last executing test programs: 3m10.758095268s ago: executing program 32 (id=999): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x28, r2, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x124, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_REG_RULES={0xf0, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfddf0a3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfa}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xcae4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7e}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x16}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}]}, 0x124}, 0x1, 0x0, 0x0, 0x4044080}, 0x4004000) 3m2.096356706s ago: executing program 33 (id=1080): r0 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x11, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x9, 0xffff}, {0x4, 0xfff1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 3m1.016047141s ago: executing program 34 (id=950): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) (fail_nth: 4) 2m40.232609506s ago: executing program 35 (id=1403): r0 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x578fed44caa332b9, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) r1 = socket(0x10, 0x803, 0x0) unshare(0x4000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) cachestat(r2, 0x0, 0x0, 0x0) readlink(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x428a4, 0x10c}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, 0x0) 2m34.296373741s ago: executing program 36 (id=1473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x331, 0x70bd2c, 0x25dfdbf8, {0xb}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) 2m30.960314948s ago: executing program 6 (id=1504): r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xffffffbe, 0x2, 0x83, 0x3ac}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000340)) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0xd8e8, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x106200, 0x7, 0x2053, 0x2, 0xa, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x1000) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r6, 0x0, r5, 0x0, 0x264) io_uring_enter(r0, 0x8a1, 0x8930, 0x6, 0x0, 0x0) 2m30.521208298s ago: executing program 6 (id=1509): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x200}) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x10) (fail_nth: 1) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x880) 2m30.196845655s ago: executing program 6 (id=1511): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={&(0x7f0000000480), 0x7}, 0x204, 0x8, 0x41a1bd76, 0x3, 0xdb0, 0x6, 0x2, 0x0, 0x1e1, 0x0, 0x7}, 0x0, 0x4000000000, r0, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) (async, rerun: 32) timer_gettime(0x0, &(0x7f0000000240)) (async, rerun: 32) fchdir(r0) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 32) r3 = gettid() (async) setrlimit(0x1, &(0x7f0000000100)={0x2, 0x8}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e4, 0x0) (async) r5 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r6, 0x1, 0x32, 0x0, &(0x7f0000000000)) (async) getdents(r5, &(0x7f0000000380)=""/244, 0xf4) (async) write$binfmt_format(r5, &(0x7f0000000180)='0\x00', 0x2) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x400, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8040) 2m29.815864634s ago: executing program 6 (id=1515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3c00028038"], 0x58}}, 0x4c004) (fail_nth: 1) 2m29.333917285s ago: executing program 6 (id=1518): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x9, @empty, 0xfffffe01}}}, 0x108) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x20048090) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x593, &(0x7f0000000b40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) creat(&(0x7f0000000200)='./bus\x00', 0x268) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@inlinecrypt}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) file_setattr(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x10, 0x7, 0x0, 0x8, 0x5}, 0x18, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) pipe2(0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2m28.889619785s ago: executing program 6 (id=1521): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) r3 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) r4 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xe8) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$MRT6(r6, 0x29, 0xd0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000480)=ANY=[], 0x9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x3ff, @remote, 0xff}}, 0x0, 0x0, 0x23, 0x0, "009b59557dc1b5123c64fcc67df9901d7a2e8a8ab8af14f15749796d758da20e43d329589647ea9f6a817312d894acc8525f60c827120fe6ba22affcc0260520dbbe61e312ce83b5f61534b6d6bb6ffd"}, 0xd8) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x9, @loopback, 0x1}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d01000000a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) 2m13.692988872s ago: executing program 37 (id=1521): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) r3 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) r4 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xe8) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$MRT6(r6, 0x29, 0xd0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000480)=ANY=[], 0x9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x3ff, @remote, 0xff}}, 0x0, 0x0, 0x23, 0x0, "009b59557dc1b5123c64fcc67df9901d7a2e8a8ab8af14f15749796d758da20e43d329589647ea9f6a817312d894acc8525f60c827120fe6ba22affcc0260520dbbe61e312ce83b5f61534b6d6bb6ffd"}, 0xd8) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x9, @loopback, 0x1}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d01000000a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) 2m2.188711326s ago: executing program 9 (id=1730): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m2.110536267s ago: executing program 9 (id=1732): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="61e0ec2b1e5b57ad8be341630586bf5fcdcb"], 0x9) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000340)=0xd56, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r5, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r8, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) sendmmsg$unix(r7, 0x0, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) 2m1.924341032s ago: executing program 9 (id=1736): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = dup(r1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x400, 0x4}, &(0x7f0000000180)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000180)=[{&(0x7f0000000600)="8e41117da2b7fd77a1288db007135f4533a580a7c2599e93957d83eee6554ab5e8e498496f24e1353809a36a7ec7b713e383b349289b35e067b227382c636f73bb", 0x41}, {&(0x7f0000002c80)="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", 0x1000}], 