0x11, [@empty]}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x9, [{@remote, 0xf}]}, @timestamp_addr={0x44, 0x2c, 0x67, 0x1, 0x2, [{@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@loopback, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x8}, {@rand_addr=0x64010102, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x56, 0x3, 0x2, [{@empty, 0x5}, {@loopback, 0x100}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x7, 0x12, "59a262455416d7dcb710983bc8005a86"}]}, @timestamp_prespec={0x44, 0x14, 0xe, 0x3, 0x9, [{@private=0xa010101, 0x1ff}, {@private=0xa010102, 0x4}]}]}}}}}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x39b3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = io_uring_setup(0x1b81, &(0x7f0000000040)={0x0, 0x24d34f, 0x1f480, 0x3, 0x3b8}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) 368.236868ms ago: executing program 9 (id=5920): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@nodiscard}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x3, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r0}, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0x40084503, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000005a80)=@ethtool_eeprom={0xb, 0x1000, 0xceca}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc800) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00', @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20) io_setup(0x1, 0x0) sync() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) 367.727979ms ago: executing program 2 (id=5921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002000000850000000500000095000000000000009500a505000000009d626e70e9673322c7b85ffaf65c66ad587d51e8e0c4dfe91759b3f0f9f5ae8e3f9b82270eae11be2c6b3322403a0e3a6ac538f90427f5672fe15e688d62cec17c4a6f411694008948951a47de9b1a3edb8696448c0169532ec1422053b8636554129da48fa59cffe396b8d33b1e214015bc797bea7bc32a0dd1b228af1f0a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfff, 0xecc}, 0x121d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x48, 0x0, 0x31, 0x0, 0x552, 0x48402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf40c, 0x1, @perf_config_ext={0x14439d6d, 0x81}, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xf, 0xffffffffffffffff, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r4, 0x0, 0x4000800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000001dc0)=@buf={0x1000, &(0x7f0000000dc0)="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"}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f0000000040)=0x6945, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) fallocate(r6, 0x81, 0x13, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100"], 0x64}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_config_ext={0x1, 0x8}, 0x10ecc9, 0x1224, 0x3, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x38624b38}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 363.674129ms ago: executing program 4 (id=5922): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4884) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2040041}, 0x800) unshare(0x6a040000) unshare(0x22020600) socket$netlink(0x10, 0x3, 0x0) unshare(0x2030000) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='!~u\t&0&&&') syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f00000003c0)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x1c, r4, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd49920d376554f52}, 0x4000048) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x6) 43.641449ms ago: executing program 9 (id=5923): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888105", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=5924): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xe2ff, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") kernel console output (not intermixed with test programs): ] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 912.299034][T24696] ? perf_output_begin_forward+0x55f/0x5e0 [ 912.299053][T24696] ? ktime_get+0x212/0x240 [ 912.299064][T24696] ? avc_has_perm_noaudit+0xa3/0x120 [ 912.299094][T24696] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 912.299174][T24696] __vmalloc_noprof+0xa4/0xf0 [ 912.299237][T24696] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 912.299252][T24696] bpf_prog_alloc_no_stats+0x47/0x390 [ 912.299307][T24696] ? bpf_prog_alloc+0x2a/0x150 [ 912.299383][T24696] bpf_prog_alloc+0x3c/0x150 [ 912.299399][T24696] bpf_prog_load+0x54b/0x1100 [ 912.299421][T24696] __sys_bpf+0xbae/0xc30 [ 912.299511][T24696] __x64_sys_bpf+0x69/0x80 [ 912.299527][T24696] x64_sys_call+0x10cb/0x3020 [ 912.299540][T24696] do_syscall_64+0x136/0x3c0 [ 912.299558][T24696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.299627][T24696] RIP: 0033:0x7fb336a5ce59 [ 912.299669][T24696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.299681][T24696] RSP: 002b:00007fb3354af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 912.299701][T24696] RAX: ffffffffffffffda RBX: 00007fb336cd5fa0 RCX: 00007fb336a5ce59 [ 912.299715][T24696] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 912.299722][T24696] RBP: 00007fb3354af090 R08: 0000000000000000 R09: 0000000000000000 [ 912.299735][T24696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.299742][T24696] R13: 00007fb336cd6038 R14: 00007fb336cd5fa0 R15: 00007ffd07d44928 [ 912.299754][T24696] [ 912.299942][T24696] syz.0.5496: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 912.582320][T24700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 912.587989][T24696] CPU: 1 UID: 0 PID: 24696 Comm: syz.0.5496 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 912.588036][T24696] Tainted: [W]=WARN [ 912.588043][T24696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 912.588055][T24696] Call Trace: [ 912.588062][T24696] [ 912.588114][T24696] __dump_stack+0x1d/0x30 [ 912.588221][T24696] dump_stack_lvl+0x95/0xd0 [ 912.588240][T24696] dump_stack+0x15/0x1b [ 912.588258][T24696] warn_alloc+0x145/0x1c0 [ 912.588284][T24696] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 912.588387][T24696] ? perf_output_begin_forward+0x55f/0x5e0 [ 912.588417][T24696] ? ktime_get+0x212/0x240 [ 912.588437][T24696] ? avc_has_perm_noaudit+0xa3/0x120 [ 912.588514][T24696] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 912.588540][T24696] __vmalloc_noprof+0xa4/0xf0 [ 912.588595][T24696] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 912.588622][T24696] bpf_prog_alloc_no_stats+0x47/0x390 [ 912.588646][T24696] ? bpf_prog_alloc+0x2a/0x150 [ 912.588734][T24696] bpf_prog_alloc+0x3c/0x150 [ 912.588759][T24696] bpf_prog_load+0x54b/0x1100 [ 912.588794][T24696] __sys_bpf+0xbae/0xc30 [ 912.588899][T24696] __x64_sys_bpf+0x69/0x80 [ 912.588984][T24696] x64_sys_call+0x10cb/0x3020 [ 912.589006][T24696] do_syscall_64+0x136/0x3c0 [ 912.589034][T24696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.589081][T24696] RIP: 0033:0x7fb336a5ce59 [ 912.589170][T24696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.589241][T24696] RSP: 002b:00007fb3354af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 912.589262][T24696] RAX: ffffffffffffffda RBX: 00007fb336cd5fa0 RCX: 00007fb336a5ce59 [ 912.589277][T24696] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 912.589290][T24696] RBP: 00007fb3354af090 R08: 0000000000000000 R09: 0000000000000000 [ 912.589309][T24696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.589322][T24696] R13: 00007fb336cd6038 R14: 00007fb336cd5fa0 R15: 00007ffd07d44928 [ 912.589341][T24696] [ 912.589463][T24696] Mem-Info: [ 912.640230][T24700] EXT4-fs (loop3): 1 truncate cleaned up [ 912.657287][ T7842] Bluetooth: hci1: command 0x1003 tx timeout [ 912.661675][T24700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.666649][T19568] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 912.690736][T24696] active_anon:124531 inactive_anon:23333 isolated_anon:0 [ 912.690736][T24696] active_file:0 inactive_file:27631 isolated_file:0 [ 912.690736][T24696] unevictable:0 dirty:147 writeback:0 [ 912.690736][T24696] slab_reclaimable:4359 slab_unreclaimable:61079 [ 912.690736][T24696] mapped:30545 shmem:136613 pagetables:4973 [ 912.690736][T24696] sec_pagetables:0 bounce:0 [ 912.690736][T24696] kernel_misc_reclaimable:0 [ 912.690736][T24696] free:1664967 free_pcp:9336 free_cma:0 [ 912.752144][T24703] ext4: Bad value for 'init_itable' [ 912.779561][T24696] Node 0 active_anon:498992kB inactive_anon:93332kB active_file:0kB inactive_file:110568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122128kB dirty:1080kB writeback:0kB shmem:547420kB kernel_stack:5664kB pagetables:19916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 912.827839][T15367] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.850895][T24696] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.972270][T24696] lowmem_reserve[]: 0 2878 7857 7857 [ 912.977804][T24696] Node 0 DMA32 free:2944100kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947728kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 913.028095][T24696] lowmem_reserve[]: 0 0 4978 4978 [ 913.033478][T24696] Node 0 Normal free:3699896kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:498200kB inactive_anon:93332kB active_file:0kB inactive_file:110576kB unevictable:0kB writepending:1224kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:33484kB local_pcp:6528kB free_cma:0kB [ 913.045950][T24712] EXT4-fs: inline encryption not supported [ 913.071022][T24696] lowmem_reserve[]: 0 0 0 0 [ 913.077743][T24696] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 913.098983][T24696] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944100kB [ 913.115504][T24696] Node 0 Normal: 502*4kB (ME) 534*8kB (UME) 175*16kB (UME) 122*32kB (ME) 41*64kB (UM) 138*128kB (UME) 65*256kB (UM) 43*512kB (UM) 15*1024kB (UM) 8*2048kB (ME) 877*4096kB (UM) = 3695864kB [ 913.134951][T24696] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 913.145155][T24696] 164671 total pagecache pages [ 913.156995][T24712] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 913.160979][T24696] 36 pages in swap cache [ 913.168803][T24712] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 913.173870][T24696] Free swap = 123964kB [ 913.189224][T24696] Total swap = 124996kB [ 913.193450][T24696] 2097051 pages RAM [ 913.197658][T24696] 0 pages HighMem/MovableOnly [ 913.202471][T24696] 81720 pages reserved [ 913.212482][T24712] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 913.232671][T24712] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5503: bg 0: block 248: padding at end of block bitmap is not set [ 913.251082][T24712] loop4: lost filesystem error report for type 5 error -117 [ 913.251559][T24712] Quota error (device loop4): write_blk: dquota write failed [ 913.258976][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 913.258993][ C0] EXT4-fs (loop4): last error at time 1782567339: ext4_validate_block_bitmap:441 [ 913.282654][T24712] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 913.292951][T24712] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.5503: Failed to acquire dquot type 1 [ 913.305286][T24712] loop4: lost filesystem error report for type 5 error -28 [ 913.349683][T24717] mmap: syz.9.5505 (24717): VmData 17580032 exceed data ulimit 13. Update limits or use boot option ignore_rlimit_data. [ 913.387577][T24712] EXT4-fs (loop4): 1 truncate cleaned up [ 913.398241][T24712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 913.428306][T24727] set_capacity_and_notify: 6 callbacks suppressed [ 913.428376][T24727] loop0: detected capacity change from 0 to 4096 [ 913.719507][T20049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 913.753156][T24734] loop9: detected capacity change from 0 to 512 [ 913.775783][T24734] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 913.788299][T24727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.804689][T24734] EXT4-fs (loop9): 1 truncate cleaned up [ 913.867657][T14393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.887402][T24734] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.940226][T24738] FAULT_INJECTION: forcing a failure. [ 913.940226][T24738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.953342][T24738] CPU: 1 UID: 0 PID: 24738 Comm: syz.3.5512 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 913.953371][T24738] Tainted: [W]=WARN [ 913.953378][T24738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.953391][T24738] Call Trace: [ 913.953470][T24738] [ 913.953556][T24738] __dump_stack+0x1d/0x30 [ 913.953648][T24738] dump_stack_lvl+0x95/0xd0 [ 913.953788][T24738] dump_stack+0x15/0x1b [ 913.953808][T24738] should_fail_ex+0x25e/0x270 [ 913.953831][T24738] should_fail+0xb/0x20 [ 913.953922][T24738] should_fail_usercopy+0x1a/0x20 [ 913.953949][T24738] _copy_from_user+0x1c/0xb0 [ 913.953965][T24738] memdup_user+0x5e/0xd0 [ 913.954084][T24738] nvram_misc_write+0x78/0xd0 [ 913.954111][T24738] vfs_writev+0x41e/0x8b0 [ 913.954136][T24738] ? __pfx_nvram_misc_write+0x10/0x10 [ 913.954197][T24738] __se_sys_pwritev2+0xfc/0x1c0 [ 913.954217][T24738] __x64_sys_pwritev2+0x67/0x80 [ 913.954236][T24738] x64_sys_call+0xe07/0x3020 [ 913.954303][T24738] do_syscall_64+0x136/0x3c0 [ 913.954350][T24738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.954368][T24738] RIP: 0033:0x7f17d678ce59 [ 913.954384][T24738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.954410][T24738] RSP: 002b:00007f17d51e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 913.954440][T24738] RAX: ffffffffffffffda RBX: 00007f17d6a05fa0 RCX: 00007f17d678ce59 [ 913.954452][T24738] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 913.954464][T24738] RBP: 00007f17d51e7090 R08: 00000000ffffffff R09: 0000000000000001 [ 913.954548][T24738] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 913.954563][T24738] R13: 00007f17d6a06038 R14: 00007f17d6a05fa0 R15: 00007ffce2a5a8a8 [ 913.954584][T24738] [ 913.974604][ T28] audit: type=1400 audit(1782567339.918:3289): avc: denied { write } for pid=24733 comm="syz.9.5509" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 914.250433][ T28] audit: type=1400 audit(1782567339.918:3290): avc: denied { write } for pid=24733 comm="syz.9.5509" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 914.272173][ T28] audit: type=1400 audit(1782567340.157:3291): avc: denied { rename } for pid=24733 comm="syz.9.5509" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 914.294401][ T28] audit: type=1400 audit(1782567340.157:3292): avc: denied { rename } for pid=24733 comm="syz.9.5509" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 914.568406][T24745] lo speed is unknown, defaulting to 1000 [ 914.585151][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.688893][T24750] loop0: detected capacity change from 0 to 512 [ 914.794592][T24750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 914.843911][T24750] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.5511: iget: bad i_size value: 38620345925642 [ 914.861414][T24762] loop3: detected capacity change from 0 to 1024 [ 914.879763][T24750] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 914.880083][T24750] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5511: couldn't read orphan inode 15 (err -117) [ 914.889573][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 914.889636][ C1] EXT4-fs (loop0): initial error at time 1782567340: ext4_orphan_get:1399: inode 15 [ 914.889686][ C1] EXT4-fs (loop0): last error at time 1782567340: ext4_orphan_get:1399: inode 15 [ 914.943942][T24762] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 914.959156][T24750] loop0: lost filesystem error report for type 5 error -117 [ 914.968874][T24750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.998805][T24762] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.5515: lblock 2 mapped to illegal pblock 2 (length 1) [ 915.029618][T24762] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 915.031090][T24762] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 915.040320][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 915.040342][ C1] EXT4-fs (loop3): initial error at time 1782567340: ext4_map_blocks:791: inode 3: block 2 [ 915.040389][ C1] EXT4-fs (loop3): last error at time 1782567340: ext4_map_blocks:791: inode 3: block 2 [ 915.076202][ T28] audit: type=1400 audit(1782567340.994:3293): avc: denied { name_connect } for pid=24772 comm="syz.8.5518" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 915.102295][T24775] loop9: detected capacity change from 0 to 1024 [ 915.113875][T24762] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.5515: lblock 0 mapped to illegal pblock 48 (length 1) [ 915.128689][T24762] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 915.130078][T24762] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 915.159515][T24762] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.5515: Failed to acquire dquot type 0 [ 915.171048][T24762] loop3: lost filesystem error report for type 5 error -117 [ 915.171177][T24762] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 915.178036][T24775] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 915.178906][T24762] loop3: lost filesystem error report for type 5 error -117 [ 915.219019][T24775] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 915.236564][T24762] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.5515: mark_inode_dirty error [ 915.248009][T24762] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 915.251265][T24762] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 915.293423][T24775] EXT4-fs error (device loop9): ext4_get_journal_inode:5900: inode #32: comm syz.9.5516: iget: special inode unallocated [ 915.306254][T24762] EXT4-fs (loop3): 1 orphan inode deleted [ 915.330221][ T6153] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 915.351696][T24762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.374959][ T6153] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 915.375139][ T6153] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 915.394574][T24775] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 915.394788][T24775] EXT4-fs (loop9): no journal found [ 915.404213][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 915.404234][ C0] EXT4-fs (loop9): initial error at time 1782567341: ext4_get_journal_inode:5900: inode 32 [ 915.404266][ C0] EXT4-fs (loop9): last error at time 1782567341: ext4_get_journal_inode:5900: inode 32 [ 915.455106][ T6153] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:20: Failed to release dquot type 0 [ 915.481099][T24750] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.594762][T24802] netlink: 'syz.0.5520': attribute type 4 has an invalid length. [ 915.602808][T24802] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.5520'. [ 915.649323][T24821] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 915.721639][T24819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5521'. [ 915.795434][T24819] dvmrp0: entered allmulticast mode [ 915.864767][ T6153] Bluetooth: hci0: Frame reassembly failed (-84) [ 916.524094][T24825] 9pnet_fd: p9_fd_create_tcp (24825): problem connecting socket to 127.0.0.1 [ 916.603628][T24915] netlink: 'syz.8.5532': attribute type 4 has an invalid length. [ 916.611775][T24915] netlink: 206236 bytes leftover after parsing attributes in process `syz.8.5532'. [ 916.733427][T24922] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5535'. [ 916.743891][T15367] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.753858][T15367] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 916.767509][T15367] loop3: lost filesystem error report for type 5 error -117 [ 916.767629][T15367] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 917.098614][T24923] loop9: detected capacity change from 0 to 512 [ 917.130933][T15367] loop3: lost filesystem error report for type 5 error -117 [ 917.143777][T15367] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 917.175027][T15367] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 917.199106][T24923] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 917.219840][T24923] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 917.230031][T24923] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5534: Corrupt directory, running e2fsck is recommended [ 917.245533][T24923] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 917.254298][T24923] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.5534: corrupted in-inode xattr: e_name out of bounds [ 917.268359][T24923] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 917.268866][T24923] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.5534: couldn't read orphan inode 15 (err -117) [ 917.289879][T24923] loop9: lost filesystem error report for type 5 error -117 [ 917.291175][T24923] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.325158][T24923] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 917.336947][T24923] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 917.347053][T24923] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5534: Corrupt directory, running e2fsck is recommended [ 917.360027][T24923] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz.9.5534: path /291/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 917.386190][T24923] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 8: comm syz.9.5534: path /291/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 917.466359][ T28] audit: type=1400 audit(1782567343.406:3294): avc: denied { mount } for pid=24927 comm="syz.4.5537" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 917.536109][ T28] audit: type=1400 audit(1782567343.436:3295): avc: denied { read } for pid=24927 comm="syz.4.5537" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 917.912172][ T7842] Bluetooth: hci0: command 0x1003 tx timeout [ 917.918206][T19568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 917.980564][T24953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5545'. [ 918.037461][T24949] loop3: detected capacity change from 0 to 512 [ 918.053992][T24949] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 918.072490][T24949] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 918.186755][T24957] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5547'. [ 918.240564][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.301476][T24966] 9pnet_fd: p9_fd_create_tcp (24966): problem connecting socket to 127.0.0.1 [ 918.306304][T24964] tmpfs: Bad value for 'mpol' [ 918.375226][T24977] loop3: detected capacity change from 0 to 1024 [ 918.411012][T24981] loop9: detected capacity change from 0 to 256 [ 918.597522][T24994] xt_NFQUEUE: number of total queues is 0 [ 918.681082][T24995] loop0: detected capacity change from 0 to 512 [ 919.463247][T24977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.586633][T24995] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 919.598800][T24995] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 919.609093][T24995] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.5558: Corrupt directory, running e2fsck is recommended [ 920.448298][T24995] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 920.456699][T24995] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.5558: corrupted in-inode xattr: e_name out of bounds [ 920.470525][T24995] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 920.471168][T24995] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5558: couldn't read orphan inode 15 (err -117) [ 920.492243][T24995] loop0: lost filesystem error report for type 5 error -117 [ 920.494124][T24995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.526255][T24995] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 920.537901][T24995] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 920.570499][T15367] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.591447][T24995] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.5558: Corrupt directory, running e2fsck is recommended [ 920.607239][T24995] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.5558: path /524/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 920.900967][T14393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.982211][T25015] Cannot find set identified by id 0 to match [ 921.008158][T25010] tmpfs: Bad value for 'mpol' [ 921.138854][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 921.139036][ T28] audit: type=1400 audit(1782567347.064:3298): avc: denied { create } for pid=25021 comm="syz.4.5567" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 921.354806][ T28] audit: type=1400 audit(1782567347.094:3299): avc: denied { read write } for pid=25021 comm="syz.4.5567" name="file0" dev="tmpfs" ino=1197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 921.379196][T25022] loop4: detected capacity change from 0 to 2048 [ 921.387105][ T28] audit: type=1400 audit(1782567347.094:3300): avc: denied { open } for pid=25021 comm="syz.4.5567" path="/220/file0" dev="tmpfs" ino=1197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 921.410845][ T28] audit: type=1400 audit(1782567347.094:3301): avc: denied { ioctl } for pid=25021 comm="syz.4.5567" path="/220/file0" dev="tmpfs" ino=1197 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 921.460012][T25022] loop4: p3 < > p4 < > [ 921.472004][T25022] loop4: partition table partially beyond EOD, truncated [ 921.484691][T25022] loop4: p3 start 4284289 is beyond EOD, truncated [ 921.563992][ T28] audit: type=1400 audit(1782567347.482:3302): avc: denied { unlink } for pid=20049 comm="syz-executor" name="file0" dev="tmpfs" ino=1197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 921.696435][T25025] loop3: detected capacity change from 0 to 512 [ 921.722077][ T1641] Bluetooth: hci0: Frame reassembly failed (-84) [ 921.793535][T25025] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 921.866193][T25044] loop4: detected capacity change from 0 to 512 [ 922.027518][T25044] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 922.039711][T25044] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 922.051377][T25044] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5572: Corrupt directory, running e2fsck is recommended [ 922.068026][T25044] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 922.076427][T25044] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.5572: corrupted in-inode xattr: e_name out of bounds [ 922.091095][T25044] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 922.091793][T25044] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5572: couldn't read orphan inode 15 (err -117) [ 922.113113][T25044] loop4: lost filesystem error report for type 5 error -117 [ 922.115163][T25044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.150745][T25044] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 922.162974][T25044] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 922.174239][T25044] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5572: Corrupt directory, running e2fsck is recommended [ 922.188021][T25044] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.5572: path /221/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 922.221855][T25025] EXT4-fs (loop3): 1 truncate cleaned up [ 922.274994][T25025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.361439][T25035] lo speed is unknown, defaulting to 1000 [ 922.505691][T25053] loop9: detected capacity change from 0 to 8192 [ 922.684032][T25058] loop9: detected capacity change from 0 to 1024 [ 922.704546][T25058] EXT4-fs: Ignoring removed bh option [ 922.764856][T25058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 922.800770][T25058] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.840562][ T28] audit: type=1400 audit(1782567348.758:3303): avc: denied { write } for pid=25057 comm="syz.9.5575" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 