last executing test programs: 2m44.161995911s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x8c6c}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$cgroup_devices(r2, &(0x7f0000000080)={'c', ' *:* ', 'r\x00'}, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000206010200000000000000000000000a0c000780080008000000004010000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a31000000000500010007"], 0x54}}, 0x0) 2m44.047196629s ago: executing program 1 (id=100): syz_mount_image$ext4(&(0x7f0000000900)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0xfe}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xc2}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @printk={@lld}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r3, 0x20, 0x0, 0x8000) 2m43.580286042s ago: executing program 1 (id=104): socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008046, &(0x7f0000000c40)={[{@dioread_nolock}, {@data_err_abort}, {@block_validity}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 2m43.386809656s ago: executing program 1 (id=106): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) file_getattr(r3, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x18, 0x100) (async) file_getattr(r3, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x18, 0x100) pwrite64(r3, &(0x7f0000000140), 0x0, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r4, 0x3, 0x4100, 0x8000c62) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") io_uring_enter(0xffffffffffffffff, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000127000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000002200)='9', 0x1) syz_emit_ethernet(0xea, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xb4, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6eadfc026caa76c1bda522b99b602ecf7e25722717157044602d5e39e0da5774", "7ac925764cdb0c2e072c97fab6347e68e68738a3ef4862aae96386ff2db8a42ee872905a1f4aafb2cae12440097de9b9", "0987b55870f8f9da5c631068d6b2c70c3e2c4aad13f140d03a66187c", {"d959ab8137f728fab4f808948bdda11d", "b179260b9b58204ecd61cd96dc030469"}}}}}}}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40830) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40830) shutdown(r5, 0x0) (async) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 2m41.370596257s ago: executing program 1 (id=124): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 2m41.150052716s ago: executing program 1 (id=128): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000100000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) mkdirat(r4, &(0x7f0000002040)='./file0\x00', 0x20) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000040)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m41.147327705s ago: executing program 32 (id=128): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000100000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) mkdirat(r4, &(0x7f0000002040)='./file0\x00', 0x20) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000040)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m24.177296321s ago: executing program 3 (id=265): socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r4, 0x407, 0x176) vmsplice(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 2m23.192418967s ago: executing program 3 (id=268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x89, 0x4, 0x0, @private=0xa010100, @local}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000454e16bc953fdfae00001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000090000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000000000000000000000000000000b4360000"], 0x48) creat(0x0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000180), 0x0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000480)={{0x0, 0x1, 0x4, 0x1, 0x8}}) 2m21.563071961s ago: executing program 3 (id=282): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="110000005200010004000000000000001c"], 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f00000000c0)={[{@nobarrier}, {@quota}, {@norecovery}, {@block_validity}, {@nombcache}]}, 0x8, 0x611, &(0x7f0000000200)="$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") 2m21.158826255s ago: executing program 3 (id=285): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000002100), r2) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7002ffdbdf250fd8000008000100cb"], 0x34}}, 0x4020084) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10, 0x1a2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) unshare(0x22020600) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xb055a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xffff, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m20.154458026s ago: executing program 3 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x1fc}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r1], 0x114}}, 0x0) 2m20.06523438s ago: executing program 3 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2b, 0x80801, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001480)={{r0, &(0x7f0000000380)='%-\\]]\x00', 0x400a00, &(0x7f00000003c0)={@_ha_fsid={[0x4, 0x7]}, {0x3, 0x9, 0x9, 0x2}}, 0x7ff, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x401}, {[0x2, 0x3, 0x0, 0x8]}, 0x3, 0x1000, &(0x7f0000000480)=""/4096}) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001a000100000000000000000002001000", @ANYRES32=0x0, @ANYBLOB="0100007f040dac733cbcb067dffffa8969d1819cc368321b1c4a"], 0x1c}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0xe1, 0x240) 2m8.004923767s ago: executing program 2 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111040000000000731a0eff00000000950000f7ff000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) 2m7.801187349s ago: executing program 2 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x24000804}, 0x24000000) socket$pptp(0x18, 0x1, 0x2) (async) socket$pptp(0x18, 0x1, 0x2) 2m7.624338545s ago: executing program 2 (id=386): r0 = dup(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) unshare(0x20000680) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x4, 0x55a}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x4}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000440)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@min_batch_time}], [{@dont_measure}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") getsockopt$inet_mptcp_buf(r3, 0x6, 0x1e, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) bind$rxrpc(r2, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) syz_clone3(&(0x7f0000007040)={0x400, &(0x7f0000006e40), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000007000)=[0xffffffffffffffff], 0x1}, 0x58) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) unshare(0x10000000) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) 2m6.461748197s ago: executing program 2 (id=390): r0 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000300)="da0a9ce43d", 0x5, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000440), 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000240), 0x3, 0x45c, &(0x7f0000000580)="$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") setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7a848", 0x3, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x20008000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000580), 0xaec, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) 2m6.203328869s ago: executing program 2 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000020000000000000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000200)={0x82080000, 0x0, 0x0, 0x0, {0x100004}, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0xff8e, {r1}}, 0x58) r2 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000480)=@ethtool_channels={0x3c, 0xffffffff, 0x0, 0x1, 0x40004, 0x2, 0x1}}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x1200, 0xffff, 0x8, 0x8, 0x3, 0xafc6}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_cmd={0x27, 0x6, 0x4, 0x0, 0xfc, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYRES16=r6, @ANYBLOB="010000000000000000002d0000000e0001006e657464657673696d0000000f0002006e6574641b5522e40128e95c", @ANYRES64=r3], 0x34}}, 0x28040804) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000180)={'team_slave_1\x00'}) sendto$inet_nvme_of_msg(r4, &(0x7f0000000500)={@cmd={{0x4, 0xa, 0x48, 0x2}, {@common={0x7f, 0x5, 0x90d, 0x3, [0x1ff, 0x8], 0xffff, @anon_struct={0xb, 0x4}, @cdws_anon={0x8, 0x3, 0x10000000, 0x9, 0x400, 0x8}}}}, @void}, 0x80, 0x0, 0x0, 0x0) semctl$GETZCNT(0x0, 0x6, 0xf, &(0x7f00000000c0)=""/27) unshare(0x6a040000) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f00000001c0)) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 2m5.724613509s ago: executing program 2 (id=396): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='X', 0x1}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xffffff7f, @mcast1, 0xffff}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bind$unix(r2, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='X', 0x1}], 0x1) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xffffff7f, @mcast1, 0xffff}, 0x1c) (async) 2m5.673828749s ago: executing program 33 (id=396): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='X', 0x1}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xffffff7f, @mcast1, 0xffff}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bind$unix(r2, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='X', 0x1}], 0x1) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xffffff7f, @mcast1, 0xffff}, 0x1c) (async) 2m4.856841856s ago: executing program 34 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2b, 0x80801, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001480)={{r0, &(0x7f0000000380)='%-\\]]\x00', 0x400a00, &(0x7f00000003c0)={@_ha_fsid={[0x4, 0x7]}, {0x3, 0x9, 0x9, 0x2}}, 0x7ff, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x401}, {[0x2, 0x3, 0x0, 0x8]}, 0x3, 0x1000, &(0x7f0000000480)=""/4096}) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001a000100000000000000000002001000", @ANYRES32=0x0, @ANYBLOB="0100007f040dac733cbcb067dffffa8969d1819cc368321b1c4a"], 0x1c}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0xe1, 0x240) 1m42.028401353s ago: executing program 4 (id=616): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00'}) r1 = syz_io_uring_setup(0x5bf, &(0x7f0000000140)={0x0, 0x5058, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40}) (async) io_uring_enter(r1, 0x6e2, 0x318b, 0x3, 0x0, 0x0) clock_nanosleep(0xb, 0x0, 0x0, 0x0) (async) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x4) (async) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) close_range(r11, r4, 0x2) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYRES64=r4, @ANYRES16=r12, @ANYBLOB="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"/382], 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) (async) unshare(0x2e000200) r13 = semget$private(0x0, 0x4000, 0xa) semctl$GETALL(r13, 0x0, 0xd, 0x0) 1m41.886885686s ago: executing program 4 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000e001002c00128009000100766c616e000000001c0002800600010004000000100004800c0001000a005115877ae2142fa2e99e", @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x24000001}, 0x8000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x8001}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x4, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0x8, 0xc04, 0x7, 0x8, 0x0}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) ioprio_set$uid(0x3, r9, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f00000026c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002680)={&(0x7f00000002c0)={0x23bc, 0x13, 0x200, 0x70bd29, 0x25dfdbfb, {0xd}, [@generic="fbe6726988ea98a3eec6c9ef9119d542d65b279e490fc2d458c06ed647443eb05985032862d25f02d518d8d19478043025f4f1b5e515dfe91e945b6e2b7965ffbc50a0325037bfb6499a072e5c712815d939e4c1995f7538543a193250e7c3208d6dae103e826122f2ab6151d93e9888888e8b8e277927e3212d2bdaf6baf1941ba2a379fc8de92444a2137cd833e7afa016decde86fbf1b25d82e3e8945d2883aae1e0993cf14a0c7bd93859bfbf5c9327ed322f1e872d5b8013bb38f2bf1dff7c0c3be983903dde8398c9a28501a11ef50452cf76577", @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@mcast1}, @generic="5a85ae012e69c40730887afc0aac3d54449f8c64514d82c400429b7653ef9094c2eb7437ba6c6bb058f79ef5adfc01bbb35e", @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@loopback}, @generic="891ff663d7fb80b50dca6452f3ac76de8725a85b9dd1da65cdc32ffb474c3cad0156a5ab2e93665ad5265469154b1b22d9c853baa427881651ccef52bba9e626d361d8a77e12aa14f5349b0395ea3813e11d62ef7a283e17ec2244b4ca8573681bb71cf4645389a4d7ab9376a39ef2bb306fb8cde6396945d84998866c75040d067470cec3280a5bfac888bc0f36db7c7f", @generic="4bc4cb78bea4abd66b3d75f1b8514aa97a159f45b3b54718f965153c94447391cdbbc29ba1dea8dc40dcf5941cfa8e27e0ca8e5f1a88dd6e028b437ead7007b3cb97a9cea64dadcae6ee8448b24785b610b3152c84345de8e3c800b5900966d717be6c0c9c7052c4a3e2cb6483c2538fa2e815d79e60148cbcfd9d07809de20631ddd5d009f43ce1b0", @nested={0x11f, 0xd9, 0x0, 0x1, [@generic="a9d193f43692f9a58ece2f5c83297ad8c45e10ed0c0411e5116ae228fd7b83b0b49adcb127136a55fd1aa61757d898ad3d5806fa", @generic="11e476", @typed={0xc, 0x48, 0x0, 0x0, @u64=0x1}, @typed={0x31, 0x49, 0x0, 0x0, @binary="ed38fae98de0e0e2bf724e0671a80dbec0af1e40565c34ef5096b86c394beadf02e23dcd596cf812d4525707e6"}, @generic="cbaf0b3c3e95b843bfaf43313d3e0828b96d785b416ed1a069894e67f865b524d2a53f61af1b79ad69ae57f20fc948d603496cfd7dfd167df098361f9f9fefc0fc427276960873d8eb1d6e60c5cc028c50b85a81e9070fb23894d5ca24aa958254022407fc032e1ed116c546e642ab9e35ea62ea36b958d1dbb53191254f6a6c308516d9e1fac3fa87986228b622073160fb3adfb57ac86f86c060cba16b0059", @nested={0x4, 0x9}]}, @nested={0x2039, 0xef, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @pid=r7}, @typed={0x1004, 0x40, 0x0, 0x0, @binary="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"}, @generic="16149cd5ecd353d936c06ba2bb4d971cc15e08e505877d9743e11a04e7", @nested={0x4, 0xed}, @generic="24b5cbb98f9a60adaf27e199bedacfc1af533508864ce301a4784bb00c076297b4ddfb98f5b71a9da54da3bd6f23b93569926062587fe1d484f4050d8383331e15f414b96811ea2135d2353a5886c4706cfc4015b5cad8764bde9bc270f0691ebe89ca8108b266360750af0f8f6a3bb11178c92737243c288a7c9f08fff71192aaf43c0fc6060d76ef62872869744706556cc4f74bdcbcca016bd8d6d90fbf3a38eb4d1509139a7faba6325fa8f46aee64334c8a98af1ed5469dc1f626a282c2549c8e1e9d1288d6be54886fb052e29e22dbb77cfcbb12e77b8208835b4e498bddb5f2acbfc331024759f055ee712018c1996e8b7084e4ed2bf8b5c4471711a692a781c909b757bb2f85a1bb4859d7c550dfa1f5f7f203bac194a31223a8ed55ed9156a831f7d8767d9682d3bf317b5435ad60e4c0ce3f68c98bfca0449c128f87a3ccc5ad6791ebe37bd90727100641f0fd600300f340e4ac03a6599ac3fcd4ee1d461256bab22cfe9c43c02cc7090687b551a10965fe00727235e6084d305320ade1aeab19121d0e52836fa6fcf52dff9b2ae2015174bccfad4958dce3e88133e931e27f158f377235295537a29743398b356c1847d18ed38bbb94a9609aa333e9a6a928057c6e82baa3c20e56d307c4ee41054d7e44f507e27a8ae609c9ea2d66bec66d81395ab316fdcb178417621f8806c8a65238d9475c0d76aaa79138bfba8c2d1d539af8e5ee2b7e2da3b61aaa7b71887ae9237c1e433625bc4e513adbde547c99bade2b19fc7dced23fb5f3b15aae6cbccecdc449d170b9942ad337a2ccca2142c9b444ef46223f825fa1f9bf5e9ea07e8b5d242d15b2139d02eb2bf7bbb7ef9e61a1ef0b8e9c65336984ac282426cd5f3abc57a4494d50c78e5fbde3834e46582403a34e1630a509c28399e5810f392d8ded9712145f07f3da1a0b21135492f3eb73aa8f05e7a1dea053547e73ffe6ad588cdb150df89946a0c056cd040c3d1e7f7dd9df829b4bffe512ab1cfd10dece652d06eb21c3a2b920e97efb01fd080c5af534578e0be3ff2d0f1f57f15e09a22a4c3bc68cedd7dbd6bf504d6d9e0fdc40d1e47f79bbb56a1495f66b0b4425dc3c29e096a6e55121b0650ab638990f9b02c0e1d1a6b3e7789fec7315925b5038aba259ad227fd81d1ccb92a8a3066e2fedd1141d3a265e2bb44395d010573aa627b7df3da40b6a56930533a14128a858d6478da9ced1fb6d75c83c0a98b1aee1a11b6383afa0bf0e21bf723d7ecc57c537b139ee271d0c8143e3946a44670f14988ccc2e4ab675411b510b3db246bda1be78d112eb1b8717f91b0b098217558634cf20ad365f8165da754272c48655a160858a7859ce24614fa7470c1ea516a31d80f04c1569a3992f383258fdabbcf7e0823c596e916a9faf4de81925e3ff5a8017c5e1a0e6e7c7e7af420888d4de1f3261be70efe125797319f9db83dab757adcfa5703a0e651505b7c9df12b56d2a58abab9b3969f4a8f4b829f9f83ee78de0f8c7c44c319af0418a19dad458c8d27206566fabee975d347eeb1bae6cadc068c718702ab0d005bced034f5c3e758e40209cce6822380d0dadb0af13c9a3927b5265d0e0f48d49beafa31b5e154a69c0cd345f017d72ffc31470ccecea882692fcfa0a5ee0b237557b85603566a9d8c8dd7b13518a38d4e2151069dc53c449fee2a6e7c5ffb98a032513c7c071b5b62724dbae4a9b93ebe9869d669992e58f5db829d4c5aa96b2c00c8aca5b64fe3ba6c0ce067cba72651cc91eb36836d84ae5779450b8768444baba6ffb6eb8d7eacd2aa6cbc842c5881b3c2db6076e8136ac0d77cc698828c53ac9e7fde8c1f936d587af270b850d4a28b0d3c6f0f083d2585f96cd5edc22149172b42af7004a4183144f56cf3031c7ff60e10b38defbf21eadcce25d83c96d1c85cc59b9bd48ee924c47912cdf1be59bb3590e94811ab1b721b643b4ba43e9721864e8492265a6525c240c84c76c2d3632c53676af4ef60b1a7b56dfd99a8fcb56bc14d25a1a76f7a6193531bc0c667aea4b96b86f0cd190a81a201ebce1cbda16b7519284ab9a908b8c74b8c16c2f52402fab786f5357d18aa88a4f09aab4aa5cc41b32f0571d4096a651f2d12cda965477cf326a7996c773ef19bcf2fc8eb62806d0f925d897c3b68a806b408d7e60c5c4f113c33f0bbaedd8dc2a4aa7a0fd5daff23c5d0fe2bb3686d09a8dea786d82d605a2ff6416b7c5d3c490ae1e3d835a08d172ade8645494b8055ec87bd162798cd90ef65acb5948f6ef3db7f71877426969df16fd2d54dc1ebcc482fd3c8715604f337115f6be37bd819f91f5209d64936bc401ac725c63bcf0aca86238a19c115c2730b0469e1921713d1eb7aeb7500c998f3f81c0fc618a27457636cf0db6726b80801a823d0f1744e602c2c8547d3aa8d42dfd4cf12c76834257c9ee798bc5ca1b351626edf55c6c69460b2adef65b8ec0c2d8142506eaa908c2096dc91a28b006bb17e9193ba10432a40881551bb5ac35dc434273438641a3f5c7dea4c791e223be6ed67a699e507f25ca90a3738c8463c879662f969c2278bd3691279ac4488422ed6c9ae50b4b7b3140aa84f84d316aa13a0bd685cb4f7e03143b06a10e70084af8cddce9e4717be30d358cd275fa92e5e027f6ff14bf32023f1355a4f871d8614daa3bcba98745ec4837066e1349102da7ea7d6d5fc807acdb1dd1712b835c48d404d2f3301acccebdf4ab55c7085c7272335bed6ff1a16fe6b70f995b45788a32a06dc843e7aa0ee45354d90f2b29c96eadcf84a1432302e85e7cad8cce2aefdfb56da86f2a3e86403c07dd740fec81db68831201e133d673415ca42cd23e0eb9e32ea05dca83a251d4c4862ffb0b20310e903371d3c13e0a836ca0b26d1c41add3ea8e63a4fd84c1a1f55b192366cf59fe6206de5611eb541dd0d31f04f3b61f4bf1d820eb2c2272e1edebb6f739db3f2e034037fd1da70bd6fefcc77f9ce337027ec69e88427a92ca630c720896e0e2bb84676a50b109616efb50c488bed1f19b15cedc3e0ad9a33d71049735cfe74309e1c19c43142f64b5b9dc73b54875435eaf5031f07626e95e78d9429d3144ad29998af98fe348a0206e372fd5feb73dcb7c51ddada899885dfa79023b5c76b7867d8c850869a84b6b69b529439c3ec02ce48c0640d4192385c30f1851d0d6613c1829981cd3a0bfe1d9183a9b3f9dc87981a4833fffeb852b91693ebb11c0cfb545b8c8a241ba725f8a36f1af7b26a36f1ea87757d683075e00a649879b1a8e9f006111a6fcc6733a2cbb2535597df547f4bf73489d1c1633142c61e0c7cccb4551dc8128ad358f3bfc159cbdb250c5596aa54469a1262960f2b4a9fc5bdf25ab460507427d09593692f5ef96c705b75c2522b7e9757c9905e287d4275137382031b1f154fc406acad7354c1b57bc54ddeeec0d177555d9e9ad060edd5683801ae47ba0b0f38a62f0ff874a4be8291189137dfb7473f07e2cf2e432c2bbdfde33cb90100fb0e8acdd02f2eada9ca920f2522613caf4b1df51da7cfe3a7044283d9a43540eedb037f4f6ee937499a5db332f494465ea90956b37a021960db2d02366f19524aee5a394c4ecafb64544603d7e89a073b0250dc6389a621a79e9d372f4bfeb9a59bee1830c8d7573767bcffb47708b4f2d3c037a18a0ca12b634e57859f6a0a71e105d73d740ff9fef81aff9e5afa605cbff0953c22b11a8dee45f558cdb7805a8aca99601a522c63d09b3103aa9a904c73fab4e92ab19566521041a630379c8d5c99a6ad8018cc8de71832af9519c1d766e2158b68e2c85f797eb581d25e92abf802bd8e67485aac18e85ffe08303e22b8655c6fd7190e12bcbe595f17dcead7ed55e797cb76cf094ac7af302a7cf1ae953251de29927bac2e0b301b4ef6a28f95967982e4e3246afb4a3d88ecb33cb35d70eb0ce398cc4b847ce74be29d927ad8bb103a36776204d4a7e4d75449f3ebd36439d0dc7280c2cfdcbdec903910a1bfc91777b62ddff593916b8fffb00c0b47c43a59324de4649d8b7e825df8c5ff0ed1edc93523c0ab07ead671ddd359f92a33ceedd16fc1160be36f5b2ae51e7bf3d5e948ab3da8cce81547dfd03324f89af0baa3d4b2cbde0cba8b3714c50a5cb3a79d809b8e073d35a68f8d9d74c16e4ebfcae973ae15494a9b6d5067b7a4a5205aa1d6e524cdfd6bcf155fd628f8a51e9e11e8c8f70e18ae63acb04e8c581eb85bce8bcec0857e6e3280ab8a867432a17da410051debd28cccdaba4f3fbcb5b531dfd522eb57f7616bea1edc107df7dd343149f3c2c88ca30ce87532f7c275697c70e38188475eecad1e1f2ba9e4c172bb7a3e7d52931ff2c7e49de85534f266a144590f8a1c5b54df01d04dcce86bbfa4d6bf3799c4e438276b0fc5409ed70eb703a93269978ec250be732694577f08658567db4e949bc81a21458b302e485363800db8ccd4255c0fbb57e5221020ccc04972eecce5376a2f4483de99e8c0d6b331737b3bea239b0c7ef24fc9c7ee2cfb59279d4cb97a7b8d3c2ef7a7e6b27425fd4ef96dad1d544a39b84ad8046495c596c487ffa2ac435127d3076673737fa7fe3c3af56aeea3df77475aeed8cc197d44f94d6426d79eafd8c0e32703c0dc482b2428d19bd2eabf7c6fd411171397cacd38c7fb4ad17616edbc7d7ecc660a9ab298825e7ed175030af0b5712a8adac5ec480c8fab040d360c25fc0671c2176a5345b54c6bddd7a2080f1ada03ca24b87f6dfb8b264a5694ea40c6f04c7df23937cb925c04c02e75a057c2f1f3ec57f9c3e7320ea52bfba9ac9100b91f202a18afcbdf4d437943ace1759f8f1c01bc8d346c70398fa3f209ec4b90f5c3cfe9e437ff90ceb288c8c5af4433daa52085110c63c16fa087af099eccfb05c8c6b01ab48e4b5de7b16551ff1a0251a110f63303cebeba83a8f0b3a554ad5943f84a8f0e31f230bc9ac19b3108163c5f1e642a5bd2eef6d367a92f168c0c654b9c73b6fde07754915c7e2e3d7635a4855280a731aec24e1ae67e480fd41788b6477e39a1a26d85f8b6908b76c3e57623db042c738b9f90671d4511b3497d0d9fe2d6a941ab18820e09468dd186ac6049233fbb7a6853912ee8aaa26c474ec78fc90bf49da259437297b630a3c66134f829a233733b9e5ae8a7cd06eae34f85776d68c8dd457f895d81c909c8c83ae58a91eb94571d1e625d4631384ad9dac47172a2f0e643f69c84e472f3ea3a0879618374c0937f9965b2eaa033c56484d2b1a3e798ba4ecd58fe62d86d8cc5614274c13c45729fdceff9bfcb86a78a4a2099f4747630cc9b82efdfa8bc1b8a86bd8a10b883f1fd0ee77816ba161f1f91fefd25c1a5add70ed92a6e7418215645c4437887dcde8b2d20cf0ce9ba4d251e1c5709787df62b0c6f5b6f30a8005aac1bed5c0d14fe399210324c17c86e7e2a68e993830258be70fa8f1afcbc591e3855d9b9501b929f0f3f599cb91f4eb4ada021256b6aefa339ff7419a81702406855eb2783c93d55ad9414f8bea3fd21352daaf2b464dc058a0d2c6daac80790646a0052234510e9c51a9d5ac7d52fb4debcb7a1fc3eda0c698a3034f8394755a3ee9e963b225ed1cf2cd6eb795d44a13a54f753bcbc8c35cb9e25d160508b986678cf09adbb8ffc4d7284ea0c750e9d7e80729ed9dc0141dd20593d6cbcfc370966225681b8e2b1062b26e1e994f7ac804a8d63f4f07392cbb16040ec695a52ea372f8236ce096f36af5", @typed={0x8, 0xed, 0x0, 0x0, @uid=r9}]}]}, 0x23bc}, 0x1, 0x0, 0x0, 0x8011}, 