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1900000004000000040000f03d00000000000000", @ANYRESOCT=r5, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRESDEC], 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r7, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r8, 0x1}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r9, r11, 0x25, 0x2, @void}, 0x10) connect$can_bcm(r5, &(0x7f0000000580)={0x1d, r11}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents64(r12, &(0x7f0000000100)=""/1000, 0x3e8) openat(r12, &(0x7f0000000143), 0x822082, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r14, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a00", @ANYRES32=r0, @ANYBLOB="06001f"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r14, @ANYRESDEC=r4, @ANYRES16=r12, @ANYRES8=r1], 0x40}, 0x1, 0x0, 0x0, 0x14008000}, 0x40040) 2m1.064199352s ago: executing program 9 (id=1748): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x9, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f0000003780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="15060000f2ff01000000030000003000018014000400ff01000000000000"], 0x44}, 0x5}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x40, 0x6, 0xd}, 0x8, 0x4, 0x107f, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) connect$802154_dgram(r5, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(r5, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x4f8, 0x30, 0x9e54f29ff072a93b, 0x100, 0x25dfdbfb, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x20000000, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x148, 0x1, [@m_nat={0x144, 0x17, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x5, 0xffffffffffffffff, 0x8}, @broadcast, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x5, 0xffffffffffffffff, 0xfffffffe, 0x6}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x7, 0x8, 0x0, 0xd77}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xfffffffa, 0x5, 0x2, 0xc}, @remote, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x3, 0x1000, 0x3}, @empty, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x6e, 0x3, 0x80, 0x6}, @loopback, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x106, 0x3, 0x20000000, 0x0, 0x1}, @private=0xa010100, @local, 0xff000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}]}, {0x34c, 0x1, [@m_bpf={0xec, 0x8, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf, 0x7, 0x1, 0x6801, 0x5db7}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x4, 0x9, 0x4, 0x5}, {0xf5cf, 0x1, 0x8, 0x7}, {0xb033, 0xa, 0x3, 0x1}, {0xf, 0x3, 0x2, 0x5}, {0x5c, 0x7, 0x26, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xa6, 0x7613, 0x6, 0xc3a, 0x10001}}]}, {0x66, 0x6, "1b449311b8037d77cffbf039d76c51f08270be9ccd4a66158e30c07e4ae944e98592f1f97200011beb8b3de2454bd4f3275bd63ec67d7ca1bf3a0c26b133e25a3e22a32e2bc6465ffd8ac84a9d892c4c46518b3c2bd69ba935e8e11573c5e95852d8"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x184, 0x17, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'csum\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xc7, 0x9, 0x6, 0x23, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0xe, 0x4, 0x3, 0x7fffffff, 0xacf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x94000, 0x1, 0x6, 0x42, 0x1}}, @TCA_DEF_DATA={0x9, 0x3, 'csum\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'csum\x00'}]}, {0xe4, 0x6, "8c03586e1dba21af6f3910139096fe7dc5feddf40c0ea5656718eaa7244dc7557a94da02549a4ade14e1c9bdd02bda3370aaf6264e92e3374140038be3d7a5a14c28d4b8d663a1c17edd77203b75c5deba1cf4470ef7bdad5d079ae85f06dba591b9145819ea040d9829a1b018aee7544f8f238b4d7244c716be0bf9c0dc3470844309cda165cda1928d1f7ddaddf3126ea1ec4b1f03838d2ef46b5fe1556e08c505f0d6d3fd023843e6c2b7611c690e83c39407a1fe1ee1b79354acbe4290d13ab4dfb3ed54efb5b0a04666cf497bf52f32a3669a9851a5e8ae31a5f24d26f9"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xd8, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0xae, 0x6, "ef4dbd11bc3cb4f94efe2354ceee28efed65891bd8c2a25844f91edd9d21e71a575b16333e903a8559ac348816fea9853c7f0ba914edd167f283bb655eff649be27b66c8a2002f78f7edab8077a0f462b7dd025ea58c2f0c1a49b613538cef71a559a5f4e1760d513dd7b017a3682cfea73f979bbb501cf2354106bc362f22d1b03882af9feb80935986035fdda185ecd4de899823ea08e928fb7185e1b3ed355200ff74c157f45f983d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m0.783921638s ago: executing program 9 (id=1753): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000140)={r1, 0x2}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x804f1a, &(0x7f00000000c0), 0x41, 0x4cc, &(0x7f0000000c00)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f"}, 0xd) write$binfmt_aout(r1, &(0x7f0000001340)=ANY=[@ANYBLOB="0801ee"], 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x2, 0x4}}, 0x20) 2m0.492889154s ago: executing program 9 (id=1754): r0 = getpid() (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_pidfd_open(r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x352, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) (async) r1 = getpid() (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @rand_addr=0x640100ff}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x57, 0x0, 0x0, 0x0, 0x4, 0x0, 0xcfb, 0x3, 0xd}) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x20019e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) (async) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040a01e9ffffff"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./proc/sys/net/ipv4/ping_group_range\x00', 0x1000040, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nouid32}, {@nomblk_io_submit}, {@orlov}, {@lazytime}]}, 0x1, 0x5ae, &(0x7f0000000880)="$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") (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x80810, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) (async) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x103}, 0x204, 0x6, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) dup3(r4, r3, 0x80000) (async) openat$incfs(r3, &(0x7f0000000140)='.pending_reads\x00', 0x200500, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1m45.44089576s ago: executing program 38 (id=1754): r0 = getpid() (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_pidfd_open(r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x352, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) (async) r1 = getpid() (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @rand_addr=0x640100ff}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x57, 0x0, 0x0, 0x0, 0x4, 0x0, 0xcfb, 0x3, 0xd}) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x20019e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) (async) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040a01e9ffffff"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./proc/sys/net/ipv4/ping_group_range\x00', 0x1000040, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nouid32}, {@nomblk_io_submit}, {@orlov}, {@lazytime}]}, 