922.864289][T25058] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.5575: lblock 3 mapped to illegal pblock 3 (length 3) [ 922.908435][T25035] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.920649][T25058] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 922.937416][T25035] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.952421][T25035] bridge_slave_0: entered allmulticast mode [ 922.963564][T25058] EXT4-fs (loop9): This should not happen!! Data will be lost [ 922.963564][T25058] [ 922.975418][T25035] bridge_slave_0: entered promiscuous mode [ 922.993748][T25035] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.005180][T25067] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: block 3: comm syz.9.5575: lblock 3 mapped to illegal pblock 3 (length 1) [ 923.025761][T25035] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.047357][T25035] bridge_slave_1: entered allmulticast mode [ 923.065723][T25067] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: block 3: comm syz.9.5575: lblock 3 mapped to illegal pblock 3 (length 1) [ 923.082136][T25035] bridge_slave_1: entered promiscuous mode [ 923.096810][T15367] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.142440][T25067] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: block 3: comm syz.9.5575: lblock 3 mapped to illegal pblock 3 (length 1) [ 923.165606][T25035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.215292][T25035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.231629][T25067] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: block 3: comm syz.9.5575: lblock 3 mapped to illegal pblock 3 (length 1) [ 923.257706][T20049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.270058][T25067] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: block 3: comm syz.9.5575: lblock 3 mapped to illegal pblock 3 (length 1) [ 923.299243][T25067] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: block 3: comm syz.9.5575: lblock 3 mapped to illegal pblock 3 (length 1) [ 923.320015][T25057] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: block 3: comm syz.9.5575: lblock 3 mapped to illegal pblock 3 (length 1) [ 923.358982][T25035] team0: Port device team_slave_0 added [ 923.360024][T25057] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: block 3: comm syz.9.5575: lblock 3 mapped to illegal pblock 3 (length 1) [ 923.382263][T25035] team0: Port device team_slave_1 added [ 923.404844][T25057] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: block 3: comm syz.9.5575: lblock 3 mapped to illegal pblock 3 (length 1) [ 923.438172][T25073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5576'. [ 923.477344][T25080] loop4: detected capacity change from 0 to 128 [ 923.501299][T25073] wg1: entered promiscuous mode [ 923.506968][T25073] wg1: entered allmulticast mode [ 923.550056][T25035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.558110][T25035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.585829][T25082] netlink: 'syz.4.5579': attribute type 1 has an invalid length. [ 923.593569][T25082] netlink: 'syz.4.5579': attribute type 2 has an invalid length. [ 923.602458][T25035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.613743][T25035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.620870][T25035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.646744][T25035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.675015][T25035] hsr_slave_0: entered promiscuous mode [ 923.681019][T25035] hsr_slave_1: entered promiscuous mode [ 923.687352][T25035] debugfs: 'hsr0' already exists in 'hsr' [ 923.704257][T25035] Cannot create hsr debugfs directory [ 923.772516][T19568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 923.899192][T25035] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.921836][T25091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5582'. [ 924.001044][T25094] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 924.025688][T25035] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.191805][T25035] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.215275][T25093] loop0: detected capacity change from 0 to 512 [ 924.300408][T25093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 924.337517][T25035] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.392390][T25093] EXT4-fs (loop0): 1 truncate cleaned up [ 924.404357][T25093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.435317][T24053] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 924.477765][T24053] EXT4-fs (loop9): This should not happen!! Data will be lost [ 924.477765][T24053] [ 924.499459][T18661] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 924.511925][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 924.546584][T25102] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5584'. [ 924.568798][ T6148] bridge_slave_0: left allmulticast mode [ 924.576329][ T6148] bridge_slave_0: left promiscuous mode [ 924.582241][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.592416][T14393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.629836][T25105] loop3: detected capacity change from 0 to 512 [ 924.678479][T25105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 924.727940][T25105] EXT4-fs (loop3): 1 truncate cleaned up [ 924.757457][T25105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.786192][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.813384][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.824944][ T6148] bond0 (unregistering): Released all slaves [ 924.833521][ T6148] bond1 (unregistering): Released all slaves [ 924.842933][ T6148] bond2 (unregistering): Released all slaves [ 924.861651][T15367] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.875518][ T6153] Bluetooth: hci0: Frame reassembly failed (-84) [ 924.922630][ T6148] IPVS: stopping master sync thread 23291 ... [ 924.938237][T25035] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 924.950974][ T6148] IPVS: stopping backup sync thread 23288 ... [ 924.960725][T25035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 924.986622][T25035] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 925.007990][T25035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 925.043777][ T6148] hsr_slave_0: left promiscuous mode [ 925.058580][ T28] audit: type=1400 audit(1782567350.972:3304): avc: denied { connect } for pid=25125 comm="syz.9.5594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 925.081259][ T6148] hsr_slave_1: left promiscuous mode [ 925.092299][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.105875][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.114332][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.122141][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.129744][ T6148] batman_adv: batadv0: Removing interface: vlan2 [ 925.140327][ T6148] veth1_macvtap: left promiscuous mode [ 925.148683][ T6148] veth0_macvtap: left promiscuous mode [ 925.154426][ T6148] veth1_vlan: left promiscuous mode [ 925.162778][ T6148] veth0_vlan: left promiscuous mode [ 925.240598][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 925.253302][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 925.289836][T25035] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 925.299161][T25035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 925.308420][T25035] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 925.317661][T25035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 925.356714][T25035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.370735][T25035] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.381717][T24049] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.388892][T24049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.397839][T24049] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.404907][T24049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.537003][T25035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.555401][T25150] netlink: 'syz.0.5596': attribute type 4 has an invalid length. [ 925.563885][T25150] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.5596'. [ 925.677987][T25035] veth0_vlan: entered promiscuous mode [ 925.686402][T25035] veth1_vlan: entered promiscuous mode [ 925.715653][T25035] veth0_macvtap: entered promiscuous mode [ 925.724366][T25035] veth1_macvtap: entered promiscuous mode [ 925.735425][T25035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.748380][T25035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.759336][ T6148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.768732][ T6148] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.783875][ T6148] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.793485][ T6148] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.834594][ T28] audit: type=1400 audit(1782567351.739:3305): avc: denied { getopt } for pid=25174 comm="syz.8.5570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 925.917076][T25179] loop9: detected capacity change from 0 to 512 [ 925.926689][T25179] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 925.966082][T25179] EXT4-fs (loop9): 1 truncate cleaned up [ 925.979101][T25179] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.079307][T25185] loop0: detected capacity change from 0 to 1024 [ 926.087440][T25185] EXT4-fs: Ignoring removed orlov option [ 926.119623][T25185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.132870][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.219529][T25189] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5604'. [ 926.231263][T14393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.271155][T25189] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5604'. [ 926.343913][ T28] audit: type=1400 audit(1782567352.248:3306): avc: denied { watch } for pid=25188 comm="syz.9.5604" path="/proc/860/net/netfilter" dev="proc" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 926.357811][T25200] FAULT_INJECTION: forcing a failure. [ 926.357811][T25200] name failslab, interval 1, probability 0, space 0, times 0 [ 926.403441][T25200] CPU: 1 UID: 0 PID: 25200 Comm: syz.0.5607 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 926.403485][T25200] Tainted: [W]=WARN [ 926.403494][T25200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 926.403508][T25200] Call Trace: [ 926.403515][T25200] [ 926.403524][T25200] __dump_stack+0x1d/0x30 [ 926.403626][T25200] dump_stack_lvl+0x95/0xd0 [ 926.403648][T25200] dump_stack+0x15/0x1b [ 926.403702][T25200] should_fail_ex+0x25e/0x270 [ 926.403737][T25200] ? __get_vm_area_node+0x106/0x1d0 [ 926.403762][T25200] should_failslab+0x8c/0xb0 [ 926.403783][T25200] __kmalloc_cache_node_noprof+0x81/0x3e0 [ 926.403871][T25200] ? __get_vm_area_node+0x106/0x1d0 [ 926.403892][T25200] __get_vm_area_node+0x106/0x1d0 [ 926.403917][T25200] __vmalloc_node_range_noprof+0x266/0x11e0 [ 926.403979][T25200] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 926.404004][T25200] ? __hrtimer_rearm_deferred+0x571/0x650 [ 926.404036][T25200] ? avc_has_perm_noaudit+0xa3/0x120 [ 926.404063][T25200] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 926.404130][T25200] __vmalloc_noprof+0xa4/0xf0 [ 926.404233][T25200] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 926.404261][T25200] bpf_prog_alloc_no_stats+0x47/0x390 [ 926.404288][T25200] ? bpf_prog_alloc+0x2a/0x150 [ 926.404369][T25200] bpf_prog_alloc+0x3c/0x150 [ 926.404396][T25200] bpf_prog_load+0x54b/0x1100 [ 926.404428][T25200] ? ktime_get+0x170/0x240 [ 926.404448][T25200] __sys_bpf+0xbae/0xc30 [ 926.404491][T25200] ? ktime_get+0x170/0x240 [ 926.404510][T25200] ? ktime_get+0x170/0x240 [ 926.404532][T25200] __x64_sys_bpf+0x69/0x80 [ 926.404556][T25200] x64_sys_call+0x10cb/0x3020 [ 926.404596][T25200] do_syscall_64+0x136/0x3c0 [ 926.404624][T25200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.404652][T25200] RIP: 0033:0x7fb336a5ce59 [ 926.404669][T25200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.404764][T25200] RSP: 002b:00007fb3354af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 926.404785][T25200] RAX: ffffffffffffffda RBX: 00007fb336cd5fa0 RCX: 00007fb336a5ce59 [ 926.404801][T25200] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 926.404817][T25200] RBP: 00007fb3354af090 R08: 0000000000000000 R09: 0000000000000000 [ 926.404830][T25200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.404863][T25200] R13: 00007fb336cd6038 R14: 00007fb336cd5fa0 R15: 00007ffd07d44928 [ 926.404879][T25200] [ 926.413256][T25198] loop8: detected capacity change from 0 to 256 [ 926.424008][T25200] syz.0.5607: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 926.436249][T25202] lo speed is unknown, defaulting to 1000 [ 926.441154][T25200] ,cpuset= [ 926.498815][T25198] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 926.506388][T25200] /,mems_allowed=0 [ 926.729660][T25202] loop9: detected capacity change from 0 to 512 [ 926.737107][T25200] CPU: 1 UID: 0 PID: 25200 Comm: syz.0.5607 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 926.737140][T25200] Tainted: [W]=WARN [ 926.737154][T25200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 926.737165][T25200] Call Trace: [ 926.737172][T25200] [ 926.737179][T25200] __dump_stack+0x1d/0x30 [ 926.737200][T25200] dump_stack_lvl+0x95/0xd0 [ 926.737289][T25200] dump_stack+0x15/0x1b [ 926.737307][T25200] warn_alloc+0x145/0x1c0 [ 926.737330][T25200] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 926.737386][T25200] ? __hrtimer_rearm_deferred+0x571/0x650 [ 926.737449][T25200] ? avc_has_perm_noaudit+0xa3/0x120 [ 926.737473][T25200] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 926.737500][T25200] __vmalloc_noprof+0xa4/0xf0 [ 926.737599][T25200] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 926.737624][T25200] bpf_prog_alloc_no_stats+0x47/0x390 [ 926.737650][T25200] ? bpf_prog_alloc+0x2a/0x150 [ 926.737821][T25200] bpf_prog_alloc+0x3c/0x150 [ 