0x80) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000002700)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0xcdbf, 0xb58, 0x400, 0xbc2, 0x10, r8}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x165808, 0x0) 1m41.447557024s ago: executing program 4 (id=628): unshare(0x24020400) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001700)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe78190a0015c00200142603600e120800110024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900d1001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x2d, &(0x7f0000000000)=0xb1e0, 0x4) fcntl$setlease(r5, 0x400, 0x1) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r11) r12 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e24, 0x5, @remote, 0xcee}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r4, 0x1}, &(0x7f0000000140)=0x8) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000300)=@buf={0x6e, &(0x7f0000000280)="c0ff09079e496b80378df002083d91bf885fa4a4881650927fac031904f58a48194f8685f70d2cc09babfc67d742a65d095ee098c238e3861f0e1511ee2189fdd06f8ab04efeb9977539d4a4220b3ff197b8ddd24c4526fae5819644c3483d1188f5ec9654dae55429c2f28be685"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r7}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000020c4"], 0x24, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000100)={@empty, @local, r8}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBLED(r11, 0x4b64, &(0x7f0000000000)) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) 1m39.415859833s ago: executing program 4 (id=639): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x10200, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r1 = socket(0x80000000000000a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) 1m39.415587763s ago: executing program 35 (id=639): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x10200, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r1 = socket(0x80000000000000a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) 1m16.086229236s ago: executing program 5 (id=913): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) r1 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3a40, 0x4, 0x1000004, 0xa0, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) r2 = io_uring_setup(0x2c71, &(0x7f0000000200)={0x0, 0x2542, 0x10000, 0x0, 0x7f}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000070000001400078008001140000000000800124000000c8f0500010006000000050005000200000014000780050007006700000005001400010000000900020073797a310000000011000300686173683a69702c6dab496b00000000"], 0x6c}}, 0x2000c000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x10810, r0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x20000000000000f6, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, 0x0, 0x0) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$nl_route_sched(r5, 0x0, 0x40d0) ptrace(0x10, r4) 1m15.902422071s ago: executing program 5 (id=917): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000b80)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @remote, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002301000034c8ffff01000000080001007b"], 0x1c}}, 0x0) 1m15.458717778s ago: executing program 5 (id=923): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1m15.437508264s ago: executing program 5 (id=924): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x24) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) setresuid(0xee01, r0, r0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x2209d, 0x3, 0x0, 0xfffffffc}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r4, r4) mount$nfs(&(0x7f0000000200)='\x00', &(0x7f0000000380)='./file1\x00', &(0x7f0000000480), 0x2010811, &(0x7f0000001c80)=ANY=[@ANYBLOB="24212c2d232f5e282121402daf287a2c6d61736b2c666f776e65722c2c61707072616973655f747970653d696d617369672c002c66736e616d653d25ce2c6f626a5f726f6c653d232d29212c657569643d", @ANYRESDEC=r2, @ANYBLOB="2c657569643e06040fc5315c4b74f6575b09fff8dd0f3005870fe80fa8eff764b278bdfe7acde235db6674503ceb54cdcf8d1224c6a75328c544a0cd6c5b340bc7c16b64a02541e8d756b2965fa1a8ce6cc68538c6a86ad57e43180bf2ab2c11fbb20e7e96a1ada41162b377ff60babe90f8497d43e18160574343f113f051943f239ed444254a4d24", @ANYRESDEC=r4, @ANYBLOB=',smackfsfloor={*,\x00']) syz_emit_ethernet(0x6a6, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0) write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000023000000", 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[], [{@appraise_type}, {@fowner_eq={'fowner', 0x3d, r0}}, {@appraise}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@subj_user={'subj_user', 0x3d, '{*'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@uid_lt={'uid<', r1}}]}, 0x7, 0x56e, &(0x7f0000001600)="$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") r5 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r6, r6, 0x0, 0x400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30008c6, &(0x7f0000000080), 0x1, 0x59c, &(0x7f0000000780)="$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") lseek(r5, 0x8, 0x3) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x64000080) r9 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0x8004587d, &(0x7f00000001c0)={@desc={0x1, 0x0, @auto="3d46d80f7e2ba80c"}}) 1m13.507702172s ago: executing program 5 (id=933): bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1m13.091957574s ago: executing program 5 (id=938): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x4c, r1, 0x1, 0x70bd2d, 0x4f, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '\'+\'\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) 1m13.045189695s ago: executing program 36 (id=938): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x4c, r1, 0x1, 0x70bd2d, 0x4f, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '\'+\'\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) 12.722827958s ago: executing program 7 (id=1425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x89, 0x4, 0x0, @private=0xa010100, @local}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000454e16bc953fdfae0000100000000025287849f4df4e14deaad0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000090000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000000000000000000000000000000b4360000"], 0x48) creat(0x0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000180), 0x0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000480)={{0x0, 0x1, 0x4, 0x1, 0x8}}) 10.174667859s ago: executing program 9 (id=1449): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000008c0)={0x15b42180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468", @ANYRESDEC=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='-\xc4\x00', 0x100, &(0x7f00000000c0)={@align=0xb, {0x1, 0x3, 0x1, 0xfea}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x6}) openat$cgroup_freezer_state(r4, &(0x7f00000001c0), 0x2, 0x0) 10.107018017s ago: executing program 7 (id=1450): perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x5, 0x8, 0x9b9b, 0x6fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = io_uring_setup(0x4806, &(0x7f0000000000)={0x0, 0xec9b, 0x800, 0x2, 0x8375}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000080)={0x253, 0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000340)=""/215, 0xd4}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000100)=""/24, 0x18}], &(0x7f0000000280)=[0x0, 0x200000000, 0x9], 0x3}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x36}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x3, 0x2, 0x1, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 10.028349542s ago: executing program 7 (id=1451): syz_clone(0x211, 0x0, 0x49, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r4, &(0x7f00000002c0), 0x0}, 0x20) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="0d00bd0000c0", 0xfffffffffffffffd, 0x2, 0x10030, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 10.027226052s ago: executing program 9 (id=1452): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000080001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) 9.870331813s ago: executing program 9 (id=1454): socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x2c, 0x0, 0x80, 0x1, 0x0, 0x17, 0x64}]}}}}}}}, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) setsockopt(r1, 0x1, 0x7, &(0x7f00000000c0)="660001ff", 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0xfffffffc}}, 0x2e) unshare(0x600) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x5b2, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xea1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = syz_io_uring_setup(0x540b, &(0x7f0000000200)={0x0, 0x0, 0x1800, 0x0, 0x2e4}, &(0x7f0000000140), &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x1c3, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) flistxattr(r4, 0x0, 0x0) 9.6961958s ago: executing program 7 (id=1456): r0 = openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2) close(r0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8040) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 9.568098866s ago: executing program 7 (id=1458): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000480)={0x102100100, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0xa}, &(0x7f0000000380)=""/254, 0xfe, &(0x7f00000001c0)=""/120, &(0x7f0000000240)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) ptrace$setregset(0x4205, r1, 0x201, &(0x7f00000002c0)={&(0x7f0000000580)="a44fda504cefaa7e18b1dc58a81693022adbdf8b6294c8796513d365b1dce6635500bbb188a51f746eeb777b8bf47ab44a44471799966cb4a77ac61caf0a6e3edcea0f616968a0b6c7e31a908dda3fd00b5472dedef0ad6551259c9002f6ce0f77edbea2d05e38ac1840ea0dd189e194b78cafe2648b54a8d938900e6e2eda5f2dda94985c95af19929e", 0x8a}) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x503, &(0x7f0000000c00)="$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") listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x40000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r6, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB=',\x00']) creat(&(0x7f0000000080)='./bus\x00', 0x154) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 9.247865426s ago: executing program 9 (id=1464): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000100001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) 9.014583012s ago: executing program 9 (id=1469): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x0, 0x0, 0x0, 0xffffffff, 0x35, 0x0, 0x41001, 0x1c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) r1 = socket(0x2, 0x803, 0x2) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x2000000000000216, &(0x7f0000000540)=ANY=[@ANYRESDEC], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x6486}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) unshare(0x2e000200) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b00000000000000a9", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009580)=[{{0x0, 0x0, &(0x7f0000003180)}, 0xe868}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000003440)=[{&(0x7f0000003380)=""/52, 0x34}, {&(0x7f00000033c0)=""/87, 0x57}], 0x2, &(0x7f0000003480)=""/203, 0xcb}, 0x1008}, {{&(0x7f00000002c0)=@tipc=@id, 0x80, &(0x7f0000000580)=[{&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f0000000800)=""/67, 0x43}], 0x3}, 0x4000000}, {{&(0x7f0000004840)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000003600)=""/4096, 0x1000}, 0x100000c}, {{&(0x7f0000000880)=@nl=@proc, 0x80, &(0x7f0000008fc0), 0x0, &(0x7f0000009040)=""/6, 0x6}, 0xc53}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009180)=""/241, 0xf1}, 0x1}, {{&(0x7f0000009280)=@can, 0x80, &(0x7f0000009540)}, 0x5}], 0x7, 0x12163, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x9, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000400)="47940ba336d8d85b9718595f70b19768f44b506051e9013106a6717ed74e5aaf646c1ca43b0d7cc019993109d6db54f9082074b856f8ffe3e3a2d00402389b49fadbc2cb334a5a0f1b01fe336a5da329c035889a4582d8aacee4ad2c5ab2889bb1785618923c761de9e3c7b1690a3693d848cd9eb824b6c1056f4b8c21bb713b52055454ada71523ba21a253", 0x0}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000097c0), r1) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x40001) r6 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000d1) syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x7ad82179598b3c, 0x0) 8.852588842s ago: executing program 0 (id=1472): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x9}, 0x419, 0x40000000, 0x4000000, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 8.661889296s ago: executing program 8 (id=1473): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x9}, 0x419, 0x40000000, 0x4000000, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40895) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008800}, 0x80) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 8.635573081s ago: executing program 0 (id=1474): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) getpgrp(0x0) sendmsg$AUDIT_SET(r2, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) write$tun(r1, &(0x7f0000000740)=ANY=[], 0x2e) (async) write$tun(r1, &(0x7f0000000740)=ANY=[], 0x2e) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x4, &(0x7f0000fff000/0x1000)=nil, 0x3) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 8.387586884s ago: executing program 8 (id=1476): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x7, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r7, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) r10 = signalfd(r7, &(0x7f0000000100)={[0xcc7]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@delchain={0x34, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xc, 0x9}, {0x10, 0xfffb}, {0x4, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x34}}, 0x8000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x3, 0x80, 0x6, 0x14, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000440)=""/89, 0x59, 0x0, &(0x7f0000000740)=""/129, 0x81}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@ldst={0x2, 0x3, 0x3, 0x2, 0x6, 0xffffffffffffffd0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0x7, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x1000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x4a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0x5, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xce}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6b3}]}, &(0x7f0000000c00)='GPL\x00', 0xb169, 0x12, &(0x7f0000000200)=""/18, 0x0, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, 0x10, r13, 0x0, 0x2, &(0x7f0000000840)=[r9, r9], &(0x7f0000000880)=[{0x1, 0x5, 0xb, 0x1}, {0x1, 0x5, 0xf, 0x7}], 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x8084) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r14, 0xfffffffc) syz_io_uring_setup(0x4ed, &(0x7f0000000300)={0x0, 0xfec9, 0x0, 0xff7ffffc, 0x274}, &(0x7f00000001c0), &(0x7f0000000280)) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 8.084076187s ago: executing program 8 (id=1478): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120a, &(0x7f0000001280)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x7f3f, &(0x7f0000000240)={0x0, 0xadd7, 0x20, 0x2, 0x3e2, 0x0, r0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x32600) r1 = gettid() syz_open_procfs$pagemap(r1, &(0x7f0000000000)) 8.020539275s ago: executing program 0 (id=1479): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000200001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) 7.924466387s ago: executing program 8 (id=1480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0xd5f, 0x6, 0x3, 0x3, 0x0, 0x169, 0x40}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}}, 0x1c010) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000d042bbd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000c840000008001300", @ANYRES32=r1, @ANYBLOB="4a398a3f576471c81c58087af6ea5aa18fd28315894ccdac316020f8f08a090000000000000092e84152f77286fcdcee2ece9e5327e9b4d766849f380303b1085b0f3cd1688925cf0d12e7aee809aeed5ad6f0"], 0x28}}, 0x40048004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x6578, &(0x7f0000000000)=""/81) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) 7.923962757s ago: executing program 0 (id=1481): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000006680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000006680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) (async) 7.911725515s ago: executing program 8 (id=1482): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8010, &(0x7f00000000c0), 0xff, 0x57d, &(0x7f0000000100)="$eJzs3c+PG1cdAPDvzP5sknY30ANUQAIUAorizTptVPXScgGhqhKi4oA4pMuus1pixyH2lu4Sqdu/ASSQOMGfwAGJA1JPHLhxROIAiHJAKhCBEiQOg2b8Y70bb+LGXrtZfz7SZH68mfm+N96Z9/zs+AUwtc5HxF5EzEfEmxGx1N6etKd4tTXl+927e2f9/t0760lk2Rv/TIr0fFv0HJM73T7nYkR882sR300ejNvY2b2xVq1WbrfXV5q1WyuNnd1LW7W1zcpm5Wa5fHX16uWXrrxYHllZz9V++cFXt1771m9+/en3f7/35R/m2TrTTustxyi1ij7XjZObjYjXjiPYBMy05/MTzgePJ42Ij0XE54r7fylmir9OAOAky7KlyJZ61wGAky4t+sCStBQRadpuBJRafXjPxqm0Wm80L16vb9/caPWVLcdcen2rWrl8duGP3y92nkvy9dUirUgv1suH1q9ExNmI+PHCU8V6ab1e3ZhMkwcApt7p3vo/Iv6zkKal0kCH9vlUDwB4YixOOgMAwNip/wFg+qj/AWD6DFD/tz/s3zv2vAAA4+H9PwBMH/U/AEwf9T8ATJVvvP56PmX3279/vfHWzvaN+luXNiqNG6Xa9nppvX77VmmzXt8sfrOn9qjzVev1W6svxPbbK81Ko7nS2Nm9Vqtv32xeK37X+1plbiylAgAe5uy59/6QRMTey08VU/SM5aCuhpMtHeFewJNlZpiDNRDgiWa0L5heA1XhRSPhd8eeF2Ay+v6Y92LfxYN++iGC+J4RfKRc+OTg/f/GeIaTpduzvzDZfADj93j9/6+MPB/A+D12//+fR5sPYPyyLDk85v98NwkAOJGG+Apf9s6oGiHARD1qMO+RfP4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8yZiPheJGmpGAs8zf9NS6WIpyNiOeaS61vVyuWIeCbORcTcQr6+OulMAwBDSv+etMf/urD0/JnO1s54X/PJfxeKeUT84Gdv/OTttWbz9mq+/V/d7Qud4cPK+2cdYlxBAGBwfx1kp6L+LrfnPW/k7929s96ZjjGPD/jgK93BR9fv371TTK2U2ciyLMtbInlb4tS/k5htH5O3TZ6LiJkRxN97NyI+0a/8SdE3stxuCfXGj3bsp8caPz0QPy3SWvP88n18BHmBafNe/vx59fD9N1PcWeeLPfrf/4vFE2p4xfNvMaLz7Nt//nXu98UiN4fj5/f8+UFjvPDbrz+wMVtqpb0b8dxsv/hJN35yRPznB4z/p0995kevHJGW/TziQvSP3xtrpVm7tdLY2b20VVvbrGxWbpbLV1evXn7pyovllaKPeqXTU/2gf7x88Zmj8paX/9TB+MudqK1X/vSh8s93j/3CgOX/xf/e/M5n91cXDsf/0uf7v/7PFvP+1z+vE784YPy1U786cvjuPP7GEdf/Ua//xQHjv/+33Y0BdwUAxqCxs3tjrVqt3B5qIX8X+uGPyrLsnTwPD9knTx7shJ3m4nDF+UsUC/uXJYkkhr8+BxfyxtggO88NXZwDC53uklEXp8/CbLetONozf/vhfy1HLcwPEzQdeSkeZyGW2wv3xhV0Io8jYIz2b/pJ5wQAAAAAAAAAAAAAADjKOP4P06TLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMn1/wAAAP//+iO96Q==") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x11, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="30000000210a010800000000000000000a0400010900020073797a31000000000900010073797a3100000000040003"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="01", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)="f0", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r3, 0x0, 0x20}, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000880)=0x60, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="18f000000000fdd30000000000000000851000001e80b059602890ade10000809500007b000000009500000000000000deddd65cc41f40"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) rename(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 7.866047927s ago: executing program 0 (id=1483): socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x2c, 0x0, 0x80, 0x1, 0x0, 0x17, 0x64}]}}}}}}}, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) setsockopt(r1, 0x1, 0x7, &(0x7f00000000c0)="660001ff", 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0xfffffffc}}, 0x2e) unshare(0x600) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x5b2, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xea1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = syz_io_uring_setup(0x540b, &(0x7f0000000200)={0x0, 0x0, 0x1800, 0x0, 0x2e4}, &(0x7f0000000140), &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x1c3, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) flistxattr(r4, 0x0, 0x0) 7.736768062s ago: executing program 9 (id=1484): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x9}, 0x419, 0x40000000, 0x4000000, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 7.736287002s ago: executing program 7 (id=1485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000002100), r2) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7002ffdbdf250fd8000008000100cb"], 0x34}}, 0x4020084) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10, 0x1a2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) unshare(0x22020600) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xb055a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xffff, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7.419019083s ago: executing program 0 (id=1486): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_clone3(&(0x7f0000000300)={0x100010400, &(0x7f0000000040), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x27}, &(0x7f00000001c0)=""/45, 0x2d, &(0x7f00000003c0)=""/199, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x7, &(0x7f0000000000)={0x0, 0x2d, 0xcbbc48433744eb72}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 7.211705904s ago: executing program 8 (id=1487): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x9}, 0x419, 0x40000000, 0x4000000, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40895) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 5.401807444s ago: executing program 6 (id=1493): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619) 5.236091563s ago: executing program 6 (id=1494): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x240024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40}) io_uring_enter(r3, 0x628, 0xc88d, 0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/156, 0x9c) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) 5.017546882s ago: executing program 6 (id=1495): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @local, 0x3}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @local, 0x3}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000000906012000120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x30008003}, 0x4000050) setsockopt(r1, 0x0, 0x40007f, &(0x7f0000000040)="020000000d80ffff", 0x8) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x86, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9f0602001800000000000000100000001000000000000000000000000000000100"/42], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000009fdffc500000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) (async) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0086dd0180c2000002cf3f53f449aa86dd69ee0520000032fffc020000000000000000d1c1e4750001ff020000000000000000000000000001"], 