0x1, 0x5ae, &(0x7f0000000880)="$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") (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x80810, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) (async) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x103}, 0x204, 0x6, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) dup3(r4, r3, 0x80000) (async) openat$incfs(r3, &(0x7f0000000140)='.pending_reads\x00', 0x200500, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 35.773882382s ago: executing program 2 (id=2764): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) 35.741414703s ago: executing program 2 (id=2766): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80010000}, 0x48) 35.683575645s ago: executing program 2 (id=2768): socket(0x3, 0x3, 0x0) (async) r0 = socket(0x3, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) syz_emit_ethernet(0xfc6, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xa}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xa}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 30.2911703s ago: executing program 2 (id=2771): r0 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = fsopen(&(0x7f0000000100)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000180)='\x00\x1f\"\f\x00\x00\"\x00\x04\x00\x00', 0x0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000003300)=""/4064, 0xfe0}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5ada, &(0x7f0000000000)={0x0, 0x242a, 0x100, 0x3, 0x2a1, 0x0, r2}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) pwrite64(r3, &(0x7f00000001c0)="103f401372dbc0c147fcb11b2adb9beda0a5a48b12d704cfc79de809e69e59628d7a13572810ef4bb8d9155b8100ea71ca9b87539ada2278e1a65d2d03e49a10fe8feb91a6e8a691a56d5b40b4b03e7ade2e57cb27d98cf3fc58f0463b1c6709f8122982e1d1cac8f551096311ffb13d130278f3facbb8450f5a5246b5af640c", 0x80, 0x9) fcntl$setlease(r3, 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\t\x00J~(|LT'], 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000040)='./file0\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002fc0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0) read(r6, &(0x7f0000000500)=""/200, 0xc8) r7 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r7) socket$packet(0x11, 0x3, 0x300) 30.048680996s ago: executing program 3 (id=2856): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) listen(0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @remote, [0xffffff00, 0xff, 0xffffff00, 0xff], [0xff, 0xff000000, 0xff], 'gre0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x21, 0x6f, 0x4, 0x10}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "a47cbcb522148bf45497db28ed85ef4fa1d2df714a8a1731a899fb3afd24"}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x9, 0x0, 0x9, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x2, 0x2, 0x0, 0x4005, 0x0}) 29.960912719s ago: executing program 3 (id=2858): r0 = inotify_init1(0x80000) r1 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x4) fcntl$notify(r1, 0x402, 0x4000000c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futimesat(r1, &(0x7f0000000380)='./file0/file2\x00', &(0x7f0000000440)={{r2, r3/1000+60000}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) r4 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x30) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = dup(r0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000140)={0x8, 'lo\x00', {'erspan0\x00'}, 0x1800}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2800011, &(0x7f0000000300)={[{@huge_always}, {@inode64}, {@grpquota}, {@inode32}, {@gid={'gid', 0x3d, r7}}, {@huge_advise}, {@quota}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) inotify_rm_watch(r6, r4) 29.881616921s ago: executing program 3 (id=2859): prctl$PR_SET_SECUREBITS(0x1c, 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x8, 0x5, 0x4, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204a400ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000180100002020642500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0xd, 0x0, &(0x7f0000000140)=""/13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300003d7c1ab800080a0102000000000000060900010073797a1100000000140000001100010000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2dc, @mcast1, 0x9}, 0x1c) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000180), 0xffffffffffffff80) (rerun: 32) listen(r4, 0x9) (async) accept4$inet6(r4, 0x0, 0x0, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000680009"], 0x18}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 29.857886751s ago: executing program 2 (id=2861): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 28.728787607s ago: executing program 3 (id=2872): r0 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = fsopen(&(0x7f0000000100)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000180)='\x00\x1f\"\f\x00\x00\"\x00\x04\x00\x00', 0x0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000003300)=""/4064, 0xfe0}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5ada, &(0x7f0000000000)={0x0, 0x242a, 0x100, 0x3, 0x2a1, 0x0, r2}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) pwrite64(r3, &(0x7f00000001c0)="103f401372dbc0c147fcb11b2adb9beda0a5a48b12d704cfc79de809e69e59628d7a13572810ef4bb8d9155b8100ea71ca9b87539ada2278e1a65d2d03e49a10fe8feb91a6e8a691a56d5b40b4b03e7ade2e57cb27d98cf3fc58f0463b1c6709f8122982e1d1cac8f551096311ffb13d130278f3facbb8450f5a5246b5af640c", 0x80, 0x9) fcntl$setlease(r3, 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\t\x00J~(|LT'], 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000040)='./file0\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002fc0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0) read(r6, &(0x7f0000000500)=""/200, 0xc8) r7 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r7) socket$packet(0x11, 0x3, 0x300) 28.492670223s ago: executing program 3 (id=2876): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 28.416659935s ago: executing program 3 (id=2877): socket$inet(0x2, 0x2, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0xdc5c, 0x1c080, 0x2, 0x20002b3, 0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x10, 0x803, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 28.408806225s ago: executing program 39 (id=2877): socket$inet(0x2, 0x2, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0xdc5c, 0x1c080, 0x2, 0x20002b3, 0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x10, 0x803, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 25.391770955s ago: executing program 2 (id=2901): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a0000400000000000000000140003006873723000000000000000000000000014001100"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4044045) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000340)={0x1ce, 0x9833, 0x80, 0x4, 0xfffffffa, 0x5}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1}, 0x0, 0x0}, 