926.737846][T25200] bpf_prog_load+0x54b/0x1100 [ 926.737880][T25200] ? ktime_get+0x170/0x240 [ 926.737969][T25200] __sys_bpf+0xbae/0xc30 [ 926.737992][T25200] ? ktime_get+0x170/0x240 [ 926.738010][T25200] ? ktime_get+0x170/0x240 [ 926.738033][T25200] __x64_sys_bpf+0x69/0x80 [ 926.738112][T25200] x64_sys_call+0x10cb/0x3020 [ 926.738187][T25200] do_syscall_64+0x136/0x3c0 [ 926.738214][T25200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.738232][T25200] RIP: 0033:0x7fb336a5ce59 [ 926.738328][T25200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.738344][T25200] RSP: 002b:00007fb3354af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 926.738365][T25200] RAX: ffffffffffffffda RBX: 00007fb336cd5fa0 RCX: 00007fb336a5ce59 [ 926.738428][T25200] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 926.738456][T25200] RBP: 00007fb3354af090 R08: 0000000000000000 R09: 0000000000000000 [ 926.738470][T25200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.738543][T25200] R13: 00007fb336cd6038 R14: 00007fb336cd5fa0 R15: 00007ffd07d44928 [ 926.738562][T25200] [ 926.954144][T25200] Mem-Info: [ 926.957262][T25200] active_anon:53865 inactive_anon:23326 isolated_anon:0 [ 926.957262][T25200] active_file:0 inactive_file:27638 isolated_file:0 [ 926.957262][T25200] unevictable:10 dirty:485 writeback:0 [ 926.957262][T25200] slab_reclaimable:4367 slab_unreclaimable:61114 [ 926.957262][T25200] mapped:30578 shmem:67496 pagetables:3855 [ 926.957262][T25200] sec_pagetables:0 bounce:0 [ 926.957262][T25200] kernel_misc_reclaimable:0 [ 926.957262][T25200] free:1753562 free_pcp:9100 free_cma:0 [ 926.996342][T19568] Bluetooth: hci0: command 0x1003 tx timeout [ 927.003026][T25200] Node 0 active_anon:204176kB inactive_anon:93304kB active_file:0kB inactive_file:110484kB unevictable:40kB isolated(anon):0kB isolated(file):0kB mapped:122280kB dirty:1992kB writeback:0kB shmem:258640kB kernel_stack:5040kB pagetables:15312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 927.009092][ T7842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 927.077094][T25200] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.123001][T25200] lowmem_reserve[]: 0 2878 7857 7857 [ 927.129230][T25200] Node 0 DMA32 free:2944100kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947728kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 927.162744][T25200] lowmem_reserve[]: 0 0 4978 4978 [ 927.168469][T25200] Node 0 Normal free:4112440kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:203184kB inactive_anon:93304kB active_file:0kB inactive_file:110596kB unevictable:0kB writepending:2008kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:28312kB local_pcp:21204kB free_cma:0kB [ 927.202391][T25202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 927.202416][T25200] lowmem_reserve[]: [ 927.210876][T25200] 0 0 0 0 [ 927.218463][T25200] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 927.231859][T25200] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944100kB [ 927.248442][T25200] Node 0 Normal: 5687*4kB (UME) 3541*8kB (UM) 1930*16kB (UME) 1035*32kB (UME) 882*64kB (UM) 409*128kB (UME) 226*256kB (UM) 132*512kB (UM) 51*1024kB (UM) 22*2048kB (UME) 890*4096kB (UM) = 4092036kB [ 927.268047][T25200] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 927.277401][T25200] 92381 total pagecache pages [ 927.282124][T25200] 36 pages in swap cache [ 927.286407][T25200] Free swap = 123964kB [ 927.290658][T25200] Total swap = 124996kB [ 927.294969][T25200] 2097051 pages RAM [ 927.299022][T25200] 0 pages HighMem/MovableOnly [ 927.307929][T25200] 81720 pages reserved [ 927.313384][T25202] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.5610: iget: bad i_size value: 38620345925642 [ 927.326086][T25202] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 927.332182][T25202] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.5610: couldn't read orphan inode 15 (err -117) [ 927.353476][T25202] loop9: lost filesystem error report for type 5 error -117 [ 927.368605][ T28] audit: type=1326 audit(1782567353.275:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25215 comm="syz.0.5615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb336a5ce59 code=0x0 [ 927.370014][T25202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.635226][ T28] audit: type=1400 audit(1782567353.444:3308): avc: denied { write } for pid=25201 comm="syz.9.5610" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 927.690841][T25218] loop0: detected capacity change from 0 to 764 [ 927.734823][T25211] lo speed is unknown, defaulting to 1000 [ 927.784992][ T28] audit: type=1400 audit(1782567353.684:3309): avc: denied { map } for pid=25197 comm="syz.8.5609" path="socket:[75272]" dev="sockfs" ino=75272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 927.798244][T25234] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5619'. [ 927.808486][ T28] audit: type=1400 audit(1782567353.684:3310): avc: denied { accept } for pid=25197 comm="syz.8.5609" path="socket:[75272]" dev="sockfs" ino=75272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 927.878311][ T28] audit: type=1400 audit(1782567353.783:3311): avc: denied { bind } for pid=25236 comm="syz.4.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 927.910986][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.022299][T25211] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.037951][T25211] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.048628][T25211] bridge_slave_0: entered allmulticast mode [ 928.057296][T25211] bridge_slave_0: entered promiscuous mode [ 928.065801][T25211] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.073103][T25211] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.080631][T25211] bridge_slave_1: entered allmulticast mode [ 928.090021][T25211] bridge_slave_1: entered promiscuous mode [ 928.112287][T25211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.123837][T25211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.155773][T25211] team0: Port device team_slave_0 added [ 928.162684][T25211] team0: Port device team_slave_1 added [ 928.179576][T25211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.186663][T25211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.240837][T25211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.262899][T25211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.270345][T25211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.297177][T25211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.357908][T25211] hsr_slave_0: entered promiscuous mode [ 928.364065][T25211] hsr_slave_1: entered promiscuous mode [ 928.373441][T25254] tmpfs: Bad value for 'mpol' [ 928.420049][T25258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.429700][T25258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.439863][T25211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.458571][T25258] loop0: detected capacity change from 0 to 2048 [ 928.498391][T25211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.510434][T25258] loop0: p2 < > p3 p4 [ 928.516355][T25258] loop0: p3 start 65535 is beyond EOD, truncated [ 928.522959][T25258] loop0: p4 size 8192 extends beyond EOD, truncated [ 928.557598][T25211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.609350][T25211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.671024][T25211] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 928.679762][T25211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 928.687930][T25211] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 928.696540][T25211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 928.704249][T25211] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 928.713054][T25211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 928.720945][T25211] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 928.729714][T25211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 928.766991][T25211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.782726][T25211] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.794324][ T2671] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.801411][ T2671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.810942][T25267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5626'. [ 928.821017][T25267] IPv6: NLM_F_REPLACE set, but no existing node found! [ 928.821982][T24049] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.834998][T24049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.851031][T25267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.860716][T25267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.890446][T25267] lo speed is unknown, defaulting to 1000 [ 928.967220][ T28] audit: type=1400 audit(1782567354.860:3312): avc: denied { bind } for pid=25276 comm="syz.9.5627" lport=39042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 928.997442][T25211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.039562][T25277] loop9: detected capacity change from 0 to 512 [ 929.066861][ T28] audit: type=1400 audit(1782567354.860:3313): avc: denied { node_bind } for pid=25276 comm="syz.9.5627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 929.178504][T25211] veth0_vlan: entered promiscuous mode [ 929.186829][T25211] veth1_vlan: entered promiscuous mode [ 929.202078][T25277] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.214706][T25277] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.228106][T25211] veth0_macvtap: entered promiscuous mode [ 929.239500][T25211] veth1_macvtap: entered promiscuous mode [ 929.247420][ T28] audit: type=1400 audit(1782567355.070:3314): avc: denied { write } for pid=25276 comm="syz.9.5627" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 929.251946][T25211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.280196][T25211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.296142][ T1641] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.305600][ T1641] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.305655][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.325286][ T1641] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.334372][ T1641] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.379126][T25309] loop2: detected capacity change from 0 to 512 [ 929.386953][T25309] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 929.414297][T25309] EXT4-fs (loop2): 1 truncate cleaned up [ 929.431146][T25309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 929.466941][T25211] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.642532][T25323] loop2: detected capacity change from 0 to 1024 [ 929.675592][T25323] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 929.685221][T25323] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.5637: Failed to acquire dquot type 0 [ 929.697124][T25323] loop2: lost filesystem error report for type 5 error -117 [ 929.698189][T25323] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, [ 929.705531][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 929.705559][ C0] EXT4-fs (loop2): initial error at time 1782567355: ext4_acquire_dquot:7041 [ 929.705587][ C0] EXT4-fs (loop2): last error at time 1782567355: ext4_acquire_dquot:7041 [ 929.737267][T25323] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 929.757111][T25323] EXT4-fs (loop2): 1 truncate cleaned up [ 929.765465][T25323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.843808][T25211] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.854529][T25327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.863026][T25327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.002837][T25327] loop4: detected capacity change from 0 to 2048 [ 930.043093][T25327] loop4: p2 < > p3 p4 [ 930.053670][T25327] loop4: p3 start 65535 is beyond EOD, truncated [ 930.060845][T25337] loop0: detected capacity change from 0 to 256 [ 930.063575][T25327] loop4: p4 size 8192 extends beyond EOD, truncated [ 930.298880][T25342] xt_NFQUEUE: number of total queues is 0 [ 930.443025][T25344] tmpfs: Bad value for 'mpol' [ 930.808132][T25349] loop4: detected capacity change from 0 to 512 [ 930.820533][T25349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 930.846340][T25349] EXT4-fs (loop4): 1 truncate cleaned up [ 930.855138][T25349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.867569][T25348] loop9: detected capacity change from 0 to 8192 [ 930.874235][T25348] msdos: Unknown parameter '0x000000000000000018446744073709551615' [ 930.901387][T25348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5648'. [ 930.969419][T20049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.037232][T25365] batman_adv: batadv0: Adding interface: dummy0 [ 931.057262][T25365] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.094733][T25365] batman_adv: batadv0: Interface activated: dummy0 [ 931.106889][T25359] FAULT_INJECTION: forcing a failure. [ 931.106889][T25359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.120744][T25359] CPU: 0 UID: 0 PID: 25359 Comm: syz.2.5653 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 931.120780][T25359] Tainted: [W]=WARN [ 931.120787][T25359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 931.120799][T25359] Call Trace: [ 931.120853][T25359] [ 931.120861][T25359] __dump_stack+0x1d/0x30 [ 931.120886][T25359] dump_stack_lvl+0x95/0xd0 [ 931.120907][T25359] dump_stack+0x15/0x1b [ 931.120926][T25359] should_fail_ex+0x25e/0x270 [ 931.120985][T25359] should_fail+0xb/0x20 [ 931.121003][T25359] should_fail_usercopy+0x1a/0x20 [ 931.121105][T25359] _copy_to_user+0x20/0xa0 [ 931.121125][T25359] simple_read_from_buffer+0xb5/0x130 [ 931.121151][T25359] proc_fail_nth_read+0x10e/0x150 [ 931.121230][T25359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.121254][T25359] vfs_read+0x18e/0x7c0 [ 931.121907][T25359] ? __tsan_unaligned_write8+0xec/0x180 [ 931.121940][T25359] ? mutex_lock+0x57/0x90 [ 931.122152][T25359] ksys_read+0xdc/0x1a0 [ 