0x3a) process_madvise(r3, 0x0, 0x0, 0x19, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x1bc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1ff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e9}, {0x6, 0x16, 0x81}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc17}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x1bc}}, 0x4000040) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x1bc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1ff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7e9}, {0x6, 0x16, 0x81}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc17}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x1bc}}, 0x4000040) gettid() (async) r8 = gettid() process_vm_writev(r8, &(0x7f0000000340)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000500)=""/246, 0xfffffffffffffe79}], 0x1, 0x0) (async) process_vm_writev(r8, &(0x7f0000000340)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000500)=""/246, 0xfffffffffffffe79}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000004, 0x200000005c831, 0xffffffffffffffff, 0x9089d000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7d, &(0x7f0000000100)={r10, 0x400}, &(0x7f0000000140)=0x8) 4.995162108s ago: executing program 6 (id=1496): r0 = creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES64=r1, @ANYRES32=0x0, @ANYRESDEC], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r8, 0x40601) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) r9 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xd, 0x783, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x2, @perf_bp={0x0, 0x8}, 0x22, 0xff, 0x1000, 0x3, 0x1, 0x80000011, 0x1, 0x0, 0xd, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0xd912dbfad8e30d0c) 211.738961ms ago: executing program 6 (id=1497): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8010, &(0x7f00000000c0), 0xff, 0x57d, &(0x7f0000000100)="$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") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x11, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="30000000210a010800000000000000000a0400010900020073797a31000000000900010073797a3100000000040003"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="01", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)="f0", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r3, 0x0, 0x20}, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000880)=0x60, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="18f000000000fdd30000000000000000851000001e80b059602890ade10000809500007b000000009500000000000000deddd65cc41f40"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) rename(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 0s ago: executing program 6 (id=1498): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = msgget$private(0x0, 0x3ac) msgrcv(r6, &(0x7f00000000c0)={0x0, ""/252}, 0x104, 0xced6b2bc496a26e6, 0x0) msgsnd(r6, &(0x7f00000010c0)={0x2}, 0x8, 0x0) kernel console output (not intermixed with test programs): 719935][ T6473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.766600][ T8292] loop8: detected capacity change from 0 to 512 [ 155.981130][ T8295] netlink: 'syz.9.1046': attribute type 1 has an invalid length. [ 155.992301][ T8295] loop9: detected capacity change from 0 to 164 [ 156.168887][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1046'. [ 156.233363][ T8307] team0: Device gtp0 is of different type [ 156.376640][ T8374] SELinux: failed to load policy [ 156.413199][ T8376] loop7: detected capacity change from 0 to 512 [ 156.511945][ T8376] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.562962][ T8376] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.599700][ T8376] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1055: corrupted inode contents [ 156.632764][ T8376] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.1055: mark_inode_dirty error [ 156.660360][ T8376] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1055: corrupted inode contents [ 156.692899][ T8376] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1055: mark_inode_dirty error [ 156.714640][ T8388] netlink: 'syz.6.1057': attribute type 1 has an invalid length. [ 156.735549][ T8386] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.1055: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 156.735549][ T8386] [ 156.779806][ T28] kauditd_printk_skb: 164 callbacks suppressed [ 156.779822][ T28] audit: type=1400 audit(1772930827.638:2454): avc: denied { ioctl } for pid=8393 comm="syz.9.1060" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23748 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 156.786637][ T8392] FAULT_INJECTION: forcing a failure. [ 156.786637][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 156.824998][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.8.1059 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.825063][ T8392] Tainted: [W]=WARN [ 156.825069][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.825080][ T8392] Call Trace: [ 156.825086][ T8392] [ 156.825129][ T8392] __dump_stack+0x1d/0x30 [ 156.825195][ T28] audit: type=1400 audit(1772930827.638:2455): avc: denied { write } for pid=8393 comm="syz.9.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 156.825222][ T8392] dump_stack_lvl+0x95/0xd0 [ 156.825260][ T8392] dump_stack+0x15/0x1b [ 156.825281][ T8392] should_fail_ex+0x263/0x280 [ 156.825352][ T8392] should_failslab+0x8c/0xb0 [ 156.825373][ T8392] kmem_cache_alloc_noprof+0x66/0x400 [ 156.825439][ T8392] ? do_getname+0x2e/0x1c0 [ 156.825462][ T8392] do_getname+0x2e/0x1c0 [ 156.825525][ T8392] user_path_at+0x28/0x100 [ 156.825552][ T8392] __se_sys_mount+0x25b/0x2e0 [ 156.825597][ T8392] ? fput+0x8f/0xc0 [ 156.825621][ T8392] __x64_sys_mount+0x67/0x80 [ 156.825696][ T8392] x64_sys_call+0x2d61/0x3020 [ 156.825724][ T8392] do_syscall_64+0x12c/0x370 [ 156.825752][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.825774][ T8392] RIP: 0033:0x7f588103c799 [ 156.825792][ T8392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.825809][ T8392] RSP: 002b:00007f587fa97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.825909][ T8392] RAX: ffffffffffffffda RBX: 00007f58812b5fa0 RCX: 00007f588103c799 [ 156.826001][ T8392] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 156.826012][ T8392] RBP: 00007f587fa97090 R08: 0000200000000300 R09: 0000000000000000 [ 156.826026][ T8392] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000001 [ 156.826037][ T8392] R13: 00007f58812b6038 R14: 00007f58812b5fa0 R15: 00007fffc953ca48 [ 156.826083][ T8392] [ 157.060654][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.069983][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1062'. [ 157.263205][ T8406] netlink: 'syz.0.1065': attribute type 10 has an invalid length. [ 157.273939][ T8406] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1065'. [ 157.286494][ T8409] loop9: detected capacity change from 0 to 512 [ 157.294023][ T8406] bond0: entered promiscuous mode [ 157.299750][ T8406] bond_slave_0: entered promiscuous mode [ 157.308101][ T8409] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.323437][ T8406] bond_slave_1: entered promiscuous mode [ 157.332106][ T8409] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 157.344497][ T8406] bridge0: port 3(bond0) entered blocking state [ 157.351686][ T8406] bridge0: port 3(bond0) entered disabled state [ 157.358760][ T8406] bond0: entered allmulticast mode [ 157.364741][ T8406] bond_slave_0: entered allmulticast mode [ 157.371006][ T8406] bond_slave_1: entered allmulticast mode [ 157.400273][ T8410] ext4: Unknown parameter 'nouser_xattr' [ 157.412950][ T8409] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 157.432034][ T8409] System zones: 0-2, 18-18, 34-35 [ 157.442875][ T8414] FAULT_INJECTION: forcing a failure. [ 157.442875][ T8414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.472432][ T8409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 157.500870][ T8414] CPU: 0 UID: 0 PID: 8414 Comm: syz.7.1066 Tainted: G W syzkaller #0 PREEMPT(full) [ 157.500907][ T8414] Tainted: [W]=WARN [ 157.500915][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.500928][ T8414] Call Trace: [ 157.500935][ T8414] [ 157.500941][ T8414] __dump_stack+0x1d/0x30 [ 157.501022][ T8414] dump_stack_lvl+0x95/0xd0 [ 157.501043][ T8414] dump_stack+0x15/0x1b [ 157.501061][ T8414] should_fail_ex+0x263/0x280 [ 157.501082][ T8414] should_fail+0xb/0x20 [ 157.501170][ T8414] should_fail_usercopy+0x1a/0x20 [ 157.501215][ T8414] _copy_to_user+0x20/0xa0 [ 157.501260][ T8414] simple_read_from_buffer+0xb5/0x130 [ 157.501286][ T8414] proc_fail_nth_read+0x10e/0x150 [ 157.501332][ T8414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.501371][ T8414] vfs_read+0x1ab/0x7f0 [ 157.501403][ T8414] ? __rcu_read_unlock+0x4e/0x70 [ 157.501424][ T8414] ? __fget_files+0x184/0x1c0 [ 157.501488][ T8414] ? mutex_lock+0x57/0x90 [ 157.501515][ T8414] ksys_read+0xdc/0x1a0 [ 157.501548][ T8414] __x64_sys_read+0x40/0x50 [ 157.501607][ T8414] x64_sys_call+0x2886/0x3020 [ 157.501629][ T8414] do_syscall_64+0x12c/0x370 [ 157.501647][ T8414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.501666][ T8414] RIP: 0033:0x7fb8cc79cfce [ 157.501680][ T8414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.501721][ T8414] RSP: 002b:00007fb8cb236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.501742][ T8414] RAX: ffffffffffffffda RBX: 00007fb8cb2376c0 RCX: 00007fb8cc79cfce [ 157.501755][ T8414] RDX: 000000000000000f RSI: 00007fb8cb2370a0 RDI: 0000000000000004 [ 157.501766][ T8414] RBP: 00007fb8cb237090 R08: 0000000000000000 R09: 0000000000000000 [ 157.501779][ T8414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.501793][ T8414] R13: 00007fb8cca56038 R14: 00007fb8cca55fa0 R15: 00007fff45ad3e28 [ 157.501863][ T8414] [ 157.784402][ T7717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.980566][ T28] audit: type=1400 audit(1772930828.828:2456): avc: denied { create } for pid=8425 comm="syz.7.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 158.447624][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1072'. [ 158.499496][ T8435] netlink: 'syz.9.1072': attribute type 13 has an invalid length. [ 158.527668][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1072'. [ 158.543229][ T8436] set_capacity_and_notify: 1 callbacks suppressed [ 158.543247][ T8436] loop0: detected capacity change from 0 to 128 [ 158.591370][ T4484] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.606698][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1072'. [ 158.630839][ T8439] FAULT_INJECTION: forcing a failure. [ 158.630839][ T8439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.655599][ T8436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 158.663703][ T8440] loop7: detected capacity change from 0 to 512 [ 158.663925][ T4484] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.694713][ T8435] netlink: 'syz.9.1072': attribute type 13 has an invalid length. [ 158.709997][ T3970] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.710671][ T8440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.723841][ T8436] System zones: [ 158.740064][ T8440] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.740417][ T3970] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.770522][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1072'. [ 158.784679][ T8440] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1073: corrupted inode contents [ 158.800131][ T8439] CPU: 0 UID: 0 PID: 8439 Comm: syz.8.1074 Tainted: G W syzkaller #0 PREEMPT(full) [ 158.800221][ T8439] Tainted: [W]=WARN [ 158.800227][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.800239][ T8439] Call Trace: [ 158.800246][ T8439] [ 158.800253][ T8439] __dump_stack+0x1d/0x30 [ 158.800280][ T8439] dump_stack_lvl+0x95/0xd0 [ 158.800302][ T8439] dump_stack+0x15/0x1b [ 158.800330][ T8439] should_fail_ex+0x263/0x280 [ 158.800370][ T8439] should_fail+0xb/0x20 [ 158.800391][ T8439] should_fail_usercopy+0x1a/0x20 [ 158.800416][ T8439] strncpy_from_user+0x27/0x250 [ 158.800515][ T8439] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 158.800581][ T8439] do_getname+0x59/0x1c0 [ 158.800654][ T8439] user_path_at+0x28/0x100 [ 158.800682][ T8439] __se_sys_mount+0x25b/0x2e0 [ 158.800704][ T8439] ? fput+0x8f/0xc0 [ 158.800791][ T8439] __x64_sys_mount+0x67/0x80 [ 158.800813][ T8439] x64_sys_call+0x2d61/0x3020 [ 158.800840][ T8439] do_syscall_64+0x12c/0x370 [ 158.800862][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.800914][ T8439] RIP: 0033:0x7f588103c799 [ 158.800935][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.800953][ T8439] RSP: 002b:00007f587fa97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.800973][ T8439] RAX: ffffffffffffffda RBX: 00007f58812b5fa0 RCX: 00007f588103c799 [ 158.801002][ T8439] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 158.801017][ T8439] RBP: 00007f587fa97090 R08: 0000200000000300 R09: 0000000000000000 [ 158.801031][ T8439] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000001 [ 158.801045][ T8439] R13: 00007f58812b6038 R14: 00007f58812b5fa0 R15: 00007fffc953ca48 [ 158.801063][ T8439] [ 158.996026][ T8436] 1-3, 19-19, 35-36 [ 159.000473][ T8436] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 159.020342][ T8440] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.1073: mark_inode_dirty error [ 159.155107][ T8449] netlink: 'syz.6.1075': attribute type 3 has an invalid length. [ 159.166782][ T8449] netlink: 'syz.6.1075': attribute type 1 has an invalid length. [ 159.175352][ T8449] netlink: 191376 bytes leftover after parsing attributes in process `syz.6.1075'. [ 159.195163][ T8440] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1073: corrupted inode contents [ 159.207342][ T8440] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1073: mark_inode_dirty error [ 159.219542][ T8436] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.254822][ T8446] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.1073: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 159.254822][ T8446] [ 159.304592][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.341049][ T8410] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1803188595 (only 1 groups) [ 159.370928][ T8463] ipip0: entered promiscuous mode [ 159.389102][ T8463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8463 comm=syz.7.1081 [ 159.401933][ T8463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8463 comm=syz.7.1081 [ 159.417604][ T8463] loop7: detected capacity change from 0 to 512 [ 159.437609][ T8463] EXT4-fs: dax option not supported [ 159.480186][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1080'. [ 159.529598][ T8470] loop7: detected capacity change from 0 to 8192 [ 159.537550][ T8471] netlink: 'syz.6.1080': attribute type 30 has an invalid length. [ 159.546119][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1080'. [ 160.072817][ T8470] loop7: p1 p3 p4 [ 160.076671][ T8470] loop7: p1 start 16777216 is beyond EOD, truncated [ 160.084171][ T8470] loop7: p4 start 16777223 is beyond EOD, truncated [ 160.143480][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 160.329852][ T8482] netlink: 'syz.7.1085': attribute type 21 has an invalid length. [ 160.337778][ T8482] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1085'. [ 160.376966][ T8486] netlink: 116376 bytes leftover after parsing attributes in process `syz.9.1086'. [ 160.386703][ T8486] netlink: zone id is out of range [ 160.575720][ T8490] FAULT_INJECTION: forcing a failure. [ 160.575720][ T8490] name failslab, interval 1, probability 0, space 0, times 0 [ 160.656563][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.8.1087 Tainted: G W syzkaller #0 PREEMPT(full) [ 160.656593][ T8490] Tainted: [W]=WARN [ 160.656601][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.656614][ T8490] Call Trace: [ 160.656622][ T8490] [ 160.656637][ T8490] __dump_stack+0x1d/0x30 [ 160.656666][ T8490] dump_stack_lvl+0x95/0xd0 [ 160.656765][ T8490] dump_stack+0x15/0x1b [ 160.656787][ T8490] should_fail_ex+0x263/0x280 [ 160.656813][ T8490] ? alloc_fs_context+0x46/0x580 [ 160.656834][ T8490] should_failslab+0x8c/0xb0 [ 160.656877][ T8490] __kmalloc_cache_noprof+0x5f/0x410 [ 160.656900][ T8490] alloc_fs_context+0x46/0x580 [ 160.656925][ T8490] fs_context_for_mount+0x22/0x30 [ 160.657019][ T8490] do_new_mount+0xe7/0x8d0 [ 160.657036][ T8490] ? security_capable+0x7b/0x90 [ 160.657063][ T8490] path_mount+0x4d0/0xbc0 [ 160.657170][ T8490] __se_sys_mount+0x28c/0x2e0 [ 160.657316][ T8490] ? fput+0x8f/0xc0 [ 160.657338][ T8490] __x64_sys_mount+0x67/0x80 [ 160.657357][ T8490] x64_sys_call+0x2d61/0x3020 [ 160.657392][ T8490] do_syscall_64+0x12c/0x370 [ 160.657411][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.657438][ T8490] RIP: 0033:0x7f588103c799 [ 160.657455][ T8490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.657545][ T8490] RSP: 002b:00007f587fa97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.657563][ T8490] RAX: ffffffffffffffda RBX: 00007f58812b5fa0 RCX: 00007f588103c799 [ 160.657579][ T8490] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 160.657666][ T8490] RBP: 00007f587fa97090 R08: 0000200000000300 R09: 0000000000000000 [ 160.657678][ T8490] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000001 [ 160.657692][ T8490] R13: 00007f58812b6038 R14: 00007f58812b5fa0 R15: 00007fffc953ca48 [ 160.657713][ T8490] [ 160.877116][ T8492] loop6: detected capacity change from 0 to 512 [ 160.933216][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.005722][ T8492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.010047][ T8498] bond1: option packets_per_slave: invalid value (65537) [ 161.025567][ T8498] bond1: option packets_per_slave: allowed values 0 - 65535 [ 161.032852][ T8492] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.044365][ T8492] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.1088: corrupted inode contents [ 161.058030][ T8498] bond1 (unregistering): Released all slaves [ 161.060322][ T8504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=8504 comm=syz.8.1091 [ 161.081054][ T8492] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.1088: mark_inode_dirty error [ 161.092871][ T8492] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.1088: corrupted inode contents [ 161.109373][ T8506] loop0: detected capacity change from 0 to 1024 [ 161.115975][ T8492] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1088: mark_inode_dirty error [ 161.167347][ T8505] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.1088: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 161.167347][ T8505] [ 161.172338][ T8506] EXT4-fs: dax option not supported [ 161.199529][ T8499] program syz.0.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.209017][ T8496] program syz.0.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.240120][ T28] audit: type=1400 audit(1772930832.098:2457): avc: denied { map } for pid=8495 comm="syz.0.1090" path="socket:[23487]" dev="sockfs" ino=23487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 161.272122][ T28] audit: type=1400 audit(1772930832.098:2458): avc: denied { read accept } for pid=8495 comm="syz.0.1090" path="socket:[23487]" dev="sockfs" ino=23487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 161.320775][ T8513] loop7: detected capacity change from 0 to 512 [ 161.337216][ T8513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.361086][ T8513] EXT4-fs (loop7): orphan cleanup on readonly fs [ 161.367889][ T8513] Quota error (device loop7): v2_read_file_info: Number of blocks too big for quota file size (1579008 > 6144). [ 161.391181][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.400777][ T8513] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.416548][ T8513] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 161.453101][ T8513] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1094: couldn't read orphan inode 26 (err -116) [ 161.467720][ T8513] loop7: lost filesystem error report for type 5 error -116 [ 161.469938][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 161.483702][ C1] EXT4-fs (loop7): initial error at time 1772930832: ext4_orphan_get:1396 [ 161.483834][ T8519] loop9: detected capacity change from 0 to 2048 [ 161.492228][ C1] EXT4-fs (loop7): last error at time 1772930832: ext4_orphan_get:1396 [ 161.507975][ T8513] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.570811][ T3299] Alternate GPT is invalid, using primary GPT. [ 161.577267][ T3299] loop9: p2 p3 p7 [ 161.592106][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.610837][ T8519] Alternate GPT is invalid, using primary GPT. [ 161.623565][ T8530] FAULT_INJECTION: forcing a failure. [ 161.623565][ T8530] name failslab, interval 1, probability 0, space 0, times 0 [ 161.636381][ T8530] CPU: 0 UID: 0 PID: 8530 Comm: syz.0.1100 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.636411][ T8530] Tainted: [W]=WARN [ 161.636498][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.636509][ T8530] Call Trace: [ 161.636515][ T8530] [ 161.636523][ T8530] __dump_stack+0x1d/0x30 [ 161.636545][ T8530] dump_stack_lvl+0x95/0xd0 [ 161.636643][ T8530] dump_stack+0x15/0x1b [ 161.636662][ T8530] should_fail_ex+0x263/0x280 [ 161.636681][ T8530] ? v9fs_init_fs_context+0x34/0x220 [ 161.636709][ T8530] should_failslab+0x8c/0xb0 [ 161.636741][ T8530] __kmalloc_cache_noprof+0x5f/0x410 [ 161.636764][ T8530] ? alloc_fs_context+0x46/0x580 [ 161.636827][ T8530] v9fs_init_fs_context+0x34/0x220 [ 161.636898][ T8530] alloc_fs_context+0x4a6/0x580 [ 161.636943][ T8530] fs_context_for_mount+0x22/0x30 [ 161.636968][ T8530] do_new_mount+0xe7/0x8d0 [ 161.636990][ T8530] ? security_capable+0x7b/0x90 [ 161.637063][ T8530] path_mount+0x4d0/0xbc0 [ 161.637081][ T8530] __se_sys_mount+0x28c/0x2e0 [ 161.637100][ T8530] ? fput+0x8f/0xc0 [ 161.637121][ T8530] __x64_sys_mount+0x67/0x80 [ 161.637141][ T8530] x64_sys_call+0x2d61/0x3020 [ 161.637242][ T8530] do_syscall_64+0x12c/0x370 [ 161.637290][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.637312][ T8530] RIP: 0033:0x7f31f9b7c799 [ 161.637330][ T8530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.637345][ T8530] RSP: 002b:00007f31f85cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.637372][ T8530] RAX: ffffffffffffffda RBX: 00007f31f9df5fa0 RCX: 00007f31f9b7c799 [ 161.637386][ T8530] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 161.637398][ T8530] RBP: 00007f31f85cf090 R08: 0000200000000300 R09: 0000000000000000 [ 161.637410][ T8530] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 161.637460][ T8530] R13: 00007f31f9df6038 R14: 00007f31f9df5fa0 R15: 00007ffe8a06b828 [ 161.637478][ T8530] [ 161.641873][ T8519] loop9: p2 p3 p7 [ 161.867055][ T8537] loop8: detected capacity change from 0 to 128 [ 161.919979][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1102'. [ 162.002034][ T8548] netlink: 'syz.0.1103': attribute type 21 has an invalid length. [ 162.042707][ T8554] loop7: detected capacity change from 0 to 512 [ 162.149881][ T8554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.172113][ T8554] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.201499][ T8554] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1106: corrupted inode contents [ 162.213655][ T8554] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.1106: mark_inode_dirty error [ 162.228846][ T8554] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1106: corrupted inode contents [ 162.243816][ T8554] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1106: mark_inode_dirty error [ 162.256570][ T8560] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.1106: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 162.256570][ T8560] [ 162.266851][ T8559] lo speed is unknown, defaulting to 1000 [ 162.293825][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.312418][ T8559] lo speed is unknown, defaulting to 1000 [ 162.357250][ T28] audit: type=1400 audit(1772930833.218:2459): avc: denied { accept } for pid=8565 comm="syz.7.