0xfffffffffffffebb) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000003c0)=0x1e, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="88840200080000001800128008000100677470000c00028008000200", @ANYBLOB='\b'], 0x40}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4054) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) close(0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000914000228bd7000fedbdf2508000133c86a7b00"], 0x18}, 0x1, 0x0, 0x0, 0x24040800}, 0x9fb21761dad170a4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) fchown(r5, r6, r8) 25.391340415s ago: executing program 40 (id=2901): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a0000400000000000000000140003006873723000000000000000000000000014001100"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4044045) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000340)={0x1ce, 0x9833, 0x80, 0x4, 0xfffffffa, 0x5}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1}, 0x0, 0x0}, 0xfffffffffffffebb) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000003c0)=0x1e, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="88840200080000001800128008000100677470000c00028008000200", @ANYBLOB='\b'], 0x40}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4054) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) close(0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000914000228bd7000fedbdf2508000133c86a7b00"], 0x18}, 0x1, 0x0, 0x0, 0x24040800}, 0x9fb21761dad170a4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) fchown(r5, r6, r8) 14.896891881s ago: executing program 5 (id=3055): listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpid() setns(0xffffffffffffffff, 0x24020000) unshare(0x28020480) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x4800, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14.896346421s ago: executing program 4 (id=3056): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8005, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0xa, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$nl_xfrm(r5, 0x0, 0x0) (async) sched_setparam(r2, &(0x7f00000006c0)=0x4) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) (async) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x1) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async, rerun: 64) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (rerun: 64) r7 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r7, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000ae927647f003c000000000000000000"], 0x14}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x2, 0xb9, &(0x7f00000002c0)="fdee355ea5fd0f6800", &(0x7f0000001240)="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"}, 0x50) 14.880294621s ago: executing program 4 (id=3057): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000d80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000011c0)={r3, 0x7, 0xd04a}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000740)={r3, 0x5, 0x1, [0xc827, 0x6, 0x8, 0x0, 0xf8c3], [0xffff, 0xe70, 0x7, 0x7, 0x5, 0x1, 0x4, 0x6, 0x5, 0x5, 0x100, 0x0, 0x5, 0x6, 0xf, 0xe, 0x7, 0xfffffffffffffffd, 0x800, 0x26e6, 0x6, 0x3, 0x1, 0x313, 0x2e5f, 0x400, 0x6, 0xe, 0x80000001, 0x7fff, 0x2, 0x91b, 0x1, 0x6, 0x7, 0x4, 0xe, 0xc, 0x54, 0x9, 0xb64, 0x2, 0x8, 0x3, 0x9, 0x8, 0x100000000, 0x5, 0x5, 0x8, 0x5e7, 0xe653, 0x17d, 0x401, 0xbff, 0x80000001, 0x8, 0x0, 0x6, 0xfffffffffffffff2, 0x8000000000000000, 0x5, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0xe, 0x5, 0x9, 0x3, 0x4a2d, 0x9, 0x8000000000000001, 0x3, 0x0, 0x9, 0x6, 0x8000000000000000, 0x629, 0x9, 0x2, 0x81, 0x5, 0x9, 0x63fe, 0x7ff, 0x4, 0xfffffffffffc0000, 0x6, 0x7fffffff000, 0x2, 0x5, 0x2, 0xf655, 0x0, 0x10, 0x80000000, 0x5, 0x40000000000000, 0x10000, 0x3, 0x80000000, 0x8, 0x5, 0x10001, 0x2, 0x200, 0x0, 0x9a, 0xea16, 0x47, 0x6, 0xfffffffffffffffe, 0x3ab9f0e1, 0x0, 0x7, 0x1, 0x5, 0x7, 0x3, 0xaa]}) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x1c, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xe89}, 0x94) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x8) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x20, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 14.813705963s ago: executing program 5 (id=3059): socket$inet(0x2, 0x2, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0xdc5c, 0x1c080, 0x2, 0x20002b3, 0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x10, 0x803, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.735396495s ago: executing program 5 (id=3060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000640)={0x18, {"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", 0x2900}}, 0x1006) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001900010000000000000000008020000000040005000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="f70000fcff000000cc"], 0x30}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) sendfile(r6, r7, &(0x7f00000001c0)=0x423, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000000, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x408, 0xffffffffffffffff) socket(0x23, 0x5, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6) io_submit(0x0, 0x1, &(0x7f0000001300)=[0x0]) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000180)={'ip6tnl0\x00', {0x2, 0x0, @empty}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, r8, 0x2}}, 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r8, r10}}, 0x18) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x99aabbccddeeff00}]}]}, 0x30}}, 0x0) 14.596876248s ago: executing program 4 (id=3063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000001a0a010200000000000000000100000a080002400000000208000240000000010c0004"], 0x12c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x82d43) bind$bt_l2cap(r7, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x404}, 0xe) listen(r7, 0xfff) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000001480)=0x1, 0x4) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r7, 0x40585883, &(0x7f0000000180)={r8, 0x0, 0x0, 0x6, 0x6, 0x1, [0x9, 0xf6bc, 0x7, 0x6, 0x80, 0x98e1]}) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_timeval(r9, 0x1, 0x20, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x4}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) 14.334632334s ago: executing program 4 (id=3071): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8480, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioperm(0x200, 0x7ff, 0x2) syz_clone3(&(0x7f0000001100)={0x100081100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) read$eventfd(r0, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 14.180567448s ago: executing program 4 (id=3073): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000010) 14.152755469s ago: executing program 5 (id=3075): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 13.569187292s ago: executing program 5 (id=3082): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_io_uring_setup(0x2138, &(0x7f0000000200)={0x0, 