931.122202][T25359] __x64_sys_read+0x40/0x50 [ 931.122218][T25359] x64_sys_call+0x2886/0x3020 [ 931.122239][T25359] do_syscall_64+0x136/0x3c0 [ 931.122263][T25359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.122314][T25359] RIP: 0033:0x7f8f20c1d68e [ 931.122333][T25359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 931.122418][T25359] RSP: 002b:00007f8f1f6aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 931.122435][T25359] RAX: ffffffffffffffda RBX: 00007f8f1f6af6c0 RCX: 00007f8f20c1d68e [ 931.122447][T25359] RDX: 000000000000000f RSI: 00007f8f1f6af0a0 RDI: 0000000000000006 [ 931.122462][T25359] RBP: 00007f8f1f6af090 R08: 0000000000000000 R09: 0000000000000000 [ 931.122518][T25359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.122533][T25359] R13: 00007f8f20ed6038 R14: 00007f8f20ed5fa0 R15: 00007ffd952365c8 [ 931.122585][T25359] [ 932.060133][T25392] lo speed is unknown, defaulting to 1000 [ 932.085933][T25393] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 932.165243][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 932.165256][ T28] audit: type=1400 audit(1782567358.051:3318): avc: denied { relabelto } for pid=25391 comm="syz.4.5661" name="241" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 932.419704][ T28] audit: type=1400 audit(1782567358.091:3319): avc: denied { associate } for pid=25391 comm="syz.4.5661" name="241" dev="tmpfs" ino=1305 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 932.446859][T25380] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 932.576084][ T28] audit: type=1400 audit(1782567358.460:3320): avc: denied { map } for pid=25395 comm="syz.0.5662" path="socket:[76622]" dev="sockfs" ino=76622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 932.669024][T25397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.772025][ T28] audit: type=1400 audit(1782567358.530:3321): avc: denied { write } for pid=20049 comm="syz-executor" name="241" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 932.838926][T25397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.883605][ T28] audit: type=1400 audit(1782567358.530:3322): avc: denied { remove_name } for pid=20049 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 932.913761][ T23] hid-generic 7400:9001200:69000100.0002: unknown main item tag 0x0 [ 932.931706][ T23] hid-generic 7400:9001200:69000100.0002: hidraw0: HID v7069.70 Device [syz1] on syz0 [ 932.945364][T25397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5662'. [ 932.970406][ T28] audit: type=1400 audit(1782567358.530:3323): avc: denied { write } for pid=20049 comm="syz-executor" name="241" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 933.098637][ T28] audit: type=1400 audit(1782567358.530:3324): avc: denied { write } for pid=20049 comm="syz-executor" name="241" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 933.205259][ T28] audit: type=1400 audit(1782567358.530:3325): avc: denied { write } for pid=20049 comm="syz-executor" name="241" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 933.231380][ T28] audit: type=1400 audit(1782567358.530:3326): avc: denied { rmdir } for pid=20049 comm="syz-executor" name="241" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 933.382515][ T28] audit: type=1400 audit(1782567359.268:3327): avc: denied { bind } for pid=25416 comm="syz.8.5668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 933.389257][T25417] loop8: detected capacity change from 0 to 512 [ 933.420501][T25417] ext4: Unknown parameter 'euid<00000000000000000000' [ 933.665125][T25345] IPVS: starting estimator thread 0... [ 933.948922][T25441] loop2: detected capacity change from 0 to 512 [ 934.022335][T25441] EXT4-fs (loop2): orphan cleanup on readonly fs [ 934.030333][T25441] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.5673: ea_inode with extended attributes [ 934.043589][T25441] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 934.044188][T25441] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.5673: error while reading EA inode 11 err=-117 [ 934.065720][T25441] loop2: lost filesystem error report for type 5 error -117 [ 934.066392][T25441] EXT4-fs (loop2): 1 orphan inode deleted [ 934.080446][T25441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 934.156623][T25436] IPVS: using max 2400 ests per chain, 120000 per kthread [ 934.229895][T25445] netlink: 'syz.9.5675': attribute type 11 has an invalid length. [ 934.271059][T25451] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5677'. [ 934.543561][T25211] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.599531][T25468] netlink: 'syz.2.5683': attribute type 4 has an invalid length. [ 934.607739][T25468] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.5683'. [ 934.641105][T25472] loop2: detected capacity change from 0 to 256 [ 935.146965][T25486] netlink: 'syz.4.5688': attribute type 11 has an invalid length. [ 935.211582][T25499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5693'. [ 935.227007][T25499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25499 comm=syz.4.5693 [ 935.251371][T25499] veth3: entered allmulticast mode [ 935.258973][T25499] bond1: (slave veth3): Enslaving as an active interface with an up link [ 935.273067][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5694'. [ 935.302603][T25503] team1: entered promiscuous mode [ 935.308662][T25503] team1: entered allmulticast mode [ 935.314455][T25503] 8021q: adding VLAN 0 to HW filter on device team1 [ 935.358958][T25514] loop8: detected capacity change from 0 to 128 [ 935.391730][T25514] FAULT_INJECTION: forcing a failure. [ 935.391730][T25514] name failslab, interval 1, probability 0, space 0, times 0 [ 935.404572][T25514] CPU: 0 UID: 0 PID: 25514 Comm: syz.8.5698 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 935.404605][T25514] Tainted: [W]=WARN [ 935.404612][T25514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 935.404668][T25514] Call Trace: [ 935.404677][T25514] [ 935.404734][T25514] __dump_stack+0x1d/0x30 [ 935.404759][T25514] dump_stack_lvl+0x95/0xd0 [ 935.404779][T25514] dump_stack+0x15/0x1b [ 935.404867][T25514] should_fail_ex+0x25e/0x270 [ 935.404890][T25514] should_failslab+0x8c/0xb0 [ 935.404928][T25514] __kmalloc_noprof+0xd4/0x4a0 [ 935.405024][T25514] ? u32_dump+0x693/0xaa0 [ 935.405080][T25514] ? u32_dump+0x693/0xaa0 [ 935.405112][T25514] ? tcf_exts_dump+0x1a7/0x330 [ 935.405152][T25514] u32_dump+0x693/0xaa0 [ 935.405177][T25514] ? skb_put+0xa9/0xf0 [ 935.405197][T25514] ? skb_put+0xa9/0xf0 [ 935.405272][T25514] tcf_fill_node+0x410/0x530 [ 935.405294][T25514] tcf_node_dump+0xf6/0x110 [ 935.405317][T25514] u32_walk+0x1cd/0x290 [ 935.405452][T25514] tc_dump_tfilter+0xa9e/0xe50 [ 935.405474][T25514] ? __pfx_tcf_node_dump+0x10/0x10 [ 935.405498][T25514] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 935.405516][T25514] rtnl_dumpit+0x71/0x140 [ 935.405600][T25514] netlink_dump+0x452/0x870 [ 935.405625][T25514] __netlink_dump_start+0x435/0x520 [ 935.405646][T25514] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 935.405664][T25514] rtnetlink_rcv_msg+0x59f/0x720 [ 935.405738][T25514] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 935.405756][T25514] ? __pfx_rtnl_dumpit+0x10/0x10 [ 935.405785][T25514] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 935.405803][T25514] netlink_rcv_skb+0x11e/0x220 [ 935.405822][T25514] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 935.405897][T25514] rtnetlink_rcv+0x1c/0x30 [ 935.405927][T25514] netlink_unicast+0x5a7/0x680 [ 935.406017][T25514] netlink_sendmsg+0x5be/0x6f0 [ 935.406077][T25514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.406098][T25514] ____sys_sendmsg+0x532/0x580 [ 935.406125][T25514] ___sys_sendmsg+0x195/0x1e0 [ 935.406167][T25514] __x64_sys_sendmsg+0xd4/0x160 [ 935.406229][T25514] x64_sys_call+0x194c/0x3020 [ 935.406252][T25514] do_syscall_64+0x136/0x3c0 [ 935.406353][T25514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.406375][T25514] RIP: 0033:0x7f979d78ce59 [ 935.406392][T25514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.406423][T25514] RSP: 002b:00007f979c1df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.406510][T25514] RAX: ffffffffffffffda RBX: 00007f979da05fa0 RCX: 00007f979d78ce59 [ 935.406599][T25514] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000009 [ 935.406613][T25514] RBP: 00007f979c1df090 R08: 0000000000000000 R09: 0000000000000000 [ 935.406628][T25514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.406640][T25514] R13: 00007f979da06038 R14: 00007f979da05fa0 R15: 00007ffcf267a8c8 [ 935.406659][T25514] [ 935.784663][T25523] No such timeout policy "syz1" [ 935.922290][T25544] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5708'. [ 935.950004][T25548] loop8: detected capacity change from 0 to 256 [ 936.055460][T25553] loop0: detected capacity change from 0 to 256 [ 936.084615][T25555] loop9: detected capacity change from 0 to 4096 [ 936.202198][T25558] Cannot find set identified by id 0 to match [ 936.968297][T25560] xt_NFQUEUE: number of total queues is 0 [ 937.037254][T25555] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.040903][T25562] loop8: detected capacity change from 0 to 1024 [ 937.057122][T25562] EXT4-fs: Ignoring removed orlov option [ 937.067698][T25564] loop2: detected capacity change from 0 to 512 [ 937.112475][T25564] EXT4-fs: Ignoring removed nobh option [ 937.209907][T25562] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.241787][T25564] EXT4-fs (loop2): 1 orphan inode deleted [ 937.252568][T25564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.292929][T25572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5715'. [ 937.502975][T25564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5714'. [ 937.563873][T25572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5715'. [ 937.763261][T25578] xt_policy: neither incoming nor outgoing policy selected [ 937.913603][T25578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5714'. [ 937.960924][T25035] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.250634][T25211] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.386523][T25595] netlink: 'syz.2.5721': attribute type 4 has an invalid length. [ 938.403522][T25601] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5723'. [ 938.576643][T25616] xt_socket: unknown flags 0x48 [ 938.605186][T25621] loop4: detected capacity change from 0 to 1024 [ 938.627130][T25621] EXT4-fs: Ignoring removed orlov option [ 938.663661][T25621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 938.948084][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.971590][T20049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.123342][T25645] loop9: detected capacity change from 0 to 1024 [ 939.132022][T25645] EXT4-fs: Ignoring removed orlov option [ 939.142596][T25645] EXT4-fs: Ignoring removed bh option [ 939.148618][T25645] ext3: Unknown parameter 'subj_type' [ 939.221239][T25652] loop4: detected capacity change from 0 to 512 [ 939.251205][T25647] lo speed is unknown, defaulting to 1000 [ 939.289698][T25652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 939.316812][T25652] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.5736: iget: bad i_size value: 38620345925642 [ 939.501972][T25652] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 939.503804][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 939.519866][ C0] EXT4-fs (loop4): initial error at time 1782567365: ext4_orphan_get:1399: inode 15 [ 939.529273][ C0] EXT4-fs (loop4): last error at time 1782567365: ext4_orphan_get:1399: inode 15 [ 939.552087][T25652] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5736: couldn't read orphan inode 15 (err -117) [ 939.668758][T25665] loop9: detected capacity change from 0 to 1024 [ 939.775754][T25652] loop4: lost filesystem error report for type 5 error -117 [ 939.777394][T25652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.799597][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 939.799612][ T28] audit: type=1400 audit(1782567365.672:3333): avc: denied { write } for pid=25646 comm="syz.4.5736" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 939.829545][T25665] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 939.924693][T25665] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 2: comm syz.9.5739: lblock 2 mapped to illegal pblock 2 (length 1) [ 939.962295][T25679] __nla_validate_parse: 2 callbacks suppressed [ 939.962310][T25679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5741'. [ 939.977463][T25665] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 939.977583][T25665] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 940.002723][T25665] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 48: comm syz.9.5739: lblock 0 mapped to illegal pblock 48 (length 1) [ 940.016993][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 940.017061][ C0] EXT4-fs (loop9): initial error at time 1782567365: ext4_map_blocks:791: inode 3: block 2 [ 940.017093][ C0] EXT4-fs (loop9): last error at time 1782567365: ext4_map_blocks:791: inode 3: block 2 [ 940.021412][T25652] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.029959][T25665] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 940.055167][T25665] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 940.083859][T25665] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.5739: Failed to acquire dquot type 0 [ 940.115755][T25686] loop4: detected capacity change from 0 to 1024 [ 940.122210][T25665] loop9: lost filesystem error report for type 5 error -117 [ 940.124896][T25665] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 940.138839][T25686] EXT4-fs: Ignoring removed orlov option [ 940.162269][T25665] loop9: lost filesystem error report for type 5 error -117 [ 940.163351][T25665] EXT4-fs error (device loop9): ext4_evict_inode:267: inode #11: comm syz.9.5739: mark_inode_dirty error [ 