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 162.392861][ T28] audit: type=1400 audit(1772930833.258:2460): avc: denied { bind } for pid=8569 comm="syz.7.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.429491][ T8581] FAULT_INJECTION: forcing a failure. [ 162.429491][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 162.442210][ T8581] CPU: 1 UID: 0 PID: 8581 Comm: syz.7.1112 Tainted: G W syzkaller #0 PREEMPT(full) [ 162.442306][ T8581] Tainted: [W]=WARN [ 162.442310][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.442317][ T8581] Call Trace: [ 162.442321][ T8581] [ 162.442326][ T8581] __dump_stack+0x1d/0x30 [ 162.442379][ T8581] dump_stack_lvl+0x95/0xd0 [ 162.442393][ T8581] dump_stack+0x15/0x1b [ 162.442439][ T8581] should_fail_ex+0x263/0x280 [ 162.442453][ T8581] should_failslab+0x8c/0xb0 [ 162.442546][ T8581] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 162.442562][ T8581] ? v9fs_init_fs_context+0x84/0x220 [ 162.442578][ T8581] ? should_failslab+0x8c/0xb0 [ 162.442596][ T8581] kstrdup+0x3e/0xd0 [ 162.442606][ T8581] v9fs_init_fs_context+0x84/0x220 [ 162.442712][ T8581] alloc_fs_context+0x4a6/0x580 [ 162.442727][ T8581] fs_context_for_mount+0x22/0x30 [ 162.442745][ T8581] do_new_mount+0xe7/0x8d0 [ 162.442767][ T8581] ? security_capable+0x7b/0x90 [ 162.442782][ T8581] path_mount+0x4d0/0xbc0 [ 162.442794][ T8581] __se_sys_mount+0x28c/0x2e0 [ 162.442830][ T8581] ? fput+0x8f/0xc0 [ 162.442845][ T8581] __x64_sys_mount+0x67/0x80 [ 162.442858][ T8581] x64_sys_call+0x2d61/0x3020 [ 162.442873][ T8581] do_syscall_64+0x12c/0x370 [ 162.442928][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.442941][ T8581] RIP: 0033:0x7fb8cc7dc799 [ 162.442955][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.443037][ T8581] RSP: 002b:00007fb8cb237028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.443114][ T8581] RAX: ffffffffffffffda RBX: 00007fb8cca55fa0 RCX: 00007fb8cc7dc799 [ 162.443122][ T8581] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 162.443130][ T8581] RBP: 00007fb8cb237090 R08: 0000200000000300 R09: 0000000000000000 [ 162.443138][ T8581] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 162.443145][ T8581] R13: 00007fb8cca56038 R14: 00007fb8cca55fa0 R15: 00007fff45ad3e28 [ 162.443156][ T8581] [ 162.693962][ T8583] ip6t_srh: unknown srh match flags 4000 [ 162.816817][ T28] audit: type=1400 audit(1772930833.678:2461): avc: denied { getopt } for pid=8599 comm="syz.9.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.867908][ T8590] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 162.876766][ T8590] System zones: 0-1, 3-36 [ 162.899102][ T8590] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1115: bad orphan inode 134217728 [ 162.921263][ T8610] FAULT_INJECTION: forcing a failure. [ 162.921263][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 162.934186][ T8610] CPU: 0 UID: 0 PID: 8610 Comm: syz.0.1123 Tainted: G W syzkaller #0 PREEMPT(full) [ 162.934216][ T8610] Tainted: [W]=WARN [ 162.934221][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.934233][ T8610] Call Trace: [ 162.934261][ T8610] [ 162.934268][ T8610] __dump_stack+0x1d/0x30 [ 162.934293][ T8610] dump_stack_lvl+0x95/0xd0 [ 162.934353][ T8610] dump_stack+0x15/0x1b [ 162.934371][ T8610] should_fail_ex+0x263/0x280 [ 162.934391][ T8610] should_failslab+0x8c/0xb0 [ 162.934413][ T8610] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 162.934508][ T8610] ? v9fs_init_fs_context+0xae/0x220 [ 162.934537][ T8610] kstrdup+0x3e/0xd0 [ 162.934554][ T8610] v9fs_init_fs_context+0xae/0x220 [ 162.934595][ T8610] alloc_fs_context+0x4a6/0x580 [ 162.934743][ T8610] fs_context_for_mount+0x22/0x30 [ 162.934766][ T8610] do_new_mount+0xe7/0x8d0 [ 162.934787][ T8610] ? security_capable+0x7b/0x90 [ 162.934884][ T8610] path_mount+0x4d0/0xbc0 [ 162.934905][ T8610] __se_sys_mount+0x28c/0x2e0 [ 162.934927][ T8610] ? fput+0x8f/0xc0 [ 162.935031][ T8610] __x64_sys_mount+0x67/0x80 [ 162.935054][ T8610] x64_sys_call+0x2d61/0x3020 [ 162.935102][ T8610] do_syscall_64+0x12c/0x370 [ 162.935123][ T8610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.935195][ T8610] RIP: 0033:0x7f31f9b7c799 [ 162.935211][ T8610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.935230][ T8610] RSP: 002b:00007f31f85cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.935252][ T8610] RAX: ffffffffffffffda RBX: 00007f31f9df5fa0 RCX: 00007f31f9b7c799 [ 162.935331][ T8610] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 162.935345][ T8610] RBP: 00007f31f85cf090 R08: 0000200000000300 R09: 0000000000000000 [ 162.935356][ T8610] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 162.935367][ T8610] R13: 00007f31f9df6038 R14: 00007f31f9df5fa0 R15: 00007ffe8a06b828 [ 162.935413][ T8610] [ 162.935866][ T8590] loop6: lost filesystem error report for type 5 error -117 [ 163.054356][ T28] audit: type=1400 audit(1772930833.918:2462): avc: denied { create } for pid=8613 comm="syz.8.1125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=ieee802154_socket permissive=1 [ 163.091383][ T8597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.128019][ T8590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.172694][ T8597] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.244026][ T8597] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1118: corrupted inode contents [ 163.258827][ T8597] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.1118: mark_inode_dirty error [ 163.273775][ T8597] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1118: corrupted inode contents [ 163.288380][ T8597] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1118: mark_inode_dirty error [ 163.303034][ T8629] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.1118: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 163.303034][ T8629] [ 163.348364][ T8633] EXT4-fs: Ignoring removed nobh option [ 163.349519][ T28] audit: type=1400 audit(1772930834.208:2463): avc: denied { name_bind } for pid=8632 comm="syz.9.1131" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 163.361975][ T8633] EXT4-fs: Invalid want_extra_isize 5 [ 163.394216][ T8634] EXT4-fs (loop9): can't mount with both data=journal and delalloc [ 163.410370][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.509073][ T8639] netlink: 'syz.8.1134': attribute type 21 has an invalid length. [ 163.534840][ T8639] __nla_validate_parse: 6 callbacks suppressed [ 163.535063][ T8639] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1134'. [ 163.568664][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.612174][ T8636] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1133'. [ 163.614083][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1133'. [ 163.825341][ T8649] FAULT_INJECTION: forcing a failure. [ 163.825341][ T8649] name failslab, interval 1, probability 0, space 0, times 0 [ 163.863366][ T8649] CPU: 0 UID: 0 PID: 8649 Comm: syz.7.1137 Tainted: G W syzkaller #0 PREEMPT(full) [ 163.863575][ T8649] Tainted: [W]=WARN [ 163.863581][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.863592][ T8649] Call Trace: [ 163.863598][ T8649] [ 163.863606][ T8649] __dump_stack+0x1d/0x30 [ 163.863630][ T8649] dump_stack_lvl+0x95/0xd0 [ 163.863688][ T8649] dump_stack+0x15/0x1b [ 163.863778][ T8649] should_fail_ex+0x263/0x280 [ 163.863803][ T8649] should_failslab+0x8c/0xb0 [ 163.863824][ T8649] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 163.863853][ T8649] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 163.863913][ T8649] kmemdup_nul+0x36/0xc0 [ 163.863987][ T8649] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 163.864011][ T8649] vfs_parse_monolithic_sep+0x16a/0x270 [ 163.864081][ T8649] generic_parse_monolithic+0x24/0x30 [ 163.864104][ T8649] parse_monolithic_mount_data+0x46/0x60 [ 163.864158][ T8649] do_new_mount+0x24e/0x8d0 [ 163.864176][ T8649] ? security_capable+0x7b/0x90 [ 163.864243][ T8649] path_mount+0x4d0/0xbc0 [ 163.864273][ T8649] __se_sys_mount+0x28c/0x2e0 [ 163.864296][ T8649] ? fput+0x8f/0xc0 [ 163.864319][ T8649] __x64_sys_mount+0x67/0x80 [ 163.864351][ T8649] x64_sys_call+0x2d61/0x3020 [ 163.864378][ T8649] do_syscall_64+0x12c/0x370 [ 163.864486][ T8649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.864510][ T8649] RIP: 0033:0x7fb8cc7dc799 [ 163.864526][ T8649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.864541][ T8649] RSP: 002b:00007fb8cb237028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.864640][ T8649] RAX: ffffffffffffffda RBX: 00007fb8cca55fa0 RCX: 00007fb8cc7dc799 [ 163.864652][ T8649] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 163.864663][ T8649] RBP: 00007fb8cb237090 R08: 0000200000000300 R09: 0000000000000000 [ 163.864677][ T8649] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 163.864690][ T8649] R13: 00007fb8cca56038 R14: 00007fb8cca55fa0 R15: 00007fff45ad3e28 [ 163.864709][ T8649] [ 164.273814][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1140'. [ 164.466809][ T8658] netlink: 116376 bytes leftover after parsing attributes in process `syz.7.1140'. [ 164.476660][ T8658] netlink: zone id is out of range [ 164.640202][ T8667] Cannot find set identified by id 0 to match [ 164.762663][ T28] audit: type=1400 audit(1772930835.598:2464): avc: denied { read } for pid=8668 comm="syz.0.1144" path="socket:[24826]" dev="sockfs" ino=24826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.789057][ T8671] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1144'. [ 164.876427][ T8647] set_capacity_and_notify: 6 callbacks suppressed [ 164.876451][ T8647] loop6: detected capacity change from 0 to 1764 [ 164.933842][ T28] audit: type=1400 audit(1772930835.798:2465): avc: denied { mounton } for pid=8645 comm="syz.6.1136" path="/141/file1/file0" dev="loop6" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 165.014435][ T8674] loop6: detected capacity change from 0 to 128 [ 165.036985][ T8674] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.049597][ T8674] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.072349][ T5274] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.217582][ T8694] FAULT_INJECTION: forcing a failure. [ 165.217582][ T8694] name failslab, interval 1, probability 0, space 0, times 0 [ 165.248119][ T8694] CPU: 0 UID: 0 PID: 8694 Comm: syz.0.1149 Tainted: G W syzkaller #0 PREEMPT(full) [ 165.248205][ T8694] Tainted: [W]=WARN [ 165.248212][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.248226][ T8694] Call Trace: [ 165.248232][ T8694] [ 165.248251][ T8694] __dump_stack+0x1d/0x30 [ 165.248280][ T8694] dump_stack_lvl+0x95/0xd0 [ 165.248304][ T8694] dump_stack+0x15/0x1b [ 165.248326][ T8694] should_fail_ex+0x263/0x280 [ 165.248351][ T8694] should_failslab+0x8c/0xb0 [ 165.248396][ T8694] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 165.248457][ T8694] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 165.248485][ T8694] kmemdup_nul+0x36/0xc0 [ 165.248524][ T8694] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 165.248549][ T8694] vfs_parse_monolithic_sep+0x16a/0x270 [ 165.248576][ T8694] generic_parse_monolithic+0x24/0x30 [ 165.248600][ T8694] parse_monolithic_mount_data+0x46/0x60 [ 165.248636][ T8694] do_new_mount+0x24e/0x8d0 [ 165.248658][ T8694] ? security_capable+0x7b/0x90 [ 165.248685][ T8694] path_mount+0x4d0/0xbc0 [ 165.248707][ T8694] __se_sys_mount+0x28c/0x2e0 [ 165.248745][ T8694] ? fput+0x8f/0xc0 [ 165.248825][ T8694] __x64_sys_mount+0x67/0x80 [ 165.248848][ T8694] x64_sys_call+0x2d61/0x3020 [ 165.248923][ T8694] do_syscall_64+0x12c/0x370 [ 165.248988][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.249100][ T8694] RIP: 0033:0x7f31f9b7c799 [ 165.249117][ T8694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.249133][ T8694] RSP: 002b:00007f31f85cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.249166][ T8694] RAX: ffffffffffffffda RBX: 00007f31f9df5fa0 RCX: 00007f31f9b7c799 [ 165.249182][ T8694] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 165.249197][ T8694] RBP: 00007f31f85cf090 R08: 0000200000000300 R09: 0000000000000000 [ 165.249212][ T8694] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 165.249226][ T8694] R13: 00007f31f9df6038 R14: 00007f31f9df5fa0 R15: 00007ffe8a06b828 [ 165.249247][ T8694] [ 165.484840][ T8698] netlink: 'syz.9.1151': attribute type 21 has an invalid length. [ 165.493336][ T8698] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1151'. [ 165.526200][ T8704] loop0: detected capacity change from 0 to 1024 [ 165.535339][ T8702] loop7: detected capacity change from 0 to 512 [ 165.542197][ T8702] EXT4-fs: dax option not supported [ 165.569610][ T8704] EXT4-fs: Mount option(s) incompatible with ext3 [ 165.654059][ T8713] loop6: detected capacity change from 0 to 512 [ 165.654826][ T8713] EXT4-fs (loop6): unsupported inode size: 768 [ 165.654841][ T8713] EXT4-fs (loop6): blocksize: 1024 [ 165.663515][ T8713] IPv6: sit2: Disabled Multicast RS [ 165.801025][ T8721] loop0: detected capacity change from 0 to 4096 [ 165.813443][ T8721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.816981][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1158'. [ 165.821832][ T28] audit: type=1400 audit(1772930836.688:2466): avc: denied { map } for pid=8720 comm="syz.0.1158" path="/211/file0/cpu.stat" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 165.821859][ T28] audit: type=1400 audit(1772930836.688:2467): avc: denied { execute } for pid=8720 comm="syz.0.1158" path="/211/file0/cpu.stat" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 165.823641][ T28] audit: type=1400 audit(1772930836.688:2468): avc: denied { setattr } for pid=8720 comm="syz.0.1158" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.949299][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.973150][ T8738] FAULT_INJECTION: forcing a failure. [ 165.973150][ T8738] name failslab, interval 1, probability 0, space 0, times 0 [ 166.039901][ T8738] CPU: 0 UID: 0 PID: 8738 Comm: syz.6.1164 Tainted: G W syzkaller #0 PREEMPT(full) [ 166.039989][ T8738] Tainted: [W]=WARN [ 166.039995][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.040007][ T8738] Call Trace: [ 166.040012][ T8738] [ 166.040064][ T8738] __dump_stack+0x1d/0x30 [ 166.040086][ T8738] dump_stack_lvl+0x95/0xd0 [ 166.040109][ T8738] dump_stack+0x15/0x1b [ 166.040131][ T8738] should_fail_ex+0x263/0x280 [ 166.040153][ T8738] should_failslab+0x8c/0xb0 [ 166.040241][ T8738] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 166.040275][ T8738] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 166.040300][ T8738] kmemdup_nul+0x36/0xc0 [ 166.040315][ T8738] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 166.040336][ T8738] vfs_parse_monolithic_sep+0x16a/0x270 [ 166.040494][ T8738] generic_parse_monolithic+0x24/0x30 [ 166.040517][ T8738] parse_monolithic_mount_data+0x46/0x60 [ 166.040616][ T8738] do_new_mount+0x24e/0x8d0 [ 166.040634][ T8738] ? security_capable+0x7b/0x90 [ 166.040743][ T8738] path_mount+0x4d0/0xbc0 [ 166.040764][ T8738] __se_sys_mount+0x28c/0x2e0 [ 166.040828][ T8738] ? fput+0x8f/0xc0 [ 166.040901][ T8738] __x64_sys_mount+0x67/0x80 [ 166.040921][ T8738] x64_sys_call+0x2d61/0x3020 [ 166.040967][ T8738] do_syscall_64+0x12c/0x370 [ 166.040987][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.041009][ T8738] RIP: 0033:0x7ff6e58ac799 [ 166.041089][ T8738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.041106][ T8738] RSP: 002b:00007ff6e4307028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.041126][ T8738] RAX: ffffffffffffffda RBX: 00007ff6e5b25fa0 RCX: 00007ff6e58ac799 [ 166.041211][ T8738] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 166.041225][ T8738] RBP: 00007ff6e4307090 R08: 0000200000000300 R09: 0000000000000000 [ 166.041237][ T8738] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 166.041292][ T8738] R13: 00007ff6e5b26038 R14: 00007ff6e5b25fa0 R15: 00007fffcfc6e668 [ 166.041312][ T8738] [ 166.288078][ T8746] loop0: detected capacity change from 0 to 512 [ 166.331554][ T8746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.344837][ T8746] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.367847][ T8753] loop8: detected capacity change from 0 to 512 [ 166.368005][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1168'. [ 166.388260][ T8746] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1163'. [ 166.401226][ T8755] bridge1: entered promiscuous mode [ 166.401547][ T8753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.433328][ T8753] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.455521][ T8753] netlink: 'syz.8.1169': attribute type 10 has an invalid length. [ 166.486572][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.522590][ T6473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.563541][ T8768] netlink: 'syz.8.1173': attribute type 1 has an invalid length. [ 166.625326][ T8776] loop9: detected capacity change from 0 to 512 [ 166.650839][ T8776] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1175: invalid indirect mapped block 256 (level 2) [ 166.665111][ T8776] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 166.665314][ T8776] EXT4-fs (loop9): 2 truncates cleaned up [ 166.674452][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 166.674492][ C0] EXT4-fs (loop9): initial error at time 1772930837: ext4_free_branches:1023: inode 11 [ 166.674529][ C0] EXT4-fs (loop9): last error at time 1772930837: ext4_free_branches:1023: inode 11 [ 166.706884][ T8776] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.735325][ T8780] Cannot find del_set index 2 as target [ 166.811040][ T7717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.830581][ T8787] FAULT_INJECTION: forcing a failure. [ 166.830581][ T8787] name failslab, interval 1, probability 0, space 0, times 0 [ 166.858963][ T8787] CPU: 0 UID: 0 PID: 8787 Comm: syz.9.1177 Tainted: G W syzkaller #0 PREEMPT(full) [ 166.859071][ T8787] Tainted: [W]=WARN [ 166.859079][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.859092][ T8787] Call Trace: [ 166.859099][ T8787] [ 166.859106][ T8787] __dump_stack+0x1d/0x30 [ 166.859172][ T8787] dump_stack_lvl+0x95/0xd0 [ 166.859194][ T8787] dump_stack+0x15/0x1b [ 166.859272][ T8787] should_fail_ex+0x263/0x280 [ 166.859359][ T8787] ? v9fs_get_tree+0x49/0x5e0 [ 166.859387][ T8787] should_failslab+0x8c/0xb0 [ 166.859409][ T8787] __kmalloc_cache_noprof+0x5f/0x410 [ 166.859436][ T8787] v9fs_get_tree+0x49/0x5e0 [ 166.859574][ T8787] ? security_capable+0x7b/0x90 [ 166.859598][ T8787] vfs_get_tree+0x57/0x1d0 [ 166.859631][ T8787] do_new_mount+0x288/0x8d0 [ 166.859650][ T8787] ? security_capable+0x7b/0x90 [ 166.859712][ T8787] path_mount+0x4d0/0xbc0 [ 166.859743][ T8787] __se_sys_mount+0x28c/0x2e0 [ 166.859765][ T8787] ? fput+0x8f/0xc0 [ 166.859788][ T8787] __x64_sys_mount+0x67/0x80 [ 166.859809][ T8787] x64_sys_call+0x2d61/0x3020 [ 166.859894][ T8787] do_syscall_64+0x12c/0x370 [ 166.859914][ T8787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.860050][ T8787] RIP: 0033:0x7f417b2cc799 [ 166.860096][ T8787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.860112][ T8787] RSP: 002b:00007f4179d27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.860135][ T8787] RAX: ffffffffffffffda RBX: 00007f417b545fa0 RCX: 00007f417b2cc799 [ 166.860147][ T8787] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 166.860159][ T8787] RBP: 00007f4179d27090 R08: 0000200000000300 R09: 0000000000000000 [ 166.860171][ T8787] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 166.860184][ T8787] R13: 00007f417b546038 R14: 00007f417b545fa0 R15: 00007fff779fa5c8 [ 166.860203][ T8787] [ 167.386086][ T8796] netlink: 'syz.9.1178': attribute type 21 has an invalid length. [ 167.675147][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 167.675161][ T28] audit: type=1400 audit(1772930838.538:2477): avc: denied { bind } for pid=8801 comm="syz.8.