0x358f, 0x800, 0x3, 0xc4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQES(0x0, 0x7a, 0x0, 0x11, r2, 0x10000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f00000001c0)='%-010d \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) wait4(0x0, 0x0, 0x1, 0x0) 13.219000661s ago: executing program 4 (id=3089): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000290000000800000005000000000000002400000000000000290000003200000000000000000000000000ffff0a01010169"], 0x40}, 0x20044084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x5, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20}}}}}}, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x28000600) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24041080}, 0x4048004) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r8, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000061, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x8, 0x47, 0x0}}, 0x10) epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 13.141819542s ago: executing program 41 (id=3089): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000290000000800000005000000000000002400000000000000290000003200000000000000000000000000ffff0a01010169"], 0x40}, 0x20044084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x5, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20}}}}}}, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x28000600) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24041080}, 0x4048004) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r8, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000061, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x8, 0x47, 0x0}}, 0x10) epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 12.933671237s ago: executing program 5 (id=3093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x8}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x9, &(0x7f0000000000)="11000000", 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) 10.753229678s ago: executing program 0 (id=3107): r0 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x9, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) statfs(&(0x7f0000000240)='./file0\x00', 0x0) 10.665047591s ago: executing program 0 (id=3108): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x62, 0x0, 0xee00}, {@in6=@private1, 0x84d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {0x0, 0x7}, 0x70bd2c, 0x3500, 0x2, 0x3, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'ccm(des)\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8004880}, 0x2014) 10.658698151s ago: executing program 0 (id=3109): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x8, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x8}, 0x10ecc8, 0x2c65, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]}) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, 0x0, 0x0, 0x2000, 0x0, 0x3) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2000200) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "48006246439c220f6ffecc3531919a57bc772f628c9aa314640b40e6629f"}, 0x2e) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000001c0)) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x4000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) 10.287530929s ago: executing program 0 (id=3114): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r1, 0x10000000005, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYRESDEC=r0], 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) 10.059859475s ago: executing program 0 (id=3115): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_io_uring_setup(0x2138, &(0x7f0000000200)={0x0, 0x358f, 0x800, 0x3, 0xc4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQES(0x0, 0x7a, 0x0, 0x11, r2, 0x10000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f00000001c0)='%-010d \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) wait4(0x0, 0x0, 0x1, 0x0) 9.494876658s ago: executing program 0 (id=3117): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x807, 0x1}, 0x0, 0x400, 0xc40, 0x2, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007111940000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_dev$sg(0x0, 0x0, 0x189482) (async) syz_open_dev$sg(0x0, 0x0, 0x189482) socket(0x1e, 0x5, 0x0) (async) r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000480)=""/184, 0xb8}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0xffeffff8}], 0x1, 0x20b0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="17", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)='3', 0x1}], 0x1}}], 0x2, 0x4044890) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x3, 0x5, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x3, 0x5, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20040600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x7, 0x0, 0x7ffffffb}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x7, 0x0, 0x7ffffffb}]}) futex(0x0, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0dab44b80c169900f8c92ea4618f76d026f34ce4f28bf3ac0b06be4d13426194f02c1dd874d3aa20152d1a8b4dc59fc4dc61316d91240f9870da82a73540e2a0c82abc821668e30ab49db54270b399c8861893fcd201f0692d2463446d891ea995ee192b9f92d5e50fc5e243226b41378e90b771a445611d2e5f2c120c15bda21b9e1c8917df872d43b93f5125ac614106f40d63055a831d853ea1bf36a23a1ba154000d7c3375787134445c01c39a2112dcb3a93e4b4e729c135470bd1e20934d0dda57adfecf84bdc9f65dcc37af8cdca7c4ca3847c936"], 0x28}, 0x1, 0x0, 0x0, 0x24000098}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0dab44b80c169900f8c92ea4618f76d026f34ce4f28bf3ac0b06be4d13426194f02c1dd874d3aa20152d1a8b4dc59fc4dc61316d91240f9870da82a73540e2a0c82abc821668e30ab49db54270b399c8861893fcd201f0692d2463446d891ea995ee192b9f92d5e50fc5e243226b41378e90b771a445611d2e5f2c120c15bda21b9e1c8917df872d43b93f5125ac614106f40d63055a831d853ea1bf36a23a1ba154000d7c3375787134445c01c39a2112dcb3a93e4b4e729c135470bd1e20934d0dda57adfecf84bdc9f65dcc37af8cdca7c4ca3847c936"], 0x28}, 0x1, 0x0, 0x0, 0x24000098}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="13000000", @ANYRES16=r2, @ANYBLOB="20002dbd7000fbdbdf25140000000600be00297900000600ab0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8005) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) 3.480079128s ago: executing program 7 (id=3152): r0 = open(0x0, 0x0, 0x112) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) unshare(0x22020600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) unshare(0x20500) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x3, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setlease(r1, 0x400, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0x3}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) lsetxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x2c, 0x1) 3.43261141s ago: executing program 7 (id=3153): keyctl$invalidate(0x15, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x3f) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2d0100, 