940.194254][T25665] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 940.216879][T25696] xt_hashlimit: size too large, truncated to 1048576 [ 940.238911][T25665] EXT4-fs warning (device loop9): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 940.255724][T25665] EXT4-fs (loop9): 1 orphan inode deleted [ 940.268184][T25686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.289819][T24049] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 940.348228][T25665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.373815][T24049] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 940.373930][T24049] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 940.445361][T24049] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 940.658275][T24049] Bluetooth: hci0: Frame reassembly failed (-84) [ 941.323530][ T1641] Bluetooth: hci1: Frame reassembly failed (-84) [ 941.841648][T25828] loop0: detected capacity change from 0 to 1024 [ 941.849568][T25828] EXT4-fs: Ignoring removed orlov option [ 941.870846][T25828] EXT4-fs mount: 1 callbacks suppressed [ 941.870859][T25828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.906331][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.915867][T18661] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 941.929080][T18661] loop9: lost filesystem error report for type 5 error -117 [ 941.929170][T18661] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 941.950322][T18661] loop9: lost filesystem error report for type 5 error -117 [ 941.950411][T18661] EXT4-fs error (device loop9): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 941.969800][T18661] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 941.998418][T25833] lo speed is unknown, defaulting to 1000 [ 942.013937][T14393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.237734][T25833] netlink: 180900 bytes leftover after parsing attributes in process `syz.9.5759'. [ 942.247760][T25833] openvswitch: netlink: Flow actions attr not present in new flow. [ 942.356387][T25833] loop9: detected capacity change from 0 to 2048 [ 942.687854][T25844] loop9: detected capacity change from 0 to 512 [ 942.701472][ T7842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 942.766344][ T28] audit: type=1400 audit(1782567368.615:3334): avc: denied { ioctl } for pid=25843 comm="syz.9.5762" path="socket:[78243]" dev="sockfs" ino=78243 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 942.948961][T25862] loop9: detected capacity change from 0 to 1024 [ 942.955774][T25862] EXT4-fs: Ignoring removed orlov option [ 942.974620][T25862] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.037784][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.069807][T25867] loop0: detected capacity change from 0 to 8192 [ 943.071641][T25869] netlink: 'syz.9.5772': attribute type 1 has an invalid length. [ 943.083897][T25869] netlink: 112865 bytes leftover after parsing attributes in process `syz.9.5772'. [ 943.155806][T25871] FAULT_INJECTION: forcing a failure. [ 943.155806][T25871] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 943.169077][T25871] CPU: 1 UID: 0 PID: 25871 Comm: syz.9.5773 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 943.169098][T25871] Tainted: [W]=WARN [ 943.169102][T25871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 943.169110][T25871] Call Trace: [ 943.169115][T25871] [ 943.169120][T25871] __dump_stack+0x1d/0x30 [ 943.169161][T25871] dump_stack_lvl+0x95/0xd0 [ 943.169173][T25871] dump_stack+0x15/0x1b [ 943.169231][T25871] should_fail_ex+0x25e/0x270 [ 943.169247][T25871] should_fail_alloc_page+0xf2/0x100 [ 943.169298][T25871] __alloc_frozen_pages_noprof+0x108/0x350 [ 943.169326][T25871] alloc_pages_mpol+0xa9/0x1d0 [ 943.169344][T25871] alloc_pages_noprof+0x8f/0x140 [ 943.169360][T25871] __pmd_alloc+0x47/0x430 [ 943.169401][T25871] handle_mm_fault+0x1ea1/0x2da0 [ 943.169420][T25871] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 943.169511][T25871] do_user_addr_fault+0x402/0x1060 [ 943.169529][T25871] exc_page_fault+0x62/0xa0 [ 943.169611][T25871] asm_exc_page_fault+0x26/0x30 [ 943.169623][T25871] RIP: 0010:__get_user_4+0x14/0x30 [ 943.169662][T25871] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 00 13 02 00 90 90 90 90 90 90 90 90 90 90 [ 943.169720][T25871] RSP: 0018:ffffc9000136fe28 EFLAGS: 00050287 [ 943.169731][T25871] RAX: 000000110e22fff6 RBX: ffff88810b63b180 RCX: 0000000000000005 [ 943.169739][T25871] RDX: 00007ffffffff000 RSI: ffffffff86e9f7d0 RDI: 000000004004743d [ 943.169747][T25871] RBP: 000000004004743d R08: ffff888118c32280 R09: 0000000000000003 [ 943.169755][T25871] R10: 00000000c004743e R11: 0000000000000000 R12: ffff88811e851600 [ 943.169844][T25871] R13: ffffffff82e35c80 R14: 000000110e22fff6 R15: ffff88811e851618 [ 943.169852][T25871] ? __pfx_ppp_ioctl+0x10/0x10 [ 943.169869][T25871] ppp_ioctl+0x145/0x1230 [ 943.169883][T25871] ? __pfx_ppp_ioctl+0x10/0x10 [ 943.169962][T25871] __se_sys_ioctl+0xce/0x140 [ 943.169973][T25871] __x64_sys_ioctl+0x43/0x50 [ 943.169998][T25871] x64_sys_call+0x1563/0x3020 [ 943.170012][T25871] do_syscall_64+0x136/0x3c0 [ 943.170029][T25871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.170102][T25871] RIP: 0033:0x7f500ac1ce59 [ 943.170147][T25871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.170183][T25871] RSP: 002b:00007f500966f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 943.170203][T25871] RAX: ffffffffffffffda RBX: 00007f500ae95fa0 RCX: 00007f500ac1ce59 [ 943.170211][T25871] RDX: 000000110e22fff6 RSI: 000000004004743d RDI: 0000000000000003 [ 943.170219][T25871] RBP: 00007f500966f090 R08: 0000000000000000 R09: 0000000000000000 [ 943.170274][T25871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.170281][T25871] R13: 00007f500ae96038 R14: 00007f500ae95fa0 R15: 00007fff18a337b8 [ 943.170291][T25871] [ 943.461852][T19568] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 943.489006][T25867] loop0: p1 p2 p3 [ 943.563069][T25867] loop0: p2 start 9961480 is beyond EOD, truncated [ 943.566930][T25874] loop2: detected capacity change from 0 to 4096 [ 943.586397][T25867] loop0: p3 start 117772289 is beyond EOD, truncated [ 943.615390][T25874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.693103][ T28] audit: type=1400 audit(1782567369.543:3335): avc: denied { write } for pid=25873 comm="syz.2.5774" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 943.715182][ T28] audit: type=1400 audit(1782567369.543:3336): avc: denied { create } for pid=25880 comm="syz.4.5777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 943.738021][T24049] Bluetooth: hci0: Frame reassembly failed (-84) [ 943.761060][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5778'. [ 943.769938][T25883] netlink: 3 bytes leftover after parsing attributes in process `syz.9.5778'. [ 943.771771][T25211] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.864496][T25893] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 943.880907][T25894] loop9: detected capacity change from 0 to 1024 [ 943.896802][T25894] EXT4-fs: Ignoring removed orlov option [ 943.929222][T25894] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.978765][T25900] loop4: detected capacity change from 0 to 512 [ 943.987152][T25900] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 944.009857][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.044930][T25900] EXT4-fs (loop4): 1 truncate cleaned up [ 944.052924][T25900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.081368][T20049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.140683][ T6153] Bluetooth: hci1: Frame reassembly failed (-84) [ 944.427667][T25928] FAULT_INJECTION: forcing a failure. [ 944.427667][T25928] name failslab, interval 1, probability 0, space 0, times 0 [ 944.441055][T25928] CPU: 1 UID: 0 PID: 25928 Comm: syz.4.5792 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 944.441089][T25928] Tainted: [W]=WARN [ 944.441096][T25928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 944.441130][T25928] Call Trace: [ 944.441137][T25928] [ 944.441158][T25928] __dump_stack+0x1d/0x30 [ 944.441180][T25928] dump_stack_lvl+0x95/0xd0 [ 944.441197][T25928] dump_stack+0x15/0x1b [ 944.441213][T25928] should_fail_ex+0x25e/0x270 [ 944.441252][T25928] ? v9fs_init_fs_context+0x33/0x220 [ 944.441322][T25928] should_failslab+0x8c/0xb0 [ 944.441413][T25928] __kmalloc_cache_noprof+0x7b/0x3d0 [ 944.441426][T25928] ? v9fs_init_fs_context+0x33/0x220 [ 944.441439][T25928] ? alloc_fs_context+0x41/0x570 [ 944.441454][T25928] v9fs_init_fs_context+0x33/0x220 [ 944.441502][T25928] alloc_fs_context+0x490/0x570 [ 944.441574][T25928] fs_context_for_mount+0x22/0x30 [ 944.441587][T25928] do_new_mount+0xe7/0x8d0 [ 944.441615][T25928] ? security_capable+0x7b/0x90 [ 944.441664][T25928] path_mount+0x4ad/0xb90 [ 944.441755][T25928] __se_sys_mount+0x28c/0x2e0 [ 944.441832][T25928] ? fput+0x8f/0xc0 [ 944.441848][T25928] __x64_sys_mount+0x67/0x80 [ 944.441865][T25928] x64_sys_call+0x2d61/0x3020 [ 944.441879][T25928] do_syscall_64+0x136/0x3c0 [ 944.441968][T25928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.442028][T25928] RIP: 0033:0x7f0da150ce59 [ 944.442038][T25928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.442049][T25928] RSP: 002b:00007f0d9ff5f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 944.442061][T25928] RAX: ffffffffffffffda RBX: 00007f0da1785fa0 RCX: 00007f0da150ce59 [ 944.442070][T25928] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 944.442129][T25928] RBP: 00007f0d9ff5f090 R08: 0000200000000340 R09: 0000000000000000 [ 944.442137][T25928] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 944.442144][T25928] R13: 00007f0da1786038 R14: 00007f0da1785fa0 R15: 00007ffe68f73eb8 [ 944.442155][T25928] [ 944.665823][T25930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5793'. [ 944.674784][T25930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5793'. [ 944.709446][T25937] loop0: detected capacity change from 0 to 1024 [ 944.717722][T25937] EXT4-fs: Ignoring removed orlov option [ 944.737645][T25937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.778865][T14393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.811726][T25947] audit: audit_lost=88 audit_rate_limit=0 audit_backlog_limit=64 [ 944.819822][T25947] audit: out of memory in audit_log_start [ 944.878388][T25950] loop0: detected capacity change from 0 to 512 [ 944.899131][T25953] loop2: detected capacity change from 0 to 256 [ 944.909695][T25950] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 944.921936][T25950] EXT4-fs (loop0): 1 truncate cleaned up [ 944.928246][T25950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.975060][T14393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.056372][T25962] loop4: detected capacity change from 0 to 256 [ 945.063729][T25962] vfat: Unknown parameter 'check.relaxed' [ 945.071696][ T28] audit: type=1400 audit(1782567370.930:3337): avc: denied { mount } for pid=25961 comm="syz.4.5803" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 945.232614][T25968] FAULT_INJECTION: forcing a failure. [ 945.232614][T25968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.275809][T25968] CPU: 0 UID: 0 PID: 25968 Comm: syz.0.5804 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 945.275844][T25968] Tainted: [W]=WARN [ 945.275851][T25968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 945.275862][T25968] Call Trace: [ 945.275906][T25968] [ 945.275914][T25968] __dump_stack+0x1d/0x30 [ 945.276021][T25968] dump_stack_lvl+0x95/0xd0 [ 945.276042][T25968] dump_stack+0x15/0x1b [ 945.276110][T25968] should_fail_ex+0x25e/0x270 [ 945.276134][T25968] should_fail+0xb/0x20 [ 945.276152][T25968] should_fail_usercopy+0x1a/0x20 [ 945.276253][T25968] _copy_from_user+0x1c/0xb0 [ 945.276269][T25968] ___sys_sendmsg+0xc1/0x1e0 [ 945.276364][T25968] __x64_sys_sendmsg+0xd4/0x160 [ 945.276389][T25968] x64_sys_call+0x194c/0x3020 [ 945.276408][T25968] do_syscall_64+0x136/0x3c0 [ 945.276491][T25968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.276510][T25968] RIP: 0033:0x7fb336a5ce59 [ 945.276525][T25968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.276542][T25968] RSP: 002b:00007fb3354af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.276586][T25968] RAX: ffffffffffffffda RBX: 00007fb336cd5fa0 RCX: 00007fb336a5ce59 [ 945.276637][T25968] RDX: 0000000004000000 RSI: 00002000000014c0 RDI: 0000000000000004 [ 945.276653][T25968] RBP: 00007fb3354af090 R08: 0000000000000000 R09: 0000000000000000 [ 945.276664][T25968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.276675][T25968] R13: 00007fb336cd6038 R14: 00007fb336cd5fa0 R15: 00007ffd07d44928 [ 945.276693][T25968] [ 945.543557][T25975] lo speed is unknown, defaulting to 1000 [ 945.594762][ T28] audit: type=1400 audit(1782567371.449:3338): avc: denied { create } for pid=25974 comm="syz.4.5807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 945.748779][ T7842] Bluetooth: hci0: command 0x1003 tx timeout [ 945.758295][T12832] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 945.817859][T25983] loop8: detected capacity change from 0 to 1024 [ 945.831757][T25983] EXT4-fs: Ignoring removed orlov option [ 945.874946][T25983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.887432][ T6153] Bluetooth: hci0: Frame reassembly failed (-84) [ 945.948101][T25035] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.958492][T25987] loop2: detected capacity change from 0 to 512 [ 945.975298][T25987] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 946.001355][T25987] EXT4-fs (loop2): 1 truncate cleaned up [ 946.009272][T25987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.037327][T25211] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.149215][ T7842] Bluetooth: hci1: command 0x1003 tx timeout [ 946.149567][T19568] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 946.171533][T26002] SELinux: failed to load policy [ 946.281721][ T28] audit: type=1326 