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.847307][ T28] audit: type=1326 audit(1772930838.578:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 167.873173][ T28] audit: type=1326 audit(1772930838.578:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 167.912062][ T8812] lo speed is unknown, defaulting to 1000 [ 167.917897][ T28] audit: type=1326 audit(1772930838.578:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 167.965572][ T28] audit: type=1326 audit(1772930838.578:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 168.001167][ T8812] lo speed is unknown, defaulting to 1000 [ 168.014472][ T28] audit: type=1326 audit(1772930838.578:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 168.055635][ T28] audit: type=1326 audit(1772930838.578:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 168.084113][ T28] audit: type=1326 audit(1772930838.578:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 168.110243][ T28] audit: type=1326 audit(1772930838.578:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 168.188450][ T28] audit: type=1326 audit(1772930838.578:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.8.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 168.269127][ T8831] FAULT_INJECTION: forcing a failure. [ 168.269127][ T8831] name failslab, interval 1, probability 0, space 0, times 0 [ 168.293937][ T8831] CPU: 0 UID: 0 PID: 8831 Comm: syz.9.1188 Tainted: G W syzkaller #0 PREEMPT(full) [ 168.294018][ T8831] Tainted: [W]=WARN [ 168.294024][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.294037][ T8831] Call Trace: [ 168.294043][ T8831] [ 168.294051][ T8831] __dump_stack+0x1d/0x30 [ 168.294077][ T8831] dump_stack_lvl+0x95/0xd0 [ 168.294100][ T8831] dump_stack+0x15/0x1b [ 168.294159][ T8831] should_fail_ex+0x263/0x280 [ 168.294242][ T8831] ? p9_client_create+0x49/0x7a0 [ 168.294303][ T8831] should_failslab+0x8c/0xb0 [ 168.294325][ T8831] __kmalloc_cache_noprof+0x5f/0x410 [ 168.294352][ T8831] p9_client_create+0x49/0x7a0 [ 168.294433][ T8831] ? should_fail_ex+0xd9/0x280 [ 168.294489][ T8831] v9fs_session_init+0x3c/0x4a0 [ 168.294514][ T8831] v9fs_get_tree+0x5c/0x5e0 [ 168.294541][ T8831] ? security_capable+0x7b/0x90 [ 168.294639][ T8831] vfs_get_tree+0x57/0x1d0 [ 168.294656][ T8831] do_new_mount+0x288/0x8d0 [ 168.294678][ T8831] ? security_capable+0x7b/0x90 [ 168.294702][ T8831] path_mount+0x4d0/0xbc0 [ 168.294725][ T8831] __se_sys_mount+0x28c/0x2e0 [ 168.294817][ T8831] ? fput+0x8f/0xc0 [ 168.294843][ T8831] __x64_sys_mount+0x67/0x80 [ 168.294866][ T8831] x64_sys_call+0x2d61/0x3020 [ 168.294931][ T8831] do_syscall_64+0x12c/0x370 [ 168.294985][ T8831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.295042][ T8831] RIP: 0033:0x7f417b2cc799 [ 168.295057][ T8831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.295075][ T8831] RSP: 002b:00007f4179d27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.295097][ T8831] RAX: ffffffffffffffda RBX: 00007f417b545fa0 RCX: 00007f417b2cc799 [ 168.295116][ T8831] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 168.295130][ T8831] RBP: 00007f4179d27090 R08: 0000200000000300 R09: 0000000000000000 [ 168.295174][ T8831] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 168.295187][ T8831] R13: 00007f417b546038 R14: 00007f417b545fa0 R15: 00007fff779fa5c8 [ 168.295204][ T8831] [ 168.295765][ T8818] tipc: Failed to obtain node identity [ 168.521824][ T8818] tipc: Enabling of bearer rejected, failed to enable media [ 168.549991][ T8827] tipc: Failed to obtain node identity [ 168.555466][ T8827] tipc: Enabling of bearer rejected, failed to enable media [ 168.769471][ T8860] __nla_validate_parse: 2 callbacks suppressed [ 168.769487][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1198'. [ 168.857236][ T8862] ipvlan2: entered allmulticast mode [ 168.863107][ T8862] dummy0: entered allmulticast mode [ 169.053983][ T8863] lo speed is unknown, defaulting to 1000 [ 169.109249][ T8863] lo speed is unknown, defaulting to 1000 [ 169.179220][ T8865] loop9: detected capacity change from 0 to 512 [ 169.221834][ T8865] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.287594][ T8865] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.328539][ T7717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.500557][ T8882] FAULT_INJECTION: forcing a failure. [ 169.500557][ T8882] name failslab, interval 1, probability 0, space 0, times 0 [ 169.513551][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.7.1202 Tainted: G W syzkaller #0 PREEMPT(full) [ 169.513580][ T8882] Tainted: [W]=WARN [ 169.513586][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.513606][ T8882] Call Trace: [ 169.513671][ T8882] [ 169.513680][ T8882] __dump_stack+0x1d/0x30 [ 169.513704][ T8882] dump_stack_lvl+0x95/0xd0 [ 169.513724][ T8882] dump_stack+0x15/0x1b [ 169.513794][ T8882] should_fail_ex+0x263/0x280 [ 169.513819][ T8882] ? p9_fd_create+0xa5/0x230 [ 169.513857][ T8882] should_failslab+0x8c/0xb0 [ 169.513876][ T8882] __kmalloc_cache_noprof+0x5f/0x410 [ 169.513901][ T8882] ? should_failslab+0x8c/0xb0 [ 169.513921][ T8882] p9_fd_create+0xa5/0x230 [ 169.513954][ T8882] p9_client_create+0x231/0x7a0 [ 169.513979][ T8882] ? should_fail_ex+0xd9/0x280 [ 169.514004][ T8882] v9fs_session_init+0x3c/0x4a0 [ 169.514055][ T8882] v9fs_get_tree+0x5c/0x5e0 [ 169.514081][ T8882] ? security_capable+0x7b/0x90 [ 169.514108][ T8882] vfs_get_tree+0x57/0x1d0 [ 169.514127][ T8882] do_new_mount+0x288/0x8d0 [ 169.514172][ T8882] ? security_capable+0x7b/0x90 [ 169.514195][ T8882] path_mount+0x4d0/0xbc0 [ 169.514214][ T8882] __se_sys_mount+0x28c/0x2e0 [ 169.514305][ T8882] ? fput+0x8f/0xc0 [ 169.514330][ T8882] __x64_sys_mount+0x67/0x80 [ 169.514420][ T8882] x64_sys_call+0x2d61/0x3020 [ 169.514447][ T8882] do_syscall_64+0x12c/0x370 [ 169.514468][ T8882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.514490][ T8882] RIP: 0033:0x7fb8cc7dc799 [ 169.514505][ T8882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.514521][ T8882] RSP: 002b:00007fb8cb237028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.514590][ T8882] RAX: ffffffffffffffda RBX: 00007fb8cca55fa0 RCX: 00007fb8cc7dc799 [ 169.514602][ T8882] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 169.514614][ T8882] RBP: 00007fb8cb237090 R08: 0000200000000300 R09: 0000000000000000 [ 169.514673][ T8882] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 169.514687][ T8882] R13: 00007fb8cca56038 R14: 00007fb8cca55fa0 R15: 00007fff45ad3e28 [ 169.514704][ T8882] [ 169.765341][ T8886] netlink: 47 bytes leftover after parsing attributes in process `syz.7.1203'. [ 169.826797][ T8880] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.920822][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1205'. [ 169.946307][ T7717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.038342][ T8912] program syz.9.1209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.151322][ T8914] set_capacity_and_notify: 1 callbacks suppressed [ 170.151339][ T8914] loop6: detected capacity change from 0 to 128 [ 170.212975][ T8914] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.232570][ T8891] vlan3: entered promiscuous mode [ 170.237659][ T8891] bridge0: entered promiscuous mode [ 170.287648][ T8914] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.482658][ T8927] FAULT_INJECTION: forcing a failure. [ 170.482658][ T8927] name failslab, interval 1, probability 0, space 0, times 0 [ 170.508194][ T8927] CPU: 1 UID: 0 PID: 8927 Comm: syz.7.1214 Tainted: G W syzkaller #0 PREEMPT(full) [ 170.508229][ T8927] Tainted: [W]=WARN [ 170.508274][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.508287][ T8927] Call Trace: [ 170.508294][ T8927] [ 170.508303][ T8927] __dump_stack+0x1d/0x30 [ 170.508328][ T8927] dump_stack_lvl+0x95/0xd0 [ 170.508348][ T8927] dump_stack+0x15/0x1b [ 170.508411][ T8927] should_fail_ex+0x263/0x280 [ 170.508432][ T8927] should_failslab+0x8c/0xb0 [ 170.508450][ T8927] kmem_cache_alloc_noprof+0x66/0x400 [ 170.508477][ T8927] ? p9_client_prepare_req+0xeb/0x660 [ 170.508561][ T8927] p9_client_prepare_req+0xeb/0x660 [ 170.508587][ T8927] ? __rcu_read_unlock+0x4e/0x70 [ 170.508613][ T8927] ? __list_add_valid_or_report+0x38/0xe0 [ 170.508710][ T8927] ? __pfx_p9_pollwait+0x10/0x10 [ 170.508729][ T8927] p9_client_rpc+0xdf/0x6c0 [ 170.508752][ T8927] ? pn_socket_poll+0xa3/0x1e0 [ 170.508775][ T8927] ? __pfx_pn_socket_poll+0x10/0x10 [ 170.508799][ T8927] ? sock_poll+0x21c/0x240 [ 170.508855][ T8927] ? __pfx_sock_poll+0x10/0x10 [ 170.508881][ T8927] ? p9_conn_create+0x2e1/0x320 [ 170.508904][ T8927] p9_client_create+0x351/0x7a0 [ 170.508931][ T8927] ? should_fail_ex+0xd9/0x280 [ 170.509063][ T8927] v9fs_session_init+0x3c/0x4a0 [ 170.509089][ T8927] v9fs_get_tree+0x5c/0x5e0 [ 170.509113][ T8927] ? security_capable+0x7b/0x90 [ 170.509213][ T8927] vfs_get_tree+0x57/0x1d0 [ 170.509233][ T8927] do_new_mount+0x288/0x8d0 [ 170.509251][ T8927] ? security_capable+0x7b/0x90 [ 170.509276][ T8927] path_mount+0x4d0/0xbc0 [ 170.509321][ T8927] __se_sys_mount+0x28c/0x2e0 [ 170.509343][ T8927] ? fput+0x8f/0xc0 [ 170.509370][ T8927] __x64_sys_mount+0x67/0x80 [ 170.509393][ T8927] x64_sys_call+0x2d61/0x3020 [ 170.509467][ T8927] do_syscall_64+0x12c/0x370 [ 170.509536][ T8927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.509555][ T8927] RIP: 0033:0x7fb8cc7dc799 [ 170.509569][ T8927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.509585][ T8927] RSP: 002b:00007fb8cb237028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.509661][ T8927] RAX: ffffffffffffffda RBX: 00007fb8cca55fa0 RCX: 00007fb8cc7dc799 [ 170.509677][ T8927] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 170.509689][ T8927] RBP: 00007fb8cb237090 R08: 0000200000000300 R09: 0000000000000000 [ 170.509704][ T8927] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 170.509717][ T8927] R13: 00007fb8cca56038 R14: 00007fb8cca55fa0 R15: 00007fff45ad3e28 [ 170.509794][ T8927] [ 170.939312][ T5274] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.984940][ T8935] loop7: detected capacity change from 0 to 512 [ 171.010607][ T8935] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.1218: invalid block [ 171.038000][ T8935] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 171.038170][ T8935] EXT4-fs (loop7): Remounting filesystem read-only [ 171.047412][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 171.047433][ C1] EXT4-fs (loop7): initial error at time 1772930841: ext4_get_branch:178: inode 11: block 4294967295 [ 171.047484][ C1] EXT4-fs (loop7): last error at time 1772930841: ext4_get_branch:178: inode 11: block 4294967295 [ 171.083233][ T8935] EXT4-fs (loop7): 2 truncates cleaned up [ 171.090079][ T8935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.849376][ T8964] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 171.965956][ T8965] loop0: detected capacity change from 0 to 128 [ 172.257834][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.570616][ T8976] loop7: detected capacity change from 0 to 1024 [ 172.611146][ T8976] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 172.631074][ T8976] System zones: 0-1, 3-36 [ 172.648740][ T8976] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1229: bad orphan inode 134217728 [ 172.699472][ T8976] loop7: lost filesystem error report for type 5 error -117 [ 172.699925][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 172.714164][ C0] EXT4-fs (loop7): initial error at time 1772930843: ext4_orphan_get:1417 [ 172.723193][ C0] EXT4-fs (loop7): last error at time 1772930843: ext4_orphan_get:1417 [ 172.835226][ T8976] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.865130][ T8984] loop8: detected capacity change from 0 to 512 [ 172.967848][ T8981] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1230'. [ 173.148557][ T8987] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1231'. [ 173.254286][ T8981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1230'. [ 173.301212][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.311411][ T8985] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 173.345297][ T8989] loop8: detected capacity change from 0 to 512 [ 173.345570][ T8985] SELinux: failed to load policy [ 173.382495][ T8987] netlink: 116376 bytes leftover after parsing attributes in process `syz.9.1231'. [ 173.392379][ T8987] netlink: zone id is out of range [ 173.464887][ T8991] loop7: detected capacity change from 0 to 1024 [ 173.501801][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 173.501814][ T28] audit: type=1400 audit(1772930844.368:2532): avc: denied { write } for pid=8993 comm="syz.8.1235" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 173.622597][ T8994] loop8: detected capacity change from 0 to 512 [ 173.630112][ T8995] lo speed is unknown, defaulting to 1000 [ 173.649586][ T8991] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 173.659687][ T8991] System zones: 0-1, 3-36 [ 173.688531][ T8991] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1232: bad orphan inode 134217728 [ 173.725150][ T8991] loop7: lost filesystem error report for type 5 error -117 [ 173.728835][ T8991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.734455][ T8995] lo speed is unknown, defaulting to 1000 [ 173.788868][ T8994] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.819224][ T8994] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.856212][ T8994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.956540][ T28] audit: type=1400 audit(1772930844.818:2533): avc: denied { write } for pid=8993 comm="syz.8.1235" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 174.056243][ T28] audit: type=1400 audit(1772930844.918:2534): avc: denied { write } for pid=8993 comm="syz.8.1235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 174.089444][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1237'. [ 174.138887][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1240'. [ 174.212233][ T9018] FAULT_INJECTION: forcing a failure. [ 174.212233][ T9018] name failslab, interval 1, probability 0, space 0, times 0 [ 174.225833][ T9018] CPU: 1 UID: 0 PID: 9018 Comm: syz.6.1242 Tainted: G W syzkaller #0 PREEMPT(full) [ 174.225881][ T9018] Tainted: [W]=WARN [ 174.225888][ T9018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.225902][ T9018] Call Trace: [ 174.225909][ T9018] [ 174.225946][ T9018] __dump_stack+0x1d/0x30 [ 174.225982][ T9018] dump_stack_lvl+0x95/0xd0 [ 174.226007][ T9018] dump_stack+0x15/0x1b [ 174.226030][ T9018] should_fail_ex+0x263/0x280 [ 174.226079][ T9018] should_failslab+0x8c/0xb0 [ 174.226099][ T9018] __kvmalloc_node_noprof+0x155/0x650 [ 174.226255][ T9018] ? should_fail_ex+0xd9/0x280 [ 174.226272][ T9018] ? p9_fcall_init+0xe1/0x1f0 [ 174.226305][ T9018] p9_fcall_init+0xe1/0x1f0 [ 174.226403][ T9018] p9_client_prepare_req+0x1d7/0x660 [ 174.226442][ T9018] ? __list_add_valid_or_report+0x38/0xe0 [ 174.226543][ T9018] ? __pfx_p9_pollwait+0x10/0x10 [ 174.226560][ T9018] p9_client_rpc+0xdf/0x6c0 [ 174.226586][ T9018] ? pn_socket_poll+0xa3/0x1e0 [ 174.226654][ T9018] ? __pfx_pn_socket_poll+0x10/0x10 [ 174.226675][ T9018] ? sock_poll+0x21c/0x240 [ 174.226784][ T9018] ? __pfx_sock_poll+0x10/0x10 [ 174.226877][ T9018] ? p9_conn_create+0x2e1/0x320 [ 174.226897][ T9018] p9_client_create+0x351/0x7a0 [ 174.226923][ T9018] ? should_fail_ex+0xd9/0x280 [ 174.226945][ T9018] v9fs_session_init+0x3c/0x4a0 [ 174.227044][ T9018] v9fs_get_tree+0x5c/0x5e0 [ 174.227069][ T9018] ? security_capable+0x7b/0x90 [ 174.227131][ T9018] vfs_get_tree+0x57/0x1d0 [ 174.227150][ T9018] do_new_mount+0x288/0x8d0 [ 174.227177][ T9018] ? security_capable+0x7b/0x90 [ 174.227200][ T9018] path_mount+0x4d0/0xbc0 [ 174.227289][ T9018] __se_sys_mount+0x28c/0x2e0 [ 174.227312][ T9018] ? fput+0x8f/0xc0 [ 174.227421][ T9018] __x64_sys_mount+0x67/0x80 [ 174.227488][ T9018] x64_sys_call+0x2d61/0x3020 [ 174.227516][ T9018] do_syscall_64+0x12c/0x370 [ 174.227614][ T9018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.227677][ T9018] RIP: 0033:0x7ff6e58ac799 [ 174.227691][ T9018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.227734][ T9018] RSP: 002b:00007ff6e4307028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.227756][ T9018] RAX: ffffffffffffffda RBX: 00007ff6e5b25fa0 RCX: 00007ff6e58ac799 [ 174.227770][ T9018] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 174.227782][ T9018] RBP: 00007ff6e4307090 R08: 0000200000000300 R09: 0000000000000000 [ 174.227794][ T9018] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 174.227812][ T9018] R13: 00007ff6e5b26038 R14: 00007ff6e5b25fa0 R15: 00007fffcfc6e668 [ 174.227832][ T9018] [ 174.526149][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.532723][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1241'. [ 174.537692][ T9012] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1240'. [ 174.554605][ T9012] netlink: zone id is out of range [ 174.669343][ T9020] netlink: 116376 bytes leftover after parsing attributes in process `syz.9.1241'. [ 174.679348][ T9020] netlink: zone id is out of range [ 174.707681][ T9022] loop6: detected capacity change from 0 to 1024 [ 174.777047][ T9022] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 174.786293][ T9022] System zones: 0-1, 3-36 [ 174.803131][ T9022] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1243: bad orphan inode 134217728 [ 174.815940][ T9022] loop6: lost filesystem error report for type 5 error -117 [ 174.819977][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 174.834796][ C0] EXT4-fs (loop6): initial error at time 1772930845: ext4_orphan_get:1417 [ 174.844083][ C0] EXT4-fs (loop6): last error at time 1772930845: ext4_orphan_get:1417 [ 175.154823][ T9022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.368694][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.440826][ T9036] siw: device registration error -23 [ 175.449499][ T9036] loop9: detected capacity change from 0 to 512 [ 177.156896][ T9055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.275283][ T9055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.319785][ T9061] loop8: detected capacity change from 0 to 164 [ 177.375894][ T9055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.504697][ T9055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.576426][ T4484] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.587064][ T9068] 9p: Bad value for 'wfdno' [ 177.617654][ T3970] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.629999][ T3970] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.647470][ T3970] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.741098][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1256'. [ 177.759111][ T9074] 9p: Bad value for 'wfdno' [ 177.867719][ T9080] loop7: detected capacity change from 0 to 4096 [ 177.947540][ T9071] netlink: 116376 bytes leftover after parsing attributes in process `syz.8.1256'. [ 177.957332][ T9071] netlink: zone id is out of range [ 178.023693][ T9080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.384067][ T9101] loop0: detected capacity change from 0 to 512 [ 178.402146][ T9101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.415127][ T9101] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.427776][ T9101] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.1264: corrupted inode contents [ 178.440455][ T9101] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.1264: mark_inode_dirty error [ 178.452200][ T9101] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.1264: corrupted inode contents [ 178.465154][ T9101] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1264: mark_inode_dirty error [ 178.502968][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.586797][ T28] audit: type=1400 audit(1772930849.448:2535): avc: denied { connect } for pid=9107 comm="syz.0.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.722704][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.767870][ T9113] loop0: detected capacity change from 0 to 128 [ 178.783553][ T9116] 9p: Bad value for 'wfdno' [ 178.919804][ T9129] ip6gre1: entered promiscuous mode [ 178.962819][ T9134] FAULT_INJECTION: forcing a failure. [ 178.962819][ T9134] name failslab, interval 1, probability 0, space 0, times 0 [ 179.000008][ T9134] CPU: 0 UID: 0 PID: 9134 Comm: syz.8.1277 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.000095][ T9134] Tainted: [W]=WARN [ 179.000101][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.000113][ T9134] Call Trace: [ 179.000118][ T9134] [ 179.000125][ T9134] __dump_stack+0x1d/0x30 [ 179.000150][ T9134] dump_stack_lvl+0x95/0xd0 [ 179.000227][ T9134] dump_stack+0x15/0x1b [ 179.000247][ T9134] should_fail_ex+0x263/0x280 [ 179.000267][ T9134] should_failslab+0x8c/0xb0 [ 179.000285][ T9134] __kvmalloc_node_noprof+0x155/0x650 [ 179.000342][ T9134] ? p9_fcall_init+0xe1/0x1f0 [ 179.000370][ T9134] p9_fcall_init+0xe1/0x1f0 [ 179.000398][ T9134] p9_client_prepare_req+0x220/0x660 [ 179.000509][ T9134] ? __list_add_valid_or_report+0x38/0xe0 [ 179.000603][ T9134] ? __pfx_p9_pollwait+0x10/0x10 [ 179.000622][ T9134] p9_client_rpc+0xdf/0x6c0 [ 179.000643][ T9134] ? pn_socket_poll+0xa3/0x1e0 [ 179.000673][ T9134] ? __pfx_pn_socket_poll+0x10/0x10 [ 179.000767][ T9134] ? sock_poll+0x21c/0x240 [ 179.000797][ T9134] ? __pfx_sock_poll+0x10/0x10 [ 179.000897][ T9134] ? p9_conn_create+0x2e1/0x320 [ 179.000915][ T9134] p9_client_create+0x351/0x7a0 [ 179.000937][ T9134] ? should_fail_ex+0xd9/0x280 [ 179.000994][ T9134] v9fs_session_init+0x3c/0x4a0 [ 179.001036][ T9134] v9fs_get_tree+0x5c/0x5e0 [ 179.001061][ T9134] ? security_capable+0x7b/0x90 [ 179.001086][ T9134] vfs_get_tree+0x57/0x1d0 [ 179.001105][ T9134] do_new_mount+0x288/0x8d0 [ 179.001150][ T9134] ? security_capable+0x7b/0x90 [ 179.001176][ T9134] path_mount+0x4d0/0xbc0 [ 179.001199][ T9134] __se_sys_mount+0x28c/0x2e0 [ 179.001221][ T9134] ? fput+0x8f/0xc0 [ 179.001277][ T9134] __x64_sys_mount+0x67/0x80 [ 179.001376][ T9134] x64_sys_call+0x2d61/0x3020 [ 179.001474][ T9134] do_syscall_64+0x12c/0x370 [ 179.001493][ T9134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.001522][ T9134] RIP: 0033:0x7f588103c799 [ 179.001537][ T9134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.001624][ T9134] RSP: 002b:00007f587fa97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.001644][ T9134] RAX: ffffffffffffffda RBX: 00007f58812b5fa0 RCX: 00007f588103c799 [ 179.001657][ T9134] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 179.001671][ T9134] RBP: 00007f587fa97090 R08: 0000200000000300 R09: 0000000000000000 [ 179.001685][ T9134] R10: 0000000000200043 R11: 0000000000000246 R12: 0000000000000002 [ 179.001774][ T9134] R13: 00007f58812b6038 R14: 00007f58812b5fa0 R15: 00007fffc953ca48 [ 179.001793][ T9134] [ 179.304793][ T9140] netlink: 'syz.8.1279': attribute type 21 has an invalid length. [ 179.327469][ T9140] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1279'. [ 179.541044][ T28] audit: type=1400 audit(1772930850.398:2536): avc: denied { getopt } for pid=9147 comm="syz.6.