0x1) open_by_handle_at(r3, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000080)=0xe, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x4}, 0x20) tee(r0, r7, 0x8f5, 0x100000000000000) write(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000a74000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x1) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9) 2.544668871s ago: executing program 8 (id=3157): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x4a}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xff00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.341194975s ago: executing program 7 (id=3158): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./trace\x00', 0x139) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='mqueue\x00', 0x1382048, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2c0000c0}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="f800000016000100fc00000000000000008000000000000000000000000000097f06000000000000000000000000f4ff000000000000421816d3bb9c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c00000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000200"/176], 0xf8}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) mkdir(0x0, 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000002, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xe}, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) fchdir(r8) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) 1.421971047s ago: executing program 8 (id=3160): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.29371244s ago: executing program 8 (id=3161): fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) 1.247023881s ago: executing program 8 (id=3163): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$tipc(r2, &(0x7f0000000800)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000280)="6e5c75e15d415f6dec8e520fbeea3b3be743a1c7975e7b726faab237789c3df9f670a71e6533702f10c2fb9f4c8c9298f902302a5fe6d868e352315e3392864524549c8ac36725c4546e22b8f783a943b14e1485fe2cdf215e263ea1cd69d0c7a18dc96a04ce843aacc279fcbc78d2d00d95067b6959f56cad46bca329f4ae644ef2d3fd0b8f23d2d82026b4bf0ecd80351b9970ee87a8374efe91fb6f23ca2ac0a83390fb2239846c19128c5452db4805f0170911bf09892fbb0adca2c45afb0a033505479abc7e9f092b4c2afea07ee8f16d967021df011f53d486d1061ad534d3c6ef49286121580e70f86cf265f617571568dc54", 0xf6}, {&(0x7f0000000440)="b8b824980448837b033c051b47dd3caaae42f47448d29521b47e66baa7b02e0d176cf47093565b08a2304cf9867331fa5a9f3a0154cefea3777aa3f26fcd9e693762a38e2e010c13d9d794bd9c188cf8fe6b7e6a0c77b9261464459c836b5d1b27213c2a6086144f71db5a1450647cd63a4aba9f176094875fe57294f54019e0eddf62f2bdc910f6a9d13f0b9f12cefd59505e9eb1f4d75cf4b73465b9d0ac71497e6e4ddb3b0b7ae281399ad9273eca34ca58e6c01b57b6bab77ba8790a71dbe2eca17935950d8086e45659e9d6f7ccd76c36aa332301efc4197f0c265439ec46858a5e59bf68eb88e32925bd64afe581fc287f85c7c98b44", 0xf9}, {&(0x7f0000000540)="c2f6d29c7ef940ed726f6ddad1f8a4ca246ead1299888ad2b706e4b1453dd91a64aeee6dcfe3547ed9d2fb30707175f528889bcc4ec467194c39affca0aafb580da0becd724ecf8acbaa444f0d548d1b23fd322e1904de7fe99d434b4826eab6b0cddb1943f773cbe902e6", 0x6b}, {&(0x7f00000005c0)="c187fcf057eb6d37df27669c6e58f13873b98fc3d3268872c256dd1157052f7e4ba6052451dcdb8c2bef8556c31327d43126e408f5212fb884f124f7182cf97e7b9c8b7e241a940275f1f71eec5a8e67806679fa866409d698c2b687bde58025bc4a2cb3b73355dfa8194c06a2a387024eaf4e55843e887b962a599772f4c3c2250e30f82c5912fb44982cd9f58384f8d2b0cef4b2ad767c6b4b49b08771bed597faa44662ebae0a4e92c9bb745ef2db0a64d4ae9d691d762b4f2cb310e7e64b8473d7e34ef7981c0e531e58baed9d07e196d52aa8eea1d4966e33226e82c390f323ba2ff8cc3d6abac2f0c2c29c657530e15d08f6", 0xf5}, {&(0x7f00000006c0)}], 0x5, &(0x7f0000000780)="1947884d423194ec78895b386cbc9e7f239b9402af69372afe6f5762a8737ec1a510893e31f92cc1be2ec6c3731724dbb4cf7fd270ba74a38e883f7e1b5af091699cebbb91cd3e7100f48cad229069de1e2c913f1bfe07e8994c3bd12cd6780c6e5e36e97cd0caf6d1c1afc3", 0x6c, 0x20000016}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006800010000000000000000000000000000000000060003000000000008000100000000001c000200010081ffffff"], 0x44}}, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000080)={0x0, 0x0, 0x49, 0x29, ""/41}, &(0x7f0000000100)=0x49, 0x0) 1.139862863s ago: executing program 8 (id=3164): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/93, 0x5d, 0x327) pread64(r0, &(0x7f0000000140)=""/102, 0x66, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="80", 0x1}], 0x1}, 0x240c0841) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000100)="ca", 0x1}], 0x1}, 0x48044) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readahead(r3, 0x4, 0x140) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r5) tkill(r5, 0x7) close(r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x6}}, @fwd={0xc}, @fwd={0x800}, @float={0xc, 0x0, 0x0, 0x10, 0x8}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x8}]}, {0x0, [0x30, 0x5f, 0x30, 0x0]}}, &(0x7f0000000700)=""/250, 0x82, 0xfa, 0x0, 0xfffffffd, 0x10000, @value=r3}, 0x28) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, 0x0, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xff000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0xde, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 842.83789ms ago: executing program 1 (id=3167): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x4, @perf_config_ext={0x40, 0x8800000000000004}, 0x0, 0x2, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={0x0}, 0x10ecc8, 0x1224, 0x3, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_mount(r3, &(0x7f0000000100)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x300) preadv(r3, &(0x7f0000001a00)=[{&(0x7f0000000040)=""/139, 0x8b}, {0x0}], 0x2, 0xd776ebe, 0x80000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r4, &(0x7f0000001f80)=""/4109, 0x100d) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000500), 0x12) syz_emit_ethernet(0x1f, &(0x7f0000000040)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "6c404000000062cf004ab77f8437"}}}}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="400003"], 0x6) write$nci(r0, 0x0, 0x0) 721.152643ms ago: executing program 7 (id=3168): socket$inet(0x2, 0x2, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0xdc5c, 0x1c080, 0x2, 0x20002b3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x10, 0x803, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 701.018644ms ago: executing program 8 (id=3169): syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x40800) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) syslog(0x4, &(0x7f00000003c0), 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x58) mount(0x0, &(0x7f0000000200)='./tracing/file1\x00', 0x0, 