audit(1782567372.087:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26006 comm="syz.9.5818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f500ac1ce59 code=0x0 [ 946.585765][ T6153] Bluetooth: hci1: Frame reassembly failed (-84) [ 946.654038][T26023] loop8: detected capacity change from 0 to 512 [ 946.664735][T26023] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 946.696010][T26025] loop8: detected capacity change from 0 to 256 [ 946.703365][T26025] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 946.775414][ T28] audit: type=1400 audit(1782567372.636:3340): avc: denied { write } for pid=26027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.806273][ T28] audit: type=1400 audit(1782567372.636:3341): avc: denied { write } for pid=26038 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.904186][ T28] audit: type=1400 audit(1782567372.766:3342): avc: denied { write } for pid=26041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.970197][ T28] audit: type=1400 audit(1782567372.816:3343): avc: denied { write } for pid=26054 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.997851][T26056] loop2: detected capacity change from 0 to 1024 [ 947.007156][T26056] EXT4-fs: Ignoring removed orlov option [ 947.052694][T26056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.114841][T26062] loop8: detected capacity change from 0 to 512 [ 947.129333][T26062] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 947.152823][T26062] EXT4-fs (loop8): 1 truncate cleaned up [ 947.179061][T26062] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.204990][T25211] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.249642][T25035] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.272880][T26077] tmpfs: Bad value for 'mpol' [ 947.314847][T26086] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5834'. [ 947.325090][T26086] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5834'. [ 947.334137][T26086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5834'. [ 947.343177][T26086] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5834'. [ 947.352628][T26086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5834'. [ 947.361706][T26086] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5834'. [ 947.405222][ T28] audit: type=1326 audit(1782567373.265:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26089 comm="syz.8.5837" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f979d78ce59 code=0x0 [ 947.921596][T12832] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 947.922788][ T7842] Bluetooth: hci0: command 0x1003 tx timeout [ 947.973392][T26103] EXT4-fs: Ignoring removed orlov option [ 947.994442][T26103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.096845][T20049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.127501][T26113] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 948.142625][T26113] EXT4-fs (loop9): 1 truncate cleaned up [ 948.164416][T26113] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.249785][T26118] iso9660: Unknown parameter '00000000000000000000003' [ 948.370449][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.493844][T26128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5845'. [ 948.546303][T26130] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.572067][ T28] audit: type=1400 audit(1782567374.422:3345): avc: denied { write } for pid=26127 comm="syz.9.5847" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 948.634475][T12832] Bluetooth: hci1: command 0x1003 tx timeout [ 948.672710][T19568] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 948.894586][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.623928][T26149] FAULT_INJECTION: forcing a failure. [ 949.623928][T26149] name failslab, interval 1, probability 0, space 0, times 0 [ 949.652782][T26149] CPU: 0 UID: 0 PID: 26149 Comm: syz.9.5853 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 949.652819][T26149] Tainted: [W]=WARN [ 949.652901][T26149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 949.652912][T26149] Call Trace: [ 949.652959][T26149] [ 949.652969][T26149] __dump_stack+0x1d/0x30 [ 949.652994][T26149] dump_stack_lvl+0x95/0xd0 [ 949.653016][T26149] dump_stack+0x15/0x1b [ 949.653035][T26149] should_fail_ex+0x25e/0x270 [ 949.653060][T26149] should_failslab+0x8c/0xb0 [ 949.653204][T26149] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 949.653223][T26149] ? __alloc_skb+0x2db/0x6f0 [ 949.653243][T26149] ? __alloc_skb+0x2db/0x6f0 [ 949.653285][T26149] __alloc_skb+0x2db/0x6f0 [ 949.653307][T26149] ? __alloc_skb+0x205/0x6f0 [ 949.653325][T26149] netlink_ack+0xfd/0x530 [ 949.653348][T26149] netlink_rcv_skb+0x18d/0x220 [ 949.653430][T26149] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 949.653464][T26149] rtnetlink_rcv+0x1c/0x30 [ 949.653506][T26149] netlink_unicast+0x5a7/0x680 [ 949.653564][T26149] netlink_sendmsg+0x5be/0x6f0 [ 949.653583][T26149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.653601][T26149] ____sys_sendmsg+0x532/0x580 [ 949.653629][T26149] ___sys_sendmsg+0x195/0x1e0 [ 949.653677][T26149] __x64_sys_sendmsg+0xd4/0x160 [ 949.653706][T26149] x64_sys_call+0x194c/0x3020 [ 949.653765][T26149] do_syscall_64+0x136/0x3c0 [ 949.653790][T26149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.653814][T26149] RIP: 0033:0x7f500ac1ce59 [ 949.653832][T26149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.653892][T26149] RSP: 002b:00007f500966f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.653915][T26149] RAX: ffffffffffffffda RBX: 00007f500ae95fa0 RCX: 00007f500ac1ce59 [ 949.653932][T26149] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 949.653946][T26149] RBP: 00007f500966f090 R08: 0000000000000000 R09: 0000000000000000 [ 949.653992][T26149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.654004][T26149] R13: 00007f500ae96038 R14: 00007f500ae95fa0 R15: 00007fff18a337b8 [ 949.654022][T26149] [ 949.957276][T26151] set_capacity_and_notify: 4 callbacks suppressed [ 949.957290][T26151] loop8: detected capacity change from 0 to 1024 [ 949.971027][T26151] EXT4-fs: Ignoring removed orlov option [ 949.994063][T26151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.064082][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 950.064101][ T28] audit: type=1326 audit(1782567375.909:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26158 comm="syz.2.5857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f20c5ce59 code=0x0 [ 950.064590][T26157] FAULT_INJECTION: forcing a failure. [ 950.064590][T26157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.112204][T26157] CPU: 1 UID: 0 PID: 26157 Comm: syz.0.5856 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 950.112235][T26157] Tainted: [W]=WARN [ 950.112243][T26157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 950.112255][T26157] Call Trace: [ 950.112262][T26157] [ 950.112292][T26157] __dump_stack+0x1d/0x30 [ 950.112317][T26157] dump_stack_lvl+0x95/0xd0 [ 950.112336][T26157] dump_stack+0x15/0x1b [ 950.112413][T26157] should_fail_ex+0x25e/0x270 [ 950.112437][T26157] should_fail+0xb/0x20 [ 950.112458][T26157] should_fail_usercopy+0x1a/0x20 [ 950.112484][T26157] _copy_to_user+0x20/0xa0 [ 950.112592][T26157] simple_read_from_buffer+0xb5/0x130 [ 950.112617][T26157] proc_fail_nth_read+0x10e/0x150 [ 950.112668][T26157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 950.112685][T26157] vfs_read+0x18e/0x7c0 [ 950.112712][T26157] ? __rcu_read_unlock+0x4e/0x70 [ 950.112737][T26157] ? __fget_files+0x184/0x1c0 [ 950.112781][T26157] ? mutex_lock+0x57/0x90 [ 950.112802][T26157] ksys_read+0xdc/0x1a0 [ 950.112819][T26157] __x64_sys_read+0x40/0x50 [ 950.112879][T26157] x64_sys_call+0x2886/0x3020 [ 950.112901][T26157] do_syscall_64+0x136/0x3c0 [ 950.113014][T26157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.113033][T26157] RIP: 0033:0x7fb336a1d68e [ 950.113050][T26157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 950.113068][T26157] RSP: 002b:00007fb3354aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 950.113096][T26157] RAX: ffffffffffffffda RBX: 00007fb3354af6c0 RCX: 00007fb336a1d68e [ 950.113111][T26157] RDX: 000000000000000f RSI: 00007fb3354af0a0 RDI: 0000000000000007 [ 950.113125][T26157] RBP: 00007fb3354af090 R08: 0000000000000000 R09: 0000000000000000 [ 950.113138][T26157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.113227][T26157] R13: 00007fb336cd6038 R14: 00007fb336cd5fa0 R15: 00007ffd07d44928 [ 950.113247][T26157] [ 950.117228][T25035] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.191868][ T28] audit: type=1400 audit(1782567376.049:3351): avc: denied { ioctl } for pid=26164 comm="syz.0.5861" path="socket:[79180]" dev="sockfs" ino=79180 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 950.486387][T26172] loop9: detected capacity change from 0 to 512 [ 951.230520][T26187] lo speed is unknown, defaulting to 1000 [ 951.238897][T26188] loop8: detected capacity change from 0 to 512 [ 951.385835][T26172] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 951.398528][T26172] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 951.410506][T26172] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5858: Corrupt directory, running e2fsck is recommended [ 951.434484][T26172] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 951.443180][T26172] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.5858: corrupted in-inode xattr: e_name out of bounds [ 951.457081][T26172] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 951.461577][T26172] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.5858: couldn't read orphan inode 15 (err -117) [ 951.482621][T26172] loop9: lost filesystem error report for type 5 error -117 [ 951.485335][T26188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 951.514619][T26172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.530285][T26195] loop0: detected capacity change from 0 to 1024 [ 951.546894][T26172] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 951.549275][T26188] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.5866: iget: bad i_size value: 38620345925642 [ 951.559303][T26172] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 951.582657][T26172] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5858: Corrupt directory, running e2fsck is recommended [ 951.596631][T26172] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz.9.5858: path /352/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 951.619869][T26195] EXT4-fs: Ignoring removed orlov option [ 951.646654][T26188] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 951.646892][T26188] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5866: couldn't read orphan inode 15 (err -117) [ 951.668766][T26188] loop8: lost filesystem error report for type 5 error -117 [ 951.677819][T26188] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.776627][T26195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.819471][T26205] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 951.844053][ T28] audit: type=1400 audit(1782567377.686:3352): avc: denied { write } for pid=26186 comm="syz.8.5866" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 951.963304][T26209] loop2: detected capacity change from 0 to 128 [ 952.001595][ T28] audit: type=1400 audit(1782567377.736:3353): avc: denied { relabelto } for pid=26204 comm="syz.4.5871" name="287" dev="tmpfs" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 952.027762][ T28] audit: type=1400 audit(1782567377.736:3354): avc: denied { associate } for pid=26204 comm="syz.4.5871" name="287" dev="tmpfs" ino=1549 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 952.054816][ T28] audit: type=1400 audit(1782567377.746:3355): avc: denied { write } for pid=26204 comm="syz.4.5871" name="287" dev="tmpfs" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 952.095866][T26209] vfat: Unknown parameter '0x000000000000000700000000000000000000zXDb&S!