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.572014][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1280'. [ 179.631027][ T9151] netlink: 'syz.6.1281': attribute type 21 has an invalid length. [ 180.010182][ T9151] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1281'. [ 180.074294][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1282'. [ 180.112235][ T9161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9161 comm=syz.8.1282 [ 180.157425][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1282'. [ 180.504576][ T9184] loop8: detected capacity change from 0 to 256 [ 180.964950][ T9186] loop7: detected capacity change from 0 to 512 [ 181.388916][ T9179] loop9: detected capacity change from 0 to 512 [ 182.114842][ T9179] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 182.123668][ T9186] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.136386][ T9186] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.160366][ T9179] EXT4-fs (loop9): 1 truncate cleaned up [ 182.170483][ T9179] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.186567][ T9190] netlink: 'syz.6.1293': attribute type 21 has an invalid length. [ 182.210784][ T9190] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1293'. [ 182.232935][ T9195] ext4: Unknown parameter 'u@ [ 182.232935][ T9195] ' [ 182.360007][ T9193] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 182.994748][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.223016][ T7717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.298506][ T9215] netlink: 'syz.7.1295': attribute type 21 has an invalid length. [ 183.326267][ T9221] 9p: Bad value for 'rfdno' [ 183.331355][ T9215] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1295'. [ 183.572292][ T9231] loop6: detected capacity change from 0 to 1024 [ 183.632059][ T9231] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 183.660257][ T9231] System zones: 0-1, 3-36 [ 183.680467][ T9231] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1299: bad orphan inode 134217728 [ 183.710100][ T9231] loop6: lost filesystem error report for type 5 error -117 [ 183.716858][ T9231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.850650][ T9245] loop8: detected capacity change from 0 to 128 [ 183.883471][ T9245] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.896343][ T9245] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.910695][ T9245] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.051280][ T9244] loop8: detected capacity change from 0 to 1024 [ 184.057966][ T9244] EXT4-fs: inline encryption not supported [ 184.071363][ T9244] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.090337][ T9244] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.183404][ T9265] lo speed is unknown, defaulting to 1000 [ 184.211567][ T9267] netlink: 'syz.8.1307': attribute type 21 has an invalid length. [ 184.223773][ T9267] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1307'. [ 184.235580][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.237218][ T9262] loop9: detected capacity change from 0 to 512 [ 184.501859][ T9274] loop0: detected capacity change from 0 to 1024 [ 184.962669][ T9274] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 184.982020][ T9284] netlink: 'syz.8.1312': attribute type 21 has an invalid length. [ 185.006231][ T9274] EXT4-fs (loop0): group descriptors corrupted! [ 185.013297][ T9284] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1312'. [ 185.167929][ T9265] lo speed is unknown, defaulting to 1000 [ 185.178920][ T9262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.229639][ T9262] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.278449][ T9262] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.714698][ T9293] loop0: detected capacity change from 0 to 2048 [ 185.741404][ T9293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.162541][ T9305] loop6: detected capacity change from 0 to 512 [ 186.253113][ T9305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.338494][ T9305] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.359238][ T9305] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.1316: corrupted inode contents [ 186.401247][ T9305] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.1316: mark_inode_dirty error [ 186.439074][ T9305] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.1316: corrupted inode contents [ 186.474749][ T9313] loop8: detected capacity change from 0 to 2048 [ 186.483259][ T9301] syz.0.1313 invoked oom-killer: gfp_mask=0x2dc0(GFP_KERNEL|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 186.495566][ T9305] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1316: mark_inode_dirty error [ 186.510190][ T9301] CPU: 1 UID: 0 PID: 9301 Comm: syz.0.1313 Tainted: G W syzkaller #0 PREEMPT(full) [ 186.510223][ T9301] Tainted: [W]=WARN [ 186.510229][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.510313][ T9301] Call Trace: [ 186.510319][ T9301] [ 186.510326][ T9301] __dump_stack+0x1d/0x30 [ 186.510357][ T9301] dump_stack_lvl+0x95/0xd0 [ 186.510378][ T9301] dump_stack+0x15/0x1b [ 186.510400][ T9301] dump_header+0x80/0x240 [ 186.510424][ T9301] oom_kill_process+0x295/0x350 [ 186.510444][ T9301] out_of_memory+0x97d/0xb80 [ 186.510468][ T9301] try_charge_memcg+0x62e/0xa10 [ 186.510500][ T9301] obj_cgroup_charge_pages+0x23/0xc0 [ 186.510597][ T9301] obj_cgroup_charge_account+0x73/0x1a0 [ 186.510645][ T9301] __memcg_slab_post_alloc_hook+0x392/0x540 [ 186.510674][ T9301] kmem_cache_alloc_bulk_noprof+0x46a/0x4c0 [ 186.510704][ T9301] __io_alloc_req_refill+0x65/0x1e0 [ 186.510783][ T9301] io_submit_sqes+0xa65/0x1270 [ 186.510844][ T9301] __se_sys_io_uring_enter+0x1c9/0xf50 [ 186.510881][ T9301] __x64_sys_io_uring_enter+0x78/0x90 [ 186.510913][ T9301] x64_sys_call+0x1e16/0x3020 [ 186.510988][ T9301] do_syscall_64+0x12c/0x370 [ 186.511009][ T9301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.511034][ T9301] RIP: 0033:0x7f31f9b7c799 [ 186.511050][ T9301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.511110][ T9301] RSP: 002b:00007f31f85ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 186.511131][ T9301] RAX: ffffffffffffffda RBX: 00007f31f9df6090 RCX: 00007f31f9b7c799 [ 186.511144][ T9301] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000007 [ 186.511157][ T9301] RBP: 00007f31f9c12bd9 R08: 0000000000000000 R09: 0000000000000000 [ 186.511172][ T9301] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 186.511252][ T9301] R13: 00007f31f9df6128 R14: 00007f31f9df6090 R15: 00007ffe8a06b828 [ 186.511334][ T9301] [ 186.514276][ T9301] memory: usage 307200kB, limit 307200kB, failcnt 818 [ 186.730063][ T9193] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 186.739980][ T9301] memory+swap: usage 10176kB, limit 9007199254740988kB, failcnt 0 [ 186.753383][ T9313] Alternate GPT is invalid, using primary GPT. [ 186.754446][ T28] audit: type=1400 audit(1772930857.628:2537): avc: denied { bind } for pid=9312 comm="syz.8.1318" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.779788][ T28] audit: type=1400 audit(1772930857.628:2538): avc: denied { name_bind } for pid=9312 comm="syz.8.1318" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 186.780026][ T9301] kmem: usage 8928kB, limit 9007199254740988kB, failcnt 0 [ 186.800765][ T28] audit: type=1400 audit(1772930857.628:2539): avc: denied { node_bind } for pid=9312 comm="syz.8.1318" saddr=fe88::9 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 186.819261][ T9313] loop8: p2 p3 p7 [ 186.830693][ T28] audit: type=1400 audit(1772930857.628:2540): avc: denied { ioctl } for pid=9312 comm="syz.8.1318" path="socket:[27930]" dev="sockfs" ino=27930 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.835775][ T9301] Memory cgroup stats for /syz0: [ 186.870410][ T9301] cache 12288 [ 186.870833][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.875353][ T9301] rss 49152 [ 186.875361][ T9301] shmem 4096 [ 186.935895][ T9301] mapped_file 3280896 [ 186.965032][ T9301] dirty 0 [ 186.968008][ T9301] writeback 0 [ 186.972066][ T9301] workingset_refault_anon 355 [ 186.976791][ T9301] workingset_refault_file 1047 [ 186.981975][ T9301] swap 1196032 [ 186.985635][ T9301] swapcached 12173312 [ 186.989636][ T9301] pgpgin 174476 [ 186.993426][ T9301] pgpgout 174459 [ 187.004663][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1320'. [ 187.014623][ T9301] pgfault 170149 [ 187.019867][ T9301] pgmajfault 110 [ 187.020042][ T28] audit: type=1400 audit(1772930857.868:2541): avc: denied { ioctl } for pid=9315 comm="syz.8.1320" path="socket:[27948]" dev="sockfs" ino=27948 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.024014][ T9301] inactive_anon 0 [ 187.059439][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 187.059821][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 187.074555][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 187.119042][ T9301] active_anon 61440 [ 187.123016][ T9301] inactive_file 8192 [ 187.126900][ T9301] active_file 0 [ 187.141024][ T9301] unevictable 0 [ 187.144597][ T9301] hierarchical_memory_limit 314572800 [ 187.153013][ T28] audit: type=1400 audit(1772930858.018:2542): avc: denied { setopt } for pid=9315 comm="syz.8.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.175910][ T9301] hierarchical_memsw_limit 9223372036854771712 [ 187.192915][ T9301] total_cache 12288 [ 187.196750][ T9301] total_rss 49152 [ 187.210537][ T9301] total_shmem 4096 [ 187.214471][ T9301] total_mapped_file 3280896 [ 187.219016][ T9301] total_dirty 0 [ 187.226667][ T9322] loop6: detected capacity change from 0 to 1024 [ 187.233320][ T9301] total_writeback 0 [ 187.243426][ T1032] IPVS: starting estimator thread 0... [ 187.249063][ T9301] total_workingset_refault_anon 355 [ 187.257104][ T9301] total_workingset_refault_file 1047 [ 187.271049][ T9322] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 187.280134][ T9301] total_swap 1196032 [ 187.284250][ T9322] System zones: 0-1, 3-36 [ 187.289309][ T9301] total_swapcached 12173312 [ 187.296099][ T9301] total_pgpgin 174476 [ 187.306788][ T9301] total_pgpgout 174459 [ 187.314598][ T9322] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1319: bad orphan inode 134217728 [ 187.326125][ T9301] total_pgfault 170149 [ 187.330513][ T9301] total_pgmajfault 110 [ 187.334596][ T9301] total_inactive_anon 0 [ 187.338807][ T9301] total_active_anon 61440 [ 187.340463][ T9331] IPVS: using max 2448 ests per chain, 122400 per kthread [ 187.343636][ T9322] loop6: lost filesystem error report for type 5 error -117 [ 187.350612][ T9301] total_inactive_file 8192 [ 187.371954][ T9301] total_active_file 0 [ 187.376313][ T9322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.390044][ T9301] total_unevictable 0 [ 187.394057][ T9301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1313,pid=9292,uid=0 [ 187.412830][ T9301] Memory cgroup out of memory: Killed process 9292 (syz.0.1313) total-vm:97496kB, anon-rss:1332kB, file-rss:25616kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 187.484791][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.533797][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.593267][ T9338] loop6: detected capacity change from 0 to 2048 [ 187.636958][ T9338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.707537][ T9347] loop6: detected capacity change from 0 to 512 [ 187.731860][ T9347] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.756296][ T9347] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.1329: corrupted inode contents [ 187.781914][ T9347] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.1329: mark_inode_dirty error [ 187.821283][ T9347] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.1329: corrupted inode contents [ 187.846633][ T9347] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1329: mark_inode_dirty error [ 187.954017][ T5274] EXT4-fs unmount: 2 callbacks suppressed [ 187.954031][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.050544][ T9363] loop9: detected capacity change from 0 to 2048 [ 188.072511][ T9363] EXT4-fs: Ignoring removed i_version option [ 188.090299][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1335'. [ 188.115220][ T9363] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.319512][ T9369] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 188.349975][ T9369] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 188.399954][ T9369] EXT4-fs (loop9): This should not happen!! Data will be lost [ 188.399954][ T9369] [ 188.475093][ T9369] EXT4-fs (loop9): Total free blocks count 0 [ 188.492718][ T9369] EXT4-fs (loop9): Free/Dirty block details [ 188.509355][ T9369] EXT4-fs (loop9): free_blocks=2415919504 [ 188.515512][ T9372] netlink: 116376 bytes leftover after parsing attributes in process `syz.8.1335'. [ 188.521981][ T9369] EXT4-fs (loop9): dirty_blocks=3680 [ 188.524852][ T9372] netlink: zone id is out of range [ 188.560282][ T9369] EXT4-fs (loop9): Block reservation details [ 188.571430][ T9369] EXT4-fs (loop9): i_reserved_data_blocks=230 [ 188.623545][ T4462] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1626 with error 28 [ 188.885658][ T9376] lo speed is unknown, defaulting to 1000 [ 188.993059][ T9377] lo speed is unknown, defaulting to 1000 [ 189.010292][ T9376] lo speed is unknown, defaulting to 1000 [ 189.139663][ T9377] lo speed is unknown, defaulting to 1000 [ 189.209834][ T9394] loop8: detected capacity change from 0 to 512 [ 189.282130][ T9394] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.301397][ T9394] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.343428][ T9394] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.1342: corrupted inode contents [ 189.396834][ T9394] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.1342: mark_inode_dirty error [ 189.434416][ T9394] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.1342: corrupted inode contents [ 189.603048][ T9394] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.1342: mark_inode_dirty error [ 189.727277][ T6473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.919080][ T9321] loop7: detected capacity change from 0 to 8192 [ 190.011046][ T9418] loop9: detected capacity change from 0 to 128 [ 190.045929][ T9418] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.084880][ T9416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.096214][ T9418] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.098055][ T28] audit: type=1400 audit(1772930860.918:2543): avc: denied { ioctl } for pid=9409 comm="syz.0.1346" path="socket:[30802]" dev="sockfs" ino=30802 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.271298][ T9424] IPv6: sit3: Disabled Multicast RS [ 190.332196][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1348'. [ 190.972643][ T9432] set_capacity_and_notify: 1 callbacks suppressed [ 190.972760][ T9432] loop0: detected capacity change from 0 to 1024 [ 191.012154][ T9432] ext4: Unknown parameter 'fsname' [ 191.232269][ T28] audit: type=1400 audit(1772930862.098:2544): avc: denied { ioctl } for pid=9417 comm="syz.9.1348" path="/80/file0/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 191.303862][ T9427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.328448][ T9427] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.523879][ T9442] loop7: detected capacity change from 0 to 2048 [ 191.533077][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.826709][ T7717] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.869032][ T9449] loop6: detected capacity change from 0 to 512 [ 191.895316][ T9449] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.907939][ T9453] loop7: detected capacity change from 0 to 512 [ 191.930997][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1360'. [ 191.960682][ T9449] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1358: bad orphan inode 13 [ 191.971155][ T9455] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 191.971616][ T9453] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 191.992130][ T9449] loop6: lost filesystem error report for type 5 error -117 [ 191.992289][ T9449] ext4_test_bit(bit=12, block=18) = 1 [ 192.004953][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 192.004976][ C0] EXT4-fs (loop6): last error at time 1772930862: ext4_orphan_get:1417 [ 192.020265][ T9453] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 192.030600][ T9449] is_bad_inode(inode)=0 [ 192.034804][ T9449] NEXT_ORPHAN(inode)=0 [ 192.038900][ T9449] max_ino=32 [ 192.042207][ T9453] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1359: Corrupt directory, running e2fsck is recommended [ 192.050078][ T9449] i_nlink=1 [ 192.068706][ T9453] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 192.090613][ T9449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 192.103469][ T9453] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1359: corrupted in-inode xattr: invalid ea_ino [ 192.104389][ T9472] loop9: detected capacity change from 0 to 1024 [ 192.131907][ T9449] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 192.136845][ T9453] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.159280][ T9449] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1358: bg 0: block 248: padding at end of block bitmap is not set [ 192.160049][ T9453] EXT4-fs (loop7): Remounting filesystem read-only [ 192.182731][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 192.182748][ C0] EXT4-fs (loop7): initial error at time 1772930863: ext4_iget_extra_inode:5025: inode 15 [ 192.182792][ C0] EXT4-fs (loop7): last error at time 1772930863: ext4_iget_extra_inode:5025: inode 15 [ 192.232710][ T9472] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 192.241254][ T9449] Quota error (device loop6): write_blk: dquota write failed [ 192.251218][ T9449] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 192.265459][ T9472] System zones: 0-1, 3-36 [ 192.281630][ T28] audit: type=1400 audit(1772930863.148:2545): avc: denied { ioctl } for pid=9477 comm="syz.0.1365" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 192.283061][ T9472] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.1363: bad orphan inode 134217728 [ 192.322682][ T9449] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1358: Failed to acquire dquot type 1 [ 192.323261][ T9453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.358708][ T9453] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 192.370866][ T28] audit: type=1326 audit(1772930863.218:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 192.387855][ T9472] loop9: lost filesystem error report for type 5 error -117 [ 192.402725][ T9453] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 192.420446][ T28] audit: type=1326 audit(1772930863.218:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 192.424392][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 192.444519][ T9453] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1359: Corrupt directory, running e2fsck is recommended [ 192.453259][ T3971] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 192.476271][ T9472] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.477535][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.507516][ T28] audit: type=1326 audit(1772930863.218:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 192.510592][ T3971] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 1 [ 192.531309][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.545375][ T9481] loop8: detected capacity change from 0 to 8192 [ 192.570459][ T3971] loop6: lost filesystem error report for type 5 error -117 [ 192.590329][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.606753][ T28] audit: type=1326 audit(1772930863.218:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 192.646702][ T28] audit: type=1326 audit(1772930863.248:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 192.674633][ T9491] loop6: detected capacity change from 0 to 512 [ 192.681016][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1368'. [ 192.721735][ T7717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.755171][ T28] audit: type=1326 audit(1772930863.248:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588103c799 code=0x7ffc0000 [ 192.831485][ T9481] loop8: p1 < > p2 p3 < p5 p6 > p4 [ 192.834502][ T9505] loop9: detected capacity change from 0 to 512 [ 192.845248][ T9481] loop8: partition table partially beyond EOD, truncated [ 192.862891][ T9481] loop8: p1 start 100663296 is beyond EOD, truncated [ 192.880161][ T9481] loop8: p2 size 134217732 extends beyond EOD, truncated [ 192.909008][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1375'. [ 192.922905][ T9505] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.933975][ T9510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9510 comm=syz.7.1375 [ 192.957908][ T9505] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.965453][ T9481] loop8: p4 size 14876672 extends beyond EOD, truncated [ 192.984592][ T9481] loop8: p5 size 134217732 extends beyond EOD, truncated [ 192.992518][ T9481] loop8: p6 size 14876672 extends beyond EOD, truncated [ 193.026883][ T9505] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.1373: corrupted inode contents [ 193.090183][ T9505] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.1373: mark_inode_dirty error [ 193.135589][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 193.146776][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 193.158180][ T7735] udevd[7735]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 193.169393][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 193.172021][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 193.191184][ T9505] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.1373: corrupted inode contents [ 193.197481][ T9518] loop8: detected capacity change from 0 to 4096 [ 193.216892][ T9505] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.1373: mark_inode_dirty error [ 193.240960][ T9516] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #2: comm syz.9.1373: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 193.240960][ T9516] [ 193.287504][ T9518] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.309941][ T9526] 9p: Bad value for 'rfdno' [ 193.384363][ T9518] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.1377: corrupted inode contents [ 193.397292][ T7717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.411935][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1385'. [ 193.427858][ T9518] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.1377: mark_inode_dirty error [ 193.441561][ T9542] loop6: detected capacity change from 0 to 1024 [ 193.448275][ T9518] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.1377: corrupted inode contents [ 193.460772][ T9518] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.1377: mark_inode_dirty error [ 193.480171][ T9518] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.1377: corrupted inode contents [ 193.495443][ T9542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.526608][ T9540] lo speed is unknown, defaulting to 1000 [ 193.528023][ T9518] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.1377: mark_inode_dirty error [ 193.544261][ T9518] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.1377: corrupted inode contents [ 193.556503][ T9518] EXT4-fs error (device loop8): ext4_truncate:4587: inode #15: comm syz.8.1377: mark_inode_dirty error [ 193.568311][ T9518] EXT4-fs error (device loop8) in ext4_setattr:5983: Corrupt filesystem [ 193.571537][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1385'. [ 193.579825][ T9549] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.1377: corrupted inode contents [ 193.623511][ T9552] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.1388: corrupted inode contents [ 193.635733][ T9552] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 193.635900][ T9552] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #3: comm syz.0.1388: mark_inode_dirty error [ 193.637236][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.644973][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 193.644988][ C0] EXT4-fs (loop0): initial error at time 1772930864: ext4_do_update_inode:5569: inode 3 [ 193.645013][ C0] EXT4-fs (loop0): last error at time 1772930864: ext4_do_update_inode:5569: inode 3 [ 193.691304][ T9552] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 193.702613][ T9552] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.1388: corrupted inode contents [ 193.724172][ T9552] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 193.724348][ T9552] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.1388: mark_inode_dirty error [ 193.745063][ T9552] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 193.745554][ T9552] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1388: Failed to acquire dquot type 0 [ 193.766388][ T9552] loop0: lost filesystem error report for type 5 error -117 [ 193.767195][ T9552] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1388: corrupted inode contents [ 193.786602][ T9552] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 193.786814][ T9552] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.1388: mark_inode_dirty error [ 193.807663][ T9552] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 193.809444][ T9552] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1388: corrupted inode contents [ 193.830828][ T9552] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 193.831317][ T9552] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1388: mark_inode_dirty error [ 193.851717][ T9552] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 193.852117][ T9552] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1388: corrupted inode contents [ 193.864905][ T35] IPVS: starting estimator thread 0... [ 193.873167][ T9552] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 193.878783][ T9552] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 193.883301][ T9563] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 193.890006][ T9552] loop0: lost filesystem error report for type 5 error -117 [ 193.905779][ T9540] lo speed is unknown, defaulting to 1000 [ 193.907216][ T9552] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1388: corrupted inode contents [ 193.931370][ T9552] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.1388: mark_inode_dirty error [ 193.943184][ T9552] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 193.952314][ T9552] loop0: lost filesystem error report for type 5 error -117 [ 193.953013][ T9552] EXT4-fs (loop0): 1 truncate cleaned up [ 193.980163][ T9565] IPVS: using max 2256 ests per chain, 112800 per kthread [ 193.996799][ T9552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.013609][ T9552] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.061175][ T9568] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 194.086806][ T6473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.104235][ T9576] 9p: Bad value for 'rfdno' [ 194.181810][ T9581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.200564][ T9581] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.250869][ T9581] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.1395: corrupted inode contents [ 194.266285][ T9581] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.1395: mark_inode_dirty error [ 194.295417][ T9552] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.1388: iget: bad i_size value: 360287970189639690 [ 194.308841][ T9581] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.1395: corrupted inode contents [ 194.364393][ T9581] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.1395: mark_inode_dirty error [ 194.407931][ T9593] EXT4-fs: Ignoring removed i_version option [ 194.417833][ T9586] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #2: comm syz.9.1395: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 194.417833][ T9586] [ 194.451158][ T9593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.495088][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.510565][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.526961][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.534254][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.565369][ T7717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.693038][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 194.796530][ T9618] EXT4-fs: Ignoring removed i_version option [ 194.803128][ T9618] EXT4-fs: inline encryption not supported [ 194.962397][ T9618] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 194.977252][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.011825][ T9618] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1404: invalid indirect mapped block 256 (level 1) [ 195.034272][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.054408][ T9618] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1404: invalid indirect mapped block 2683928664 (level 1) [ 195.068359][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 195.068384][ C0] EXT4-fs (loop9): initial error at time 1772930865: ext4_free_branches:1023: inode 13 [ 195.068422][ C0] EXT4-fs (loop9): last error at time 1772930865: ext4_free_branches:1023: inode 13 [ 195.145059][ T9618] EXT4-fs (loop9): 1 truncate cleaned up [ 195.197584][ T9618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.276177][ T9618] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1404: invalid indirect mapped block 65536 (level 1) [ 195.345534][ T9631] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1404'. [ 195.355269][ T9618] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1404: invalid indirect mapped block 1536 (level 1) [ 195.709022][ T35] lo speed is unknown, defaulting to 1000 [ 195.725208][ T35] syz0: Port: 1 Link DOWN [ 195.736640][ T35] lo speed is unknown, defaulting to 1000 [ 195.742986][ T4484] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.757016][ T7717] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.768129][ T4484] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.809982][ T4484] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.818981][ T4484] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.828145][ T4484] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.837170][ T4484] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.846573][ T4484] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.859960][ T4484] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.872177][ T9641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.010752][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 196.021501][ T9641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.034210][ T9641] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.082171][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 196.147552][ T9658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.217895][ T9660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27677 sclass=netlink_route_socket pid=9660 comm=syz.0.1415 [ 196.277821][ T9667] set_capacity_and_notify: 7 callbacks suppressed [ 196.277869][ T9667] loop8: detected capacity change from 0 to 1024 [ 196.296056][ T9667] EXT4-fs (loop8): bad geometry: first data block 0 is beyond end of filesystem (0) [ 196.356149][ T9671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1418'. [ 196.365678][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'. [ 196.397027][ T9670] lo speed is unknown, defaulting to 1000 [ 196.439974][ T9670] lo speed is unknown, defaulting to 1000 [ 196.495453][ T9683] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1421'. [ 196.505078][ T9680] lo speed is unknown, defaulting to 1000 [ 196.509056][ T9683] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1421'. [ 196.550083][ T9683] netlink: 'syz.9.1421': attribute type 5 has an invalid length. [ 196.566339][ T9683] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1421'. [ 196.566889][ T9688] loop0: detected capacity change from 0 to 128 [ 196.604098][ T9688] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.656324][ T9680] lo speed is unknown, defaulting to 1000 [ 196.677537][ T9688] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.687947][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.707843][ T9688] tipc: Started in network mode [ 196.714040][ T9688] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 196.738153][ T9688] tipc: Enabling of bearer rejected, failed to enable media [ 197.157134][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1427'. [ 197.202901][ T9715] hugetlbfs: syz.8.1432 (9715): Using mlock ulimits for SHM_HUGETLB is obsolete [ 197.216170][ T9705] team0: Port device team_slave_0 removed [ 197.390618][ T28] kauditd_printk_skb: 272 callbacks suppressed [ 197.390632][ T28] audit: type=1400 audit(1772930868.258:2822): avc: denied { append } for pid=9726 comm="syz.0.1434" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 197.498925][ T9735] netlink: 164 bytes leftover after parsing attributes in process `syz.9.1435'. [ 197.750849][ T9745] loop0: detected capacity change from 0 to 512 [ 197.844461][ T9745] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 197.861065][ T9745] EXT4-fs (loop0): orphan cleanup on readonly fs [ 197.916855][ T9745] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 197.941678][ T9745] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 197.944093][ T9735] lo speed is unknown, defaulting to 1000 [ 197.994764][ T9745] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.1436: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 198.030911][ T9735] lo speed is unknown, defaulting to 1000 [ 198.090057][ T9745] fserror_report: 4 callbacks suppressed [ 198.090075][ T9745] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 198.095900][ T9745] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1436: couldn't read orphan inode 13 (err -117) [ 198.105050][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 198.105074][ C0] EXT4-fs (loop0): last error at time 1772930868: ext4_ext_check_inode:521: inode 13 [ 198.175659][ T9745] loop0: lost filesystem error report for type 5 error -117 [ 198.180285][ T9745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.242165][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.273882][ T9770] loop0: detected capacity change from 0 to 512 [ 198.337200][ T9770] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 198.513173][ T9777] loop9: detected capacity change from 0 to 512 [ 198.632463][ T9777] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 198.753216][ T9777] veth1_to_bridge: entered allmulticast mode [ 198.790978][ T9770] EXT4-fs (loop0): 1 truncate cleaned up [ 198.797158][ T9770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.018484][ T9782] netem: incorrect gi model size [ 199.056658][ T9782] netem: change failed [ 199.066124][ T28] audit: type=1400 audit(1772930869.938:2823): avc: denied { bind } for pid=9787 comm="syz.6.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 199.277642][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.347832][ T9803] loop0: detected capacity change from 0 to 4096 [ 199.411399][ T9803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.471033][ T28] audit: type=1400 audit(1772930870.338:2824): avc: denied { create } for pid=9801 comm="syz.0.1448" name=C003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 199.513445][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.871936][ T28] audit: type=1400 audit(1772930870.728:2825): avc: denied { lock } for pid=9830 comm="syz.0.1459" path="pid:[4026532373]" dev="nsfs" ino=4026532373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.909934][ T28] audit: type=1400 audit(1772930870.728:2826): avc: denied { ioctl } for pid=9830 comm="syz.0.1459" path="pid:[4026532373]" dev="nsfs" ino=4026532373 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 200.083689][ T9843] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.134785][ T9848] loop8: detected capacity change from 0 to 512 [ 200.142467][ T9826] netlink: zone id is out of range [ 200.184192][ T9848] ext2: Invalid gid '0x00000000ffffffff' [ 200.346362][ T9833] loop7: detected capacity change from 0 to 512 [ 200.439153][ T9862] netlink: 'syz.9.1469': attribute type 21 has an invalid length. [ 200.448749][ T9833] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.460201][ T9862] __nla_validate_parse: 9 callbacks suppressed [ 200.460231][ T9862] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1469'. [ 200.702782][ T9833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.912226][ T9833] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.926791][ T9882] lo speed is unknown, defaulting to 1000 [ 201.037078][ T9882] lo speed is unknown, defaulting to 1000 [ 201.079615][ T9885] loop0: detected capacity change from 0 to 512 [ 201.191174][ T9885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.376080][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.396184][ T9898] loop8: detected capacity change from 0 to 8192 [ 201.503688][ T9906] loop8: detected capacity change from 0 to 512 [ 201.661272][ T9906] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.676202][ T5321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.699993][ T9906] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.748244][ T9906] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.1482: corrupted inode contents [ 201.789761][ T9906] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.1482: mark_inode_dirty error [ 201.819778][ T9906] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.1482: corrupted inode contents [ 201.836685][ T9906] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.1482: mark_inode_dirty error [ 201.858824][ T9917] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.1482: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 201.858824][ T9917] [ 201.879873][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1485'. [ 202.054780][ T28] audit: type=1400 audit(1772930872.878:2827): avc: denied { shutdown } for pid=9920 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.126018][ T6473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.154056][ T9919] netlink: 116376 bytes leftover after parsing attributes in process `syz.7.1485'. [ 202.163985][ T9919] netlink: zone id is out of range [ 202.593575][ T28] audit: type=1400 audit(1772930872.878:2828): avc: denied { read } for pid=9920 comm="syz.0.1486" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 202.616476][ T28] audit: type=1400 audit(1772930872.878:2829): avc: denied { open } for pid=9920 comm="syz.0.1486" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 203.150426][ T9928] loop6: detected capacity change from 0 to 1764 [ 203.252998][ T9928] loop6: detected capacity change from 0 to 512 [ 203.318996][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1490'. [ 203.357308][ T9932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.366425][ T9932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.386931][ T9932] lo speed is unknown, defaulting to 1000 [ 203.425935][ T9932] lo speed is unknown, defaulting to 1000 [ 204.007512][ T9937] loop6: detected capacity change from 0 to 1024 [ 204.015578][ T9937] EXT4-fs: Ignoring removed bh option [ 204.026912][ T9937] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 207.761482][ T9955] loop6: detected capacity change from 0 to 1024 [ 208.721603][ T9955] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 208.735219][ T9955] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 208.735625][ T9955] EXT4-fs: failed to create workqueue [ 208.751749][ T9955] EXT4-fs (loop6): mount failed [ 209.206984][ T9959] loop6: detected capacity change from 0 to 512 [ 209.241717][ T9959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.254374][ T9959] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.268110][ T9959] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.1497: corrupted inode contents [ 209.281030][ T9959] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.1497: mark_inode_dirty error [ 209.292637][ T9959] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.1497: corrupted inode contents [ 209.304829][ T9959] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1497: mark_inode_dirty error [ 209.317620][ T9959] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.1497: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 209.317620][ T9959] [ 209.354246][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.165850][ C1] ================================================================== [ 212.174055][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 212.181277][ C1] [ 212.183593][ C1] read-write to 0xffff8881003b13d8 of 8 bytes by interrupt on cpu 0: [ 212.191648][ C1] can_rcv_filter+0x242/0x4f0 [ 212.196333][ C1] can_receive+0x13e/0x190 [ 212.200759][ C1] can_rcv+0x17d/0x1f0 [ 212.204838][ C1] process_backlog+0x363/0x670 [ 212.209616][ C1] __napi_poll+0x61/0x330 [ 212.213956][ C1] net_rx_action+0x452/0x930 [ 212.218555][ C1] handle_softirqs+0xb9/0x2a0 [ 212.223229][ C1] do_softirq+0x45/0x60 [ 212.227383][ C1] __local_bh_enable_ip+0x70/0x80 [ 212.232407][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 212.237353][ C1] wg_packet_decrypt_worker+0x166/0x6e0 [ 212.242915][ C1] process_scheduled_works+0x4de/0x9e0 [ 212.248385][ C1] worker_thread+0x581/0x770 [ 212.252988][ C1] kthread+0x22a/0x280 [ 212.257063][ C1] ret_from_fork+0x150/0x360 [ 212.261681][ C1] ret_from_fork_asm+0x1a/0x30 [ 212.266462][ C1] [ 212.268782][ C1] read-write to 0xffff8881003b13d8 of 8 bytes by interrupt on cpu 1: [ 212.276844][ C1] can_rcv_filter+0x242/0x4f0 [ 212.281548][ C1] can_receive+0x13e/0x190 [ 212.286062][ C1] can_rcv+0x17d/0x1f0 [ 212.290144][ C1] process_backlog+0x363/0x670 [ 212.294930][ C1] __napi_poll+0x61/0x330 [ 212.299274][ C1] net_rx_action+0x452/0x930 [ 212.303935][ C1] handle_softirqs+0xb9/0x2a0 [ 212.308609][ C1] do_softirq+0x45/0x60 [ 212.312853][ C1] __local_bh_enable_ip+0x70/0x80 [ 212.317878][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 212.322818][ C1] lock_sock_nested+0x132/0x160 [ 212.327668][ C1] selinux_netlbl_socket_connect+0x26/0x130 [ 212.333574][ C1] selinux_socket_connect+0x57/0x70 [ 212.338793][ C1] security_socket_connect+0x44/0x80 [ 212.344081][ C1] __sys_connect+0x180/0x2a0 [ 212.348675][ C1] __x64_sys_connect+0x3f/0x50 [ 212.353439][ C1] x64_sys_call+0x2df0/0x3020 [ 212.358141][ C1] do_syscall_64+0x12c/0x370 [ 212.362732][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.368632][ C1] [ 212.370944][ C1] value changed: 0x00000000000b41cd -> 0x00000000000b41ce [ 212.378041][ C1] [ 212.380383][ C1] Reported by Kernel Concurrency Sanitizer on: [ 212.386531][ C1] CPU: 1 UID: 0 PID: 9965 Comm: syz.6.1498 Tainted: G W syzkaller #0 PREEMPT(full) [ 212.397396][ C1] Tainted: [W]=WARN [ 212.401190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.411241][ C1] ================================================================== [ 214.024359][ C0] ================================================================== [ 214.032480][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 214.039727][ C0] [ 214.042063][ C0] read-write to 0xffff888100a7ffb8 of 8 bytes by interrupt on cpu 1: [ 214.050132][ C0] can_rcv_filter+0xd9/0x4f0 [ 214.054751][ C0] can_receive+0x13e/0x190 [ 214.059170][ C0] can_rcv+0x17d/0x1f0 [ 214.063246][ C0] process_backlog+0x363/0x670 [ 214.068028][ C0] __napi_poll+0x61/0x330 [ 214.072377][ C0] net_rx_action+0x452/0x930 [ 214.076980][ C0] handle_softirqs+0xb9/0x2a0 [ 214.081651][ C0] do_softirq+0x45/0x60 [ 214.085802][ C0] __local_bh_enable_ip+0x70/0x80 [ 214.090824][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 214.095762][ C0] lock_sock_nested+0x132/0x160 [ 214.100611][ C0] tcp_recvmsg+0x112/0x460 [ 214.105027][ C0] inet_recvmsg+0xb7/0x290 [ 214.109447][ C0] sock_recvmsg+0xda/0x120 [ 214.113860][ C0] sock_read_iter+0x169/0x1b0 [ 214.118631][ C0] vfs_read+0x6c0/0x7f0 [ 214.122800][ C0] ksys_read+0xdc/0x1a0 [ 214.126973][ C0] __x64_sys_read+0x40/0x50 [ 214.131478][ C0] x64_sys_call+0x2886/0x3020 [ 214.136161][ C0] do_syscall_64+0x12c/0x370 [ 214.140761][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.146658][ C0] [ 214.148977][ C0] read-write to 0xffff888100a7ffb8 of 8 bytes by interrupt on cpu 0: [ 214.157035][ C0] can_rcv_filter+0xd9/0x4f0 [ 214.161636][ C0] can_receive+0x13e/0x190 [ 214.166067][ C0] can_rcv+0x17d/0x1f0 [ 214.170147][ C0] process_backlog+0x363/0x670 [ 214.174924][ C0] __napi_poll+0x61/0x330 [ 214.179260][ C0] net_rx_action+0x452/0x930 [ 214.183861][ C0] handle_softirqs+0xb9/0x2a0 [ 214.188536][ C0] do_softirq+0x45/0x60 [ 214.192692][ C0] __local_bh_enable_ip+0x70/0x80 [ 214.197721][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 214.202660][ C0] j1939_sk_sendmsg+0x86c/0xc00 [ 214.207520][ C0] ____sys_sendmsg+0x563/0x5b0 [ 214.212286][ C0] ___sys_sendmsg+0x195/0x1e0 [ 214.216974][ C0] __sys_sendmmsg+0x185/0x320 [ 214.221662][ C0] __x64_sys_sendmmsg+0x57/0x70 [ 214.226510][ C0] x64_sys_call+0x27aa/0x3020 [ 214.231184][ C0] do_syscall_64+0x12c/0x370 [ 214.235757][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.241635][ C0] [ 214.243941][ C0] value changed: 0x00000000000be217 -> 0x00000000000be218 [ 214.251030][ C0] [ 214.253334][ C0] Reported by Kernel Concurrency Sanitizer on: [ 214.259467][ C0] CPU: 0 UID: 0 PID: 9921 Comm: syz.0.1486 Tainted: G W syzkaller #0 PREEMPT(full) [ 214.270312][ C0] Tainted: [W]=WARN [ 214.274101][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.284153][ C0] ================================================================== [ 214.301481][ C0] ================================================================== [ 214.309578][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 214.316784][ C0] [ 214.319099][ C0] read-write to 0xffff88810016eec0 of 4 bytes by interrupt on cpu 1: [ 214.327162][ C0] can_can_gw_rcv+0x863/0x870 [ 214.331843][ C0] can_rcv_filter+0xc7/0x4f0 [ 214.336440][ C0] can_receive+0x13e/0x190 [ 214.340864][ C0] can_rcv+0x17d/0x1f0 [ 214.344946][ C0] process_backlog+0x363/0x670 [ 214.349726][ C0] __napi_poll+0x61/0x330 [ 214.354069][ C0] net_rx_action+0x452/0x930 [ 214.358672][ C0] handle_softirqs+0xb9/0x2a0 [ 214.363345][ C0] run_ksoftirqd+0x1c/0x30 [ 214.367760][ C0] smpboot_thread_fn+0x32a/0x510 [ 214.372702][ C0] kthread+0x22a/0x280 [ 214.376766][ C0] ret_from_fork+0x150/0x360 [ 214.381365][ C0] ret_from_fork_asm+0x1a/0x30 [ 214.386137][ C0] [ 214.388452][ C0] read-write to 0xffff88810016eec0 of 4 bytes by interrupt on cpu 0: [ 214.396510][ C0] can_can_gw_rcv+0x863/0x870 [ 214.401184][ C0] can_rcv_filter+0xc7/0x4f0 [ 214.405788][ C0] can_receive+0x13e/0x190 [ 214.410208][ C0] can_rcv+0x17d/0x1f0 [ 214.414296][ C0] process_backlog+0x363/0x670 [ 214.419077][ C0] __napi_poll+0x61/0x330 [ 214.423414][ C0] net_rx_action+0x452/0x930 [ 214.428047][ C0] handle_softirqs+0xb9/0x2a0 [ 214.432722][ C0] do_softirq+0x45/0x60 [ 214.436877][ C0] __local_bh_enable_ip+0x70/0x80 [ 214.441896][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 214.446837][ C0] wg_packet_encrypt_worker+0xd9c/0xde0 [ 214.452397][ C0] process_scheduled_works+0x4de/0x9e0 [ 214.457949][ C0] worker_thread+0x581/0x770 [ 214.462632][ C0] kthread+0x22a/0x280 [ 214.466697][ C0] ret_from_fork+0x150/0x360 [ 214.471296][ C0] ret_from_fork_asm+0x1a/0x30 [ 214.476073][ C0] [ 214.478384][ C0] value changed: 0x000c1493 -> 0x000c1494 [ 214.484091][ C0] [ 214.486404][ C0] Reported by Kernel Concurrency Sanitizer on: [ 214.492570][ C0] CPU: 0 UID: 0 PID: 3487 Comm: kworker/0:6 Tainted: G W syzkaller #0 PREEMPT(full) [ 214.503692][ C0] Tainted: [W]=WARN [ 214.507491][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.517539][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 214.524068][ C0] ================================================================== [ 215.192027][ C1] ================================================================== [ 215.200144][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 215.207362][ C1] [ 215.209672][ C1] read-write to 0xffff8881003b13d8 of 8 bytes by interrupt on cpu 0: [ 215.217726][ C1] can_rcv_filter+0x242/0x4f0 [ 215.222417][ C1] can_receive+0x13e/0x190 [ 215.226851][ C1] can_rcv+0x17d/0x1f0 [ 215.230943][ C1] process_backlog+0x363/0x670 [ 215.235721][ C1] __napi_poll+0x61/0x330 [ 215.240055][ C1] net_rx_action+0x452/0x930 [ 215.244653][ C1] handle_softirqs+0xb9/0x2a0 [ 215.249325][ C1] do_softirq+0x45/0x60 [ 215.253480][ C1] __local_bh_enable_ip+0x70/0x80 [ 215.258506][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 215.263452][ C1] lock_sock_nested+0x132/0x160 [ 215.268301][ C1] j1939_sk_sendmsg+0x4f/0xc00 [ 215.273083][ C1] ____sys_sendmsg+0x563/0x5b0 [ 215.277847][ C1] ___sys_sendmsg+0x195/0x1e0 [ 215.282538][ C1] __sys_sendmmsg+0x185/0x320 [ 215.287219][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 215.292068][ C1] x64_sys_call+0x27aa/0x3020 [ 215.296753][ C1] do_syscall_64+0x12c/0x370 [ 215.301341][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.307232][ C1] [ 215.309542][ C1] read-write to 0xffff8881003b13d8 of 8 bytes by interrupt on cpu 1: [ 215.317599][ C1] can_rcv_filter+0x242/0x4f0 [ 215.322288][ C1] can_receive+0x13e/0x190 [ 215.326801][ C1] can_rcv+0x17d/0x1f0 [ 215.330874][ C1] process_backlog+0x363/0x670 [ 215.335657][ C1] __napi_poll+0x61/0x330 [ 215.339993][ C1] net_rx_action+0x452/0x930 [ 215.344596][ C1] handle_softirqs+0xb9/0x2a0 [ 215.349266][ C1] do_softirq+0x45/0x60 [ 215.353420][ C1] __local_bh_enable_ip+0x70/0x80 [ 215.358452][ C1] __alloc_skb+0x658/0x690 [ 215.362899][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 215.368537][ C1] process_scheduled_works+0x4de/0x9e0 [ 215.374001][ C1] worker_thread+0x581/0x770 [ 215.378606][ C1] kthread+0x22a/0x280 [ 215.382667][ C1] ret_from_fork+0x150/0x360 [ 215.387268][ C1] ret_from_fork_asm+0x1a/0x30 [ 215.392038][ C1] [ 215.394357][ C1] value changed: 0x00000000000d2de8 -> 0x00000000000d2de9 [ 215.401540][ C1] [ 215.403855][ C1] Reported by Kernel Concurrency Sanitizer on: [ 215.409997][ C1] CPU: 1 UID: 0 PID: 4512 Comm: kworker/u8:36 Tainted: G W syzkaller #0 PREEMPT(full) [ 215.421118][ C1] Tainted: [W]=WARN [ 215.424931][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.434979][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 215.441741][ C1] ================================================================== [ 217.030373][ C1] ================================================================== [ 217.038487][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 217.045712][ C1] [ 217.048026][ C1] read-write to 0xffff888100a7ffb8 of 8 bytes by interrupt on cpu 0: [ 217.056102][ C1] can_rcv_filter+0xd9/0x4f0 [ 217.060715][ C1] can_receive+0x13e/0x190 [ 217.065149][ C1] can_rcv+0x17d/0x1f0 [ 217.069228][ C1] process_backlog+0x363/0x670 [ 217.074018][ C1] __napi_poll+0x61/0x330 [ 217.078365][ C1] net_rx_action+0x452/0x930 [ 217.082981][ C1] handle_softirqs+0xb9/0x2a0 [ 217.087659][ C1] do_softirq+0x45/0x60 [ 217.091867][ C1] __local_bh_enable_ip+0x70/0x80 [ 217.096895][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 217.101840][ C1] j1939_session_activate+0x1d3/0x220 [ 217.107217][ C1] j1939_sk_sendmsg+0x890/0xc00 [ 217.112086][ C1] ____sys_sendmsg+0x563/0x5b0 [ 217.116861][ C1] ___sys_sendmsg+0x195/0x1e0 [ 217.121546][ C1] __sys_sendmmsg+0x185/0x320 [ 217.126328][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 217.131189][ C1] x64_sys_call+0x27aa/0x3020 [ 217.135875][ C1] do_syscall_64+0x12c/0x370 [ 217.140467][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.146444][ C1] [ 217.148765][ C1] read-write to 0xffff888100a7ffb8 of 8 bytes by interrupt on cpu 1: [ 217.156920][ C1] can_rcv_filter+0xd9/0x4f0 [ 217.161523][ C1] can_receive+0x13e/0x190 [ 217.165949][ C1] can_rcv+0x17d/0x1f0 [ 217.170036][ C1] process_backlog+0x363/0x670 [ 217.174820][ C1] __napi_poll+0x61/0x330 [ 217.179178][ C1] net_rx_action+0x452/0x930 [ 217.183784][ C1] handle_softirqs+0xb9/0x2a0 [ 217.188469][ C1] do_softirq+0x45/0x60 [ 217.192623][ C1] __local_bh_enable_ip+0x70/0x80 [ 217.197671][ C1] __alloc_skb+0x658/0x690 [ 217.202099][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 217.207736][ C1] process_scheduled_works+0x4de/0x9e0 [ 217.213205][ C1] worker_thread+0x581/0x770 [ 217.217806][ C1] kthread+0x22a/0x280 [ 217.221873][ C1] ret_from_fork+0x150/0x360 [ 217.226473][ C1] ret_from_fork_asm+0x1a/0x30 [ 217.231245][ C1] [ 217.233569][ C1] value changed: 0x000000000010004f -> 0x0000000000100050 [ 217.240684][ C1] [ 217.243101][ C1] Reported by Kernel Concurrency Sanitizer on: [ 217.249250][ C1] CPU: 1 UID: 0 PID: 70 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(full) [ 217.260195][ C1] Tainted: [W]=WARN [ 217.263998][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.274057][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 217.280821][ C1] ================================================================== [ 217.313585][ C0] ================================================================== [ 217.321693][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 217.328906][ C0] [ 217.331222][ C0] read-write to 0xffff88810016eec0 of 4 bytes by interrupt on cpu 1: [ 217.339551][ C0] can_can_gw_rcv+0x863/0x870 [ 217.344228][ C0] can_rcv_filter+0xc7/0x4f0 [ 217.348830][ C0] can_receive+0x13e/0x190 [ 217.353251][ C0] can_rcv+0x17d/0x1f0 [ 217.357327][ C0] process_backlog+0x363/0x670 [ 217.362105][ C0] __napi_poll+0x61/0x330 [ 217.366441][ C0] net_rx_action+0x452/0x930 [ 217.371049][ C0] handle_softirqs+0xb9/0x2a0 [ 217.375764][ C0] do_softirq+0x45/0x60 [ 217.379932][ C0] __local_bh_enable_ip+0x70/0x80 [ 217.384958][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 217.389898][ C0] batadv_tt_local_purge+0x1a8/0x1f0 [ 217.395185][ C0] batadv_tt_purge+0x2b/0x610 [ 217.399860][ C0] process_scheduled_works+0x4de/0x9e0 [ 217.405332][ C0] worker_thread+0x581/0x770 [ 217.409965][ C0] kthread+0x22a/0x280 [ 217.414037][ C0] ret_from_fork+0x150/0x360 [ 217.418633][ C0] ret_from_fork_asm+0x1a/0x30 [ 217.423406][ C0] [ 217.425731][ C0] read-write to 0xffff88810016eec0 of 4 bytes by interrupt on cpu 0: [ 217.433792][ C0] can_can_gw_rcv+0x863/0x870 [ 217.438481][ C0] can_rcv_filter+0xc7/0x4f0 [ 217.443085][ C0] can_receive+0x13e/0x190 [ 217.447509][ C0] can_rcv+0x17d/0x1f0 [ 217.451587][ C0] process_backlog+0x363/0x670 [ 217.456366][ C0] __napi_poll+0x61/0x330 [ 217.460707][ C0] net_rx_action+0x452/0x930 [ 217.465331][ C0] handle_softirqs+0xb9/0x2a0 [ 217.470009][ C0] __irq_exit_rcu+0x39/0xc0 [ 217.474508][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 217.480169][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.486155][ C0] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 217.491790][ C0] hrtimer_start_range_ns+0xd3b/0x10f0 [ 217.497249][ C0] j1939_tp_schedule_txtimer+0x68/0xa0 [ 217.502716][ C0] j1939_sk_sendmsg+0x8b2/0xc00 [ 217.507576][ C0] ____sys_sendmsg+0x563/0x5b0 [ 217.512344][ C0] ___sys_sendmsg+0x195/0x1e0 [ 217.517028][ C0] __sys_sendmmsg+0x185/0x320 [ 217.521718][ C0] __x64_sys_sendmmsg+0x57/0x70 [ 217.526766][ C0] x64_sys_call+0x27aa/0x3020 [ 217.531457][ C0] do_syscall_64+0x12c/0x370 [ 217.536137][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.542034][ C0] [ 217.544347][ C0] value changed: 0x00104122 -> 0x00104123 [ 217.550059][ C0] [ 217.552387][ C0] Reported by Kernel Concurrency Sanitizer on: [ 217.558542][ C0] CPU: 0 UID: 0 PID: 9921 Comm: syz.0.1486 Tainted: G W syzkaller #0 PREEMPT(full) [ 217.569404][ C0] Tainted: [W]=WARN [ 217.573206][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.583259][ C0] ================================================================== [ 218.268938][ C1] ================================================================== [ 218.277046][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 218.284283][ C1] [ 218.286599][ C1] read-write to 0xffff8881003b13d8 of 8 bytes by interrupt on cpu 0: [ 218.294658][ C1] can_rcv_filter+0x242/0x4f0 [ 218.299357][ C1] can_receive+0x13e/0x190 [ 218.303779][ C1] can_rcv+0x17d/0x1f0 [ 218.307867][ C1] process_backlog+0x363/0x670 [ 218.312737][ C1] __napi_poll+0x61/0x330 [ 218.317425][ C1] net_rx_action+0x452/0x930 [ 218.322121][ C1] handle_softirqs+0xb9/0x2a0 [ 218.326798][ C1] do_softirq+0x45/0x60 [ 218.330956][ C1] __local_bh_enable_ip+0x70/0x80 [ 218.335990][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 218.340929][ C1] j1939_session_activate+0x1d3/0x220 [ 218.346308][ C1] j1939_sk_sendmsg+0x890/0xc00 [ 218.351172][ C1] ____sys_sendmsg+0x563/0x5b0 [ 218.355944][ C1] ___sys_sendmsg+0x195/0x1e0 [ 218.360624][ C1] __sys_sendmmsg+0x185/0x320 [ 218.365494][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 218.370361][ C1] x64_sys_call+0x27aa/0x3020 [ 218.375050][ C1] do_syscall_64+0x12c/0x370 [ 218.379645][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.385546][ C1] [ 218.387857][ C1] read-write to 0xffff8881003b13d8 of 8 bytes by interrupt on cpu 1: [ 218.395913][ C1] can_rcv_filter+0x242/0x4f0 [ 218.400629][ C1] can_receive+0x13e/0x190 [ 218.405058][ C1] can_rcv+0x17d/0x1f0 [ 218.409136][ C1] process_backlog+0x363/0x670 [ 218.413915][ C1] __napi_poll+0x61/0x330 [ 218.418257][ C1] net_rx_action+0x452/0x930 [ 218.422856][ C1] handle_softirqs+0xb9/0x2a0 [ 218.427530][ C1] do_softirq+0x45/0x60 [ 218.431680][ C1] __local_bh_enable_ip+0x70/0x80 [ 218.436704][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 218.441648][ C1] batadv_tt_local_purge+0x1a8/0x1f0 [ 218.446937][ C1] batadv_tt_purge+0x2b/0x610 [ 218.451614][ C1] process_scheduled_works+0x4de/0x9e0 [ 218.457087][ C1] worker_thread+0x581/0x770 [ 218.461684][ C1] kthread+0x22a/0x280 [ 218.465749][ C1] ret_from_fork+0x150/0x360 [ 218.470363][ C1] ret_from_fork_asm+0x1a/0x30 [ 218.475152][ C1] [ 218.477524][ C1] value changed: 0x0000000000116584 -> 0x0000000000116585 [ 218.484708][ C1] [ 218.487019][ C1] Reported by Kernel Concurrency Sanitizer on: [ 218.493169][ C1] CPU: 1 UID: 0 PID: 4501 Comm: kworker/u8:33 Tainted: G W syzkaller #0 PREEMPT(full) [ 218.504284][ C1] Tainted: [W]=WARN [ 218.508084][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.518141][ C1] Workqueue: bat_events batadv_tt_purge [ 218.523695][ C1] ================================================================== [ 220.040364][ C1] ================================================================== [ 220.048479][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 220.055720][ C1] [ 220.058046][ C1] read-write to 0xffff888100a7ffb8 of 8 bytes by interrupt on cpu 0: [ 220.066110][ C1] can_rcv_filter+0xd9/0x4f0 [ 220.070722][ C1] can_receive+0x13e/0x190 [ 220.075157][ C1] can_rcv+0x17d/0x1f0 [ 220.079234][ C1] process_backlog+0x363/0x670 [ 220.084012][ C1] __napi_poll+0x61/0x330 [ 220.088365][ C1] net_rx_action+0x452/0x930 [ 220.093489][ C1] handle_softirqs+0xb9/0x2a0 [ 220.098172][ C1] do_softirq+0x45/0x60 [ 220.102339][ C1] __local_bh_enable_ip+0x70/0x80 [ 220.107365][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 220.112302][ C1] j1939_sk_sendmsg+0x86c/0xc00 [ 220.117165][ C1] ____sys_sendmsg+0x563/0x5b0 [ 220.121937][ C1] ___sys_sendmsg+0x195/0x1e0 [ 220.126625][ C1] __sys_sendmmsg+0x185/0x320 [ 220.131305][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 220.136164][ C1] x64_sys_call+0x27aa/0x3020 [ 220.140845][ C1] do_syscall_64+0x12c/0x370 [ 220.145433][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.151324][ C1] [ 220.153640][ C1] read-write to 0xffff888100a7ffb8 of 8 bytes by interrupt on cpu 1: [ 220.161702][ C1] can_rcv_filter+0xd9/0x4f0 [ 220.166309][ C1] can_receive+0x13e/0x190 [ 220.170779][ C1] can_rcv+0x17d/0x1f0 [ 220.174854][ C1] process_backlog+0x363/0x670 [ 220.179631][ C1] __napi_poll+0x61/0x330 [ 220.183966][ C1] net_rx_action+0x452/0x930 [ 220.188568][ C1] handle_softirqs+0xb9/0x2a0 [ 220.193502][ C1] do_softirq+0x45/0x60 [ 220.197655][ C1] __local_bh_enable_ip+0x70/0x80 [ 220.202683][ C1] kernel_fpu_end+0x6c/0x80 [ 220.207193][ C1] blake2s_compress+0x67/0x1740 [ 220.212057][ C1] blake2s_update+0xa3/0x160 [ 220.216649][ C1] hmac+0x396/0x400 [ 220.220463][ C1] kdf+0x118/0x1e0 [ 220.224182][ C1] wg_noise_handshake_create_initiation+0x372/0x610 [ 220.230779][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 220.236858][ C1] process_scheduled_works+0x4de/0x9e0 [ 220.242408][ C1] worker_thread+0x581/0x770 [ 220.247004][ C1] kthread+0x22a/0x280 [ 220.251070][ C1] ret_from_fork+0x150/0x360 [ 220.255680][ C1] ret_from_fork_asm+0x1a/0x30 [ 220.260462][ C1] [ 220.262775][ C1] value changed: 0x0000000000141e60 -> 0x0000000000141e61 [ 220.269869][ C1] [ 220.272269][ C1] Reported by Kernel Concurrency Sanitizer on: [ 220.278417][ C1] CPU: 1 UID: 0 PID: 4466 Comm: kworker/u8:20 Tainted: G W syzkaller #0 PREEMPT(full) [ 220.289538][ C1] Tainted: [W]=WARN [ 220.293337][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.303480][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 220.310448][ C1] ================================================================== [ 220.320111][ C1] ================================================================== [ 220.328275][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 220.335481][ C1] [ 220.337796][ C1] read-write to 0xffff88810016eec0 of 4 bytes by interrupt on cpu 0: [ 220.345852][ C1] can_can_gw_rcv+0x863/0x870 [ 220.350531][ C1] can_rcv_filter+0xc7/0x4f0 [ 220.355129][ C1] can_receive+0x13e/0x190 [ 220.359556][ C1] can_rcv+0x17d/0x1f0 [ 220.363645][ C1] process_backlog+0x363/0x670 [ 220.368430][ C1] __napi_poll+0x61/0x330 [ 220.372856][ C1] net_rx_action+0x452/0x930 [ 220.377458][ C1] handle_softirqs+0xb9/0x2a0 [ 220.382131][ C1] do_softirq+0x45/0x60 [ 220.386294][ C1] __local_bh_enable_ip+0x70/0x80 [ 220.391409][ C1] __alloc_skb+0x2b6/0x690 [ 220.395833][ C1] alloc_skb_with_frags+0x7d/0x470 [ 220.400946][ C1] sock_alloc_send_pskb+0x44d/0x500 [ 220.406156][ C1] j1939_sk_sendmsg+0x4cb/0xc00 [ 220.411014][ C1] ____sys_sendmsg+0x563/0x5b0 [ 220.415778][ C1] ___sys_sendmsg+0x195/0x1e0 [ 220.420463][ C1] __sys_sendmmsg+0x185/0x320 [ 220.425147][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 220.430009][ C1] x64_sys_call+0x27aa/0x3020 [ 220.434689][ C1] do_syscall_64+0x12c/0x370 [ 220.439281][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.445170][ C1] [ 220.447481][ C1] read-write to 0xffff88810016eec0 of 4 bytes by interrupt on cpu 1: [ 220.455539][ C1] can_can_gw_rcv+0x863/0x870 [ 220.460565][ C1] can_rcv_filter+0xc7/0x4f0 [ 220.465161][ C1] can_receive+0x13e/0x190 [ 220.469594][ C1] can_rcv+0x17d/0x1f0 [ 220.473670][ C1] process_backlog+0x363/0x670 [ 220.478459][ C1] __napi_poll+0x61/0x330 [ 220.482806][ C1] net_rx_action+0x452/0x930 [ 220.487404][ C1] handle_softirqs+0xb9/0x2a0 [ 220.492081][ C1] do_softirq+0x45/0x60 [ 220.496231][ C1] __local_bh_enable_ip+0x70/0x80 [ 220.501253][ C1] __alloc_skb+0x658/0x690 [ 220.505680][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 220.511317][ C1] process_scheduled_works+0x4de/0x9e0 [ 220.516783][ C1] worker_thread+0x581/0x770 [ 220.521386][ C1] kthread+0x22a/0x280 [ 220.525455][ C1] ret_from_fork+0x150/0x360 [ 220.530062][ C1] ret_from_fork_asm+0x1a/0x30 [ 220.534832][ C1] [ 220.537144][ C1] value changed: 0x00145a0c -> 0x00145a0d [ 220.542847][ C1] [ 220.545159][ C1] Reported by Kernel Concurrency Sanitizer on: [ 220.551386][ C1] CPU: 1 UID: 0 PID: 4495 Comm: kworker/u8:30 Tainted: G W syzkaller #0 PREEMPT(full) [ 220.562498][ C1] Tainted: [W]=WARN [ 220.566291][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.576345][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 220.583197][ C1] ================================================================== [ 221.302891][ C0] ================================================================== [ 221.311002][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 221.318233][ C0] [ 221.320546][ C0] read-write to 0xffff8881003b13d8 of 8 bytes by interrupt on cpu 1: [ 221.328599][ C0] can_rcv_filter+0x242/0x4f0 [ 221.333284][ C0] can_receive+0x13e/0x190 [ 221.337716][ C0] can_rcv+0x17d/0x1f0 [ 221.341792][ C0] process_backlog+0x363/0x670 [ 221.346566][ C0] __napi_poll+0x61/0x330 [ 221.350903][ C0] net_rx_action+0x452/0x930 [ 221.355498][ C0] handle_softirqs+0xb9/0x2a0 [ 221.360175][ C0] do_softirq+0x45/0x60 [ 221.364417][ C0] __local_bh_enable_ip+0x70/0x80 [ 221.369435][ C0] kernel_fpu_end+0x6c/0x80 [ 221.373942][ C0] blake2s_compress+0x67/0x1740 [ 221.378800][ C0] blake2s_final+0x6a/0xa0 [ 221.383227][ C0] wg_cookie_add_mac_to_packet+0x17f/0x3a0 [ 221.389046][ C0] wg_packet_handshake_send_worker+0xd0/0x160 [ 221.395146][ C0] process_scheduled_works+0x4de/0x9e0 [ 221.400627][ C0] worker_thread+0x581/0x770 [ 221.405238][ C0] kthread+0x22a/0x280 [ 221.409315][ C0] ret_from_fork+0x150/0x360 [ 221.413914][ C0] ret_from_fork_asm+0x1a/0x30 [ 221.418688][ C0] [ 221.421008][ C0] read-write to 0xffff8881003b13d8 of 8 bytes by interrupt on cpu 0: [ 221.429071][ C0] can_rcv_filter+0x242/0x4f0 [ 221.433845][ C0] can_receive+0x13e/0x190 [ 221.438271][ C0] can_rcv+0x17d/0x1f0 [ 221.442353][ C0] process_backlog+0x363/0x670 [ 221.447126][ C0] __napi_poll+0x61/0x330 [ 221.451474][ C0] net_rx_action+0x452/0x930 [ 221.456075][ C0] handle_softirqs+0xb9/0x2a0 [ 221.460747][ C0] do_softirq+0x45/0x60 [ 221.464903][ C0] __local_bh_enable_ip+0x70/0x80 [ 221.469927][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 221.474870][ C0] j1939_session_activate+0x1d3/0x220 [ 221.480289][ C0] j1939_sk_sendmsg+0x890/0xc00 [ 221.485169][ C0] ____sys_sendmsg+0x563/0x5b0 [ 221.489973][ C0] ___sys_sendmsg+0x195/0x1e0 [ 221.494659][ C0] __sys_sendmmsg+0x185/0x320 [ 221.499349][ C0] __x64_sys_sendmmsg+0x57/0x70 [ 221.504209][ C0] x64_sys_call+0x27aa/0x3020 [ 221.508890][ C0] do_syscall_64+0x12c/0x370 [ 221.513474][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.519371][ C0] [ 221.521687][ C0] value changed: 0x0000000000158c76 -> 0x0000000000158c77 [ 221.528786][ C0] [ 221.531099][ C0] Reported by Kernel Concurrency Sanitizer on: [ 221.537245][ C0] CPU: 0 UID: 0 PID: 9921 Comm: syz.0.1486 Tainted: G W syzkaller #0 PREEMPT(full) [ 221.548095][ C0] Tainted: [W]=WARN [ 221.551897][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.561946][ C0] ==================================================================