|:]dN' [ 952.159023][ T28] audit: type=1400 audit(1782567377.746:3356): avc: denied { add_name } for pid=26204 comm="syz.4.5871" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 952.186288][ T28] audit: type=1400 audit(1782567377.746:3357): avc: denied { associate } for pid=26204 comm="syz.4.5871" name="cgroup.controllers" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 952.209076][ T28] audit: type=1400 audit(1782567377.746:3358): avc: denied { write } for pid=26204 comm="syz.4.5871" name="287" dev="tmpfs" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 952.234789][ T28] audit: type=1400 audit(1782567377.746:3359): avc: denied { write } for pid=26204 comm="syz.4.5871" name="287" dev="tmpfs" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 952.261192][T26209] loop2: detected capacity change from 0 to 128 [ 952.269774][T26209] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 952.277852][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.299305][T26209] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 952.313155][T26188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.324256][T26209] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 952.332894][T26209] FAT-fs (loop2): Filesystem has been set read-only [ 952.340265][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 952.351372][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 952.382247][T14393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.491678][T26235] loop8: detected capacity change from 0 to 256 [ 952.898305][T26246] loop2: detected capacity change from 0 to 256 [ 953.622664][T26253] loop4: detected capacity change from 0 to 256 [ 953.724049][T26255] lo speed is unknown, defaulting to 1000 [ 953.780396][T26256] loop0: detected capacity change from 0 to 512 [ 953.983988][T26256] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 954.012241][T26263] EXT4-fs: Ignoring removed orlov option [ 954.211883][T26256] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.5888: iget: bad i_size value: 38620345925642 [ 954.254970][T26263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 954.330410][T26256] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 954.331220][T26256] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5888: couldn't read orphan inode 15 (err -117) [ 954.340915][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 954.340944][ C1] EXT4-fs (loop0): initial error at time 1782567380: ext4_orphan_get:1399: inode 15 [ 954.341030][ C1] EXT4-fs (loop0): last error at time 1782567380: ext4_orphan_get:1399: inode 15 [ 954.448460][T26256] loop0: lost filesystem error report for type 5 error -117 [ 954.568029][T26256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.702352][T26256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.775153][T26293] iso9660: Bad value for 'uid' [ 954.779996][T26293] iso9660: Bad value for 'uid' [ 955.704307][T25211] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.936158][T26303] set_capacity_and_notify: 3 callbacks suppressed [ 955.936212][T26303] loop0: detected capacity change from 0 to 512 [ 956.132966][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5906'. [ 956.143761][T26323] FAULT_INJECTION: forcing a failure. [ 956.143761][T26323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.163442][T26303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.178341][T26319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5904'. [ 956.188094][T26323] CPU: 1 UID: 0 PID: 26323 Comm: syz.8.5905 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 956.188203][T26323] Tainted: [W]=WARN [ 956.188211][T26323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 956.188226][T26323] Call Trace: [ 956.188234][T26323] [ 956.188243][T26323] __dump_stack+0x1d/0x30 [ 956.188361][T26323] dump_stack_lvl+0x95/0xd0 [ 956.188378][T26323] dump_stack+0x15/0x1b [ 956.188393][T26323] should_fail_ex+0x25e/0x270 [ 956.188497][T26323] should_fail+0xb/0x20 [ 956.188515][T26323] should_fail_usercopy+0x1a/0x20 [ 956.188664][T26323] _copy_from_user+0x1c/0xb0 [ 956.188692][T26323] ___sys_sendmsg+0xc1/0x1e0 [ 956.188811][T26323] __x64_sys_sendmsg+0xd4/0x160 [ 956.188835][T26323] x64_sys_call+0x194c/0x3020 [ 956.188914][T26323] do_syscall_64+0x136/0x3c0 [ 956.189005][T26323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.189039][T26323] RIP: 0033:0x7f979d78ce59 [ 956.189055][T26323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.189072][T26323] RSP: 002b:00007f979c1df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.189105][T26323] RAX: ffffffffffffffda RBX: 00007f979da05fa0 RCX: 00007f979d78ce59 [ 956.189117][T26323] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 956.189142][T26323] RBP: 00007f979c1df090 R08: 0000000000000000 R09: 0000000000000000 [ 956.189153][T26323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.189166][T26323] R13: 00007f979da06038 R14: 00007f979da05fa0 R15: 00007ffcf267a8c8 [ 956.189192][T26323] [ 956.271926][T26303] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.279867][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 956.279882][ T28] audit: type=1326 audit(1782567382.107:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26318 comm="syz.2.5904" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f20c5ce59 code=0x0 [ 956.398726][ T28] audit: type=1400 audit(1782567382.207:3368): avc: denied { shutdown } for pid=26320 comm="syz.9.5906" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 956.398936][T26325] lo speed is unknown, defaulting to 1000 [ 956.462513][T14393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.603173][T26332] loop0: detected capacity change from 0 to 512 [ 956.632758][T26332] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 956.646648][T26331] lo speed is unknown, defaulting to 1000 [ 956.678675][T26332] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.5908: iget: bad i_size value: 38620345925642 [ 956.829793][T26332] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 956.830239][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 956.845957][ C1] EXT4-fs (loop0): initial error at time 1782567382: ext4_orphan_get:1399: inode 15 [ 956.855448][ C1] EXT4-fs (loop0): last error at time 1782567382: ext4_orphan_get:1399: inode 15 [ 956.903590][T26336] loop8: detected capacity change from 0 to 128 [ 956.937751][T26336] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 956.951018][T26336] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.075738][T26332] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5908: couldn't read orphan inode 15 (err -117) [ 957.154739][T26339] loop2: detected capacity change from 0 to 1024 [ 957.195594][T26332] loop0: lost filesystem error report for type 5 error -117 [ 957.221742][T26339] EXT4-fs: Ignoring removed orlov option [ 957.291311][T26332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.506489][T26339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.616372][ T28] audit: type=1400 audit(1782567383.445:3369): avc: denied { write } for pid=26330 comm="syz.0.5908" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 957.675127][T25211] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.697713][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 957.799767][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 957.822690][T26346] netlink: 'syz.2.5910': attribute type 11 has an invalid length. [ 957.845706][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 957.927872][T26332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.117689][T26321] infiniband syz0: set active [ 958.132555][T26321] infiniband syz0: added xfrm0 [ 958.137884][T25345] xfrm0 speed is unknown, defaulting to 1000 [ 958.144641][T26321] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 958.144788][T26321] infiniband syz0: Couldn't open port 1 [ 958.168435][T26321] RDS/IB: syz0: added [ 958.226454][T26321] smc: adding ib device syz0 with port count 1 [ 958.274276][T26321] smc: ib device syz0 port 1 has no pnetid [ 958.302167][ T6155] Bluetooth: hci0: Frame reassembly failed (-84) [ 958.310871][T25035] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 958.321212][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 958.331574][ T3377] xfrm0 speed is unknown, defaulting to 1000 [ 958.443445][T26361] syzkaller0: entered promiscuous mode [ 958.449885][T26363] loop4: detected capacity change from 0 to 256 [ 958.455949][T26361] syzkaller0: entered allmulticast mode [ 958.467304][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 958.467711][T26361] FAULT_INJECTION: forcing a failure. [ 958.467711][T26361] name failslab, interval 1, probability 0, space 0, times 0 [ 958.487290][T26361] CPU: 0 UID: 0 PID: 26361 Comm: syz.8.5917 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 958.487320][T26361] Tainted: [W]=WARN [ 958.487326][T26361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 958.487339][T26361] Call Trace: [ 958.487420][T26361] [ 958.487428][T26361] __dump_stack+0x1d/0x30 [ 958.487455][T26361] dump_stack_lvl+0x95/0xd0 [ 958.487476][T26361] dump_stack+0x15/0x1b [ 958.487493][T26361] should_fail_ex+0x25e/0x270 [ 958.487517][T26361] should_failslab+0x8c/0xb0 [ 958.487638][T26361] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 958.487670][T26361] ? __alloc_skb+0x2db/0x6f0 [ 958.487758][T26361] ? __alloc_skb+0x2db/0x6f0 [ 958.487783][T26361] __alloc_skb+0x2db/0x6f0 [ 958.487841][T26361] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 958.487859][T26361] ? __alloc_skb+0x205/0x6f0 [ 958.487877][T26361] alloc_skb_with_frags+0x7e/0x3d0 [ 958.487949][T26361] ? avc_has_perm+0x101/0x190 [ 958.487986][T26361] sock_alloc_send_pskb+0x44d/0x500 [ 958.488024][T26361] ? lockref_put_return+0xf7/0x130 [ 958.488119][T26361] ? __rcu_read_unlock+0x4e/0x70 [ 958.488153][T26361] packet_sendmsg+0xd37/0x3210 [ 958.488309][T26361] ? avc_has_perm_noaudit+0xa3/0x120 [ 958.488347][T26361] ? avc_has_perm+0x101/0x190 [ 958.488365][T26361] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 958.488390][T26361] ? __pfx_packet_sendmsg+0x10/0x10 [ 958.488414][T26361] __sys_sendto+0x411/0x470 [ 958.488508][T26361] __x64_sys_sendto+0x76/0x90 [ 958.488534][T26361] x64_sys_call+0x2d35/0x3020 [ 958.488556][T26361] do_syscall_64+0x136/0x3c0 [ 958.488612][T26361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.488635][T26361] RIP: 0033:0x7f979d78ce59 [ 958.488653][T26361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.488817][T26361] RSP: 002b:00007f979c1df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 958.488839][T26361] RAX: ffffffffffffffda RBX: 00007f979da05fa0 RCX: 00007f979d78ce59 [ 958.488877][T26361] RDX: 000000000000000e RSI: 00002000000003c0 RDI: 0000000000000006 [ 958.488891][T26361] RBP: 00007f979c1df090 R08: 0000200000000080 R09: 0000000000000014 [ 958.488907][T26361] R10: 0000000004004011 R11: 0000000000000246 R12: 0000000000000001 [ 958.488958][T26361] R13: 00007f979da06038 R14: 00007f979da05fa0 R15: 00007ffcf267a8c8 [ 958.488979][T26361] [ 958.763998][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 958.790281][T26365] syzkaller0: entered promiscuous mode [ 958.795890][T26365] syzkaller0: entered allmulticast mode [ 958.841050][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 958.999009][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 959.086887][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 959.160127][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 959.234198][T26321] xfrm0 speed is unknown, defaulting to 1000 [ 959.376256][T26377] random: crng reseeded on system resumption [ 959.379293][T26379] loop9: detected capacity change from 0 to 1024 [ 959.382295][ T28] audit: type=1400 audit(1782567385.212:3370): avc: denied { write } for pid=26375 comm="syz.2.5921" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 959.392401][T26379] EXT4-fs: Ignoring removed orlov option [ 959.419235][ T28] audit: type=1400 audit(1782567385.212:3371): avc: denied { open } for pid=26375 comm="syz.2.5921" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 959.444498][ T28] audit: type=1400 audit(1782567385.252:3372): avc: denied { ioctl } for pid=26375 comm="syz.2.5921" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 959.490782][T26380] lo speed is unknown, defaulting to 1000 [ 959.496627][T26379] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.536657][T26383] loop4: detected capacity change from 0 to 512 [ 959.548279][T26383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 959.558651][T26380] xfrm0 speed is unknown, defaulting to 1000 [ 959.563570][T26383] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.5922: iget: bad i_size value: 38620345925642 [ 959.579163][T26383] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 959.579461][T26383] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5922: couldn't read orphan inode 15 (err -117) [ 959.588668][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 959.588702][ C1] EXT4-fs (loop4): initial error at time 1782567385: ext4_orphan_get:1399: inode 15 [ 959.588766][ C1] EXT4-fs (loop4): last error at time 1782567385: ext4_orphan_get:1399: inode 15 [ 959.625834][T26383] loop4: lost filesystem error report for type 5 error -117 [ 959.626698][T26383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.648319][ T28] audit: type=1400 audit(1782567385.481:3373): avc: denied { write } for pid=26378 comm="syz.4.5922" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 959.684112][T18661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.715327][T26383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.734092][T26391] loop4: detected capacity change from 0 to 512 [ 959.734139][ T2989] ================================================================== [ 959.748434][ T2989] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 959.755304][ T2989] [ 959.757632][ T2989] write to 0xffff8881019d7a10 of 8 bytes by task 26391 on cpu 1: [ 959.765344][ T2989] inc_diskseq+0x2d/0x40 [ 959.769516][T26393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26393 comm=syz.4.5925 [ 959.769593][ T2989] disk_force_media_change+0x9e/0xe0 [ 959.787428][ T2989] loop_configure+0x6c9/0x9c0 [ 959.792177][ T2989] lo_ioctl+0x1e1/0x1390 [ 959.796440][ T2989] blkdev_ioctl+0x387/0x460 [ 959.800949][ T2989] __se_sys_ioctl+0xce/0x140 [ 959.805552][ T2989] __x64_sys_ioctl+0x43/0x50 [ 959.810403][ T2989] x64_sys_call+0x1563/0x3020 [ 959.815072][ T2989] do_syscall_64+0x136/0x3c0 [ 959.819745][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.825870][ T2989] [ 959.828192][ T2989] read to 0xffff8881019d7a10 of 8 bytes by task 2989 on cpu 0: [ 959.835877][ T2989] block_uevent+0x31/0x50 [ 959.840302][ T2989] dev_uevent+0x336/0x3c0 [ 959.844830][ T2989] uevent_show+0x11a/0x200 [ 959.849268][ T2989] dev_attr_show+0x3f/0xa0 [ 959.853741][ T2989] sysfs_kf_seq_show+0x1a3/0x280 [ 959.858699][ T2989] kernfs_seq_show+0x82/0xa0 [ 959.863300][ T2989] seq_read_iter+0x2d9/0x8f0 [ 959.867905][ T2989] kernfs_fop_read_iter+0xbe/0x320 [ 959.873003][ T2989] vfs_read+0x699/0x7c0 [ 959.877309][ T2989] ksys_read+0xdc/0x1a0 [ 959.881468][ T2989] __x64_sys_read+0x40/0x50 [ 959.885960][ T2989] x64_sys_call+0x2886/0x3020 [ 959.890661][ T2989] do_syscall_64+0x136/0x3c0 [ 959.895328][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.901200][ T2989] [ 959.903501][ T2989] value changed: 0x000000000000097f -> 0x0000000000000980 [ 959.910600][ T2989] [ 959.912912][ T2989] Reported by Kernel Concurrency Sanitizer on: [ 959.919039][ T2989] CPU: 0 UID: 0 PID: 2989 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 959.929461][ T2989] Tainted: [W]=WARN [ 959.933242][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 959.943283][ T2989] ================================================================== [ 960.336570][T12832] Bluetooth: hci0: command 0x1003 tx timeout [ 960.336587][T19568] Bluetooth: hci0: Opcode 0x1003 failed: -110