0x200000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3901b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x11, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000007301bc00000000009500000000000000f96f80ec4b91d611004ec0583dc0c476b6463cf1f21423e527a342b060fb2bf8945a95aa6e4f92a712dc9bf7c0a5e850e49a87e29f3166cc4a869df8edffe6ec54f6fa1956f239f6a9c268e2fc9626958270644b6db9a5e63f1454495e7d5e2842069968f2db1248a1c21bc922ffcc3efd60e819a6e934f03f97219aff5ac915a88374023912e2692a09265da3ecf687eb241d34b03c775c7e1f305f1cc1180edeb4a4a31ac3ccb9a4e28bfdfffffffffffffffd401bd99c7b521914866e28568b7d0000000000000033f9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1fc}}, 0x0) mount$nfs4(&(0x7f0000000300)='127.0.0.1\x84\x00\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x2002828, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=4.1,noresvport\x00']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x9, 0x6, 0x7, 0xfffffffe}]}) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xa36, &(0x7f0000000080)="aa7d8c4882aa7d50b3d426cac19f81bf03454782a1e36a050ee03bac498b18d7539e0d588f39dc2a636c3074ae3f7413328665fc2c") r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000100)=[{}], 0x1, 0x101) syslog(0x9, 0x0, 0x0) 606.708106ms ago: executing program 1 (id=3170): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd70000000004a717d58a44d8c5392140002006e657464657673696d30000000000000050019"], 0x34}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0xcc, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfff, 0x8}}, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0x32, "875863c3d975c50f0e349921cf119f735559a9a1996e45ad882fc65e49126a9e6efb853ca76d46f34d264389c65bbc38def5"}, @ssid={0x0, 0x6, @default_ap_ssid}, @random_vendor={0xdd, 0x6, "854c7e26c6d2"}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xcc}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb9dec6e06eda279}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f1a000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10001}]}, 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0x24000085) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000000)=ANY=[], 0x6, 0x806, &(0x7f0000000200)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x4000850) 454.06965ms ago: executing program 7 (id=3171): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 348.967692ms ago: executing program 1 (id=3172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9800000000020104000000000000000002000002040001803c0002800c00028005000100000000002c00018014000300ff02000000000000000000000022000114000400fc010000000000000000000000000000440003"], 0x98}}, 0x4) time(0x0) 348.455162ms ago: executing program 7 (id=3173): socket$inet(0x2, 0x2, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0xdc5c, 0x1c080, 0x2, 0x20002b3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x10, 0x803, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 348.304412ms ago: executing program 1 (id=3174): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x1000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x8}, 0x1200, 0x1224, 0x5b16, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x33e000, 0x1000, 0x0, 0xffff0f00}, 0x20) 201.691875ms ago: executing program 1 (id=3175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c00018008e403000100000008000a"], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70020, 0x1810}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x4040) 0s ago: executing program 1 (id=3176): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) ppoll(&(0x7f0000000b80)=[{r1, 0x680}], 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") (async, rerun: 32) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) (async, rerun: 32) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0xffffd000) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x52}, 0x20) (async, rerun: 32) connect$can_j1939(r4, 0x0, 0x0) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000001540)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x1, 0x48000) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r6}, 0x20) (async, rerun: 32) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca31c0e0a302000000000000003b6aee00"}, 0x15, 0x0) (async, rerun: 32) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000002b00)={0x8, &(0x7f0000002a00)=[{0xa55, 0x4c, &(0x7f0000000180)="7ba4e9c459a85bd691a80f0d33531cc2d23bd900f639bddec719c0b43868c14ab1b8c57545657f3dce69587f60967a8435b216a60127b5754154e734a45442f4d058fdf5b86ff1b3b6ce8a4e", 0x1}, {0x1000, 0x1000, &(0x7f0000001580)="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", 0x0, 0x1}, {0xf, 0xcb, &(0x7f0000002580)="bb96f6b48163e1fafe5323d431d2bda502dc339a9878e4f5f57e2cb77c508f7f66ea2ebf04dc79c50fee05d795108eb7d69115d8aaa56d9932559ca7abf6df83ec1efce26e114c99902aed7ee97f04790ae45a3ec522f4f1470ebc8c622009c653b5cba0de4d1b5af37b8ac92a56607c1f0fbadcad95fe217509c7895fb27a1b5990246c23555e65fae3c467c7f3ced2a9b19dd005fda1705cc331fc352351fae7373a4a8cae42268dc913fa1ca311a01808d0ed5a55364b8009051ee28a0ce646a77806308e55dcdb21bc", 0x1, 0x1}, {0x3, 0x5d, &(0x7f0000002680)="f27adf86b7c38b974ba2d20521483729ad38d78302caec8f035aefd8fe806eeb15d052de6c28bf0923acd09557afba6bdad1ca3a96cebbbf2472d279fc3228b7ea0b389533ec5c6371b0d0225d3e57157cb91dce515198ec161c87e073"}, {0x7, 0xef, &(0x7f0000002700)="6230969b2e1148965562c795b5cf22f96e42d82eff0dc4c0ee8651b00eedea0b3579689827e3b3c8f2caf0e0ab451d9ea56f60b577496d9346c77675407224a0099a48cd8ee6397614e0d400a1bf4cec4deb4cd8e6ae64eee58bc973d1af6a6a15be0e38f4a0490399bbad6b655bfcd470d4ab941fc97edabdcd3b9d6cf822f74ad30126059111417dcddf87ed659088caac10d79598ba38bf84da1f5b0b5fbb1a36b20490393a97302fcc6ec90283aa2abf15aba3d8ca3363dbb41e629de73d8d4e092655400dc53fddb7b2da675c028a89ba228a4ed3780cd8094c7da0aa860102d22665b53601941735e5a02aea"}, {0x401, 0xc7, &(0x7f0000002800)="5f6210f8bd49373203f36d95fb0330e08266f162854aa765cf012af7954fa434424859b51e9fb0219764b55e658c0d59fc4b1c598b4dea1891393cefe57439dd19f901ffd0e30fd09986dd153957cf2e6967f06f23b197d25e5c5ccdcbc556c152caed71790b43a9182f6350355d4a20de57dddcf67a1a8e2019bfddc8af65438c5dd75e03f310bbefedc590d53e5c8c880b683578ef6109002c77fae400c55d8c92176606b855b0c5d0b78928a6c07bdcd37ce4840bbdf31d890d570e4537cb1aab86852fb90a", 0x1, 0x3}, {0x7, 0x87, &(0x7f0000002900)="f7aefb5599ac2da7bcc384c0e1f0fc68c8782bdbe60ec750a41954265e2e1dd01c301cb02f361c247f073bc5136fc254d3351bc9c30d593f744f6d738594e146cc3b279095a09194bddbd99fe662732100f4e4da7ac2cfd81ef6bdd0327bc197b49f05093fdb5e0c15471c901defb9a07e119ca207d7c5f4f5af781fb41dbbcd1dbe29e24f8790", 0x1, 0x1}, {0x0, 0x31, &(0x7f00000029c0)="d7ffc240fd09da3a9d7783a34a7113d4dc072759cc1ebe3bb0ee8549c9f6483f83cc61b52a219a7b4ca8f2249b39a90f19", 0x1}]}) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) unshare(0x6a040000) kernel console output (not intermixed with test programs): s (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.858816][T13463] bridge_slave_0: left allmulticast mode [ 284.864521][T13463] bridge_slave_0: left promiscuous mode [ 284.870186][T13463] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.910929][T13463] bridge_slave_1: left allmulticast mode [ 284.916626][T13463] bridge_slave_1: left promiscuous mode [ 284.922393][T13463] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.947011][T13463] bond0: (slave bond_slave_0): Releasing backup interface [ 284.966686][T13463] bond0: (slave bond_slave_1): Releasing backup interface [ 285.038809][T13489] netlink: 'syz.8.2580': attribute type 20 has an invalid length. [ 285.062480][T13463] team0: Port device team_slave_0 removed [ 285.083295][T13489] netlink: 'syz.8.2580': attribute type 21 has an invalid length. [ 285.095435][T13463] team0: Port device team_slave_1 removed [ 285.102569][T13463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.116670][T13463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.125603][T13463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.133040][T13463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.142605][T13463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.162080][T13496] x_tables: duplicate underflow at hook 1 [ 285.169669][T13476] tipc: Started in network mode [ 285.174575][T13476] tipc: Node identity aaaaaaaaaa1e, cluster identity 4711 [ 285.174931][T13496] loop3: detected capacity change from 0 to 512 [ 285.181813][T13476] tipc: Enabled bearer , priority 10 [ 285.206293][T13496] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2582: missing EA_INODE flag [ 285.217907][T13496] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 285.218131][T13496] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2582: error while reading EA inode 12 err=-117 [ 285.239585][T13496] loop3: lost filesystem error report for type 5 error -117 [ 285.239832][T13496] EXT4-fs (loop3): 1 orphan inode deleted [ 285.252982][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 285.253014][ C1] EXT4-fs (loop3): initial error at time 1786837042: ext4_xattr_inode_iget:441: inode 12 [ 285.253066][ C1] EXT4-fs (loop3): last error at time 1786837042: ext4_xattr_inode_iget:446 [ 285.288131][T13496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.317877][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 285.317898][ T28] audit: type=1400 audit(1786837042.220:27323): avc: denied { setcurrent } for pid=13499 comm="syz.8.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 285.345839][ T9589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.357266][T10743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.398977][T13506] loop3: detected capacity change from 0 to 1024 [ 285.436702][T13506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 285.449157][T13506] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.478234][T13514] 9p: Bad value for 'rfdno' [ 285.483018][T13514] 9p: Bad value for 'rfdno' [ 285.487657][T13514] 9p: Bad value for 'rfdno' [ 285.514102][T13514] 9p: Bad value for 'rfdno' [ 285.518798][T13514] 9p: Bad value for 'rfdno' [ 285.523498][T13514] 9p: Bad value for 'rfdno' [ 285.529230][T13520] FAULT_INJECTION: forcing a failure. [ 285.529230][T13520] name failslab, interval 1, probability 0, space 0, times 0 [ 285.546889][T13520] CPU: 1 UID: 0 PID: 13520 Comm: syz.2.2590 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 285.546934][T13520] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 285.546944][T13520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.546961][T13520] Call Trace: [ 285.546970][T13520] [ 285.547072][T13520] __dump_stack+0x1d/0x30 [ 285.547099][T13520] dump_stack_lvl+0x95/0xd0 [ 285.547125][T13520] dump_stack+0x15/0x1b [ 285.547145][T13520] should_fail_ex+0x25e/0x270 [ 285.547178][T13520] should_failslab+0x8c/0xb0 [ 285.547273][T13520] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 285.547297][T13520] ? alloc_empty_file+0x70/0x1e0 [ 285.547331][T13520] ? alloc_empty_file+0x70/0x1e0 [ 285.547416][T13520] alloc_empty_file+0x70/0x1e0 [ 285.547525][T13520] path_openat+0x54/0x2000 [ 285.547555][T13520] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 285.547623][T13520] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 285.547661][T13520] ? irqentry_exit+0x7d/0x610 [ 285.547684][T13520] do_file_open+0x16c/0x290 [ 285.547715][T13520] do_sys_openat2+0xa0/0x130 [ 285.547783][T13520] __x64_sys_openat+0xf2/0x120 [ 285.547823][T13520] x64_sys_call+0x1e39/0x3020 [ 285.547894][T13520] do_syscall_64+0x136/0x3c0 [ 285.547929][T13520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.547959][T13520] RIP: 0033:0x7f4a94fde90e [ 285.547980][T13520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 285.548006][T13520] RSP: 002b:00007f4a93a769b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 285.548033][T13520] RAX: ffffffffffffffda RBX: 00007f4a93a776c0 RCX: 00007f4a94fde90e [ 285.548109][T13520] RDX: 0000000000080001 RSI: 00007f4a95089070 RDI: ffffffffffffff9c [ 285.548129][T13520] RBP: 00007f4a95089070 R08: 0000000000000000 R09: 0000000000000000 [ 285.548147][T13520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 285.548164][T13520] R13: 00007f4a93a76a90 R14: 00007f4a952a5fa0 R15: 00007ffd7d0893b8 [ 285.548251][T13520] [ 285.669999][T13519] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 285.758116][T13519] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 285.801809][ T9589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 285.947586][T13533] netlink: 'syz.8.2596': attribute type 1 has an invalid length. [ 285.981559][T13540] loop8: detected capacity change from 0 to 512 [ 285.988630][T13540] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 285.999990][T13540] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 286.013290][T13540] EXT4-fs (loop8): 1 truncate cleaned up [ 286.019579][T13540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.042365][T13530] can0 (unregistered): slcan off ttyS3. [ 286.059805][T13530] Falling back ldisc for ttyS3. [ 286.085935][ T28] audit: type=1400 audit(1786837043.030:27324): avc: denied { write } for pid=13532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.110148][T13547] loop7: detected capacity change from 0 to 512 [ 286.118063][T13548] veth0: entered promiscuous mode [ 286.129967][T13548] veth0: entered allmulticast mode [ 286.143907][T13547] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 286.169376][ T28] audit: type=1400 audit(1786837043.107:27325): avc: denied { write } for pid=13551 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.206176][T13547] EXT4-fs (loop7): 1 truncate cleaned up [ 286.212004][ T969] tipc: Node number set to 11840170 [ 286.228537][ T28] audit: type=1400 audit(1786837043.136:27326): avc: denied { write } for pid=13539 comm="syz.8.2597" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 286.245478][T13547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.273407][ T28] audit: type=1400 audit(1786837043.203:27327): avc: denied { append } for pid=13558 comm="syz.5.2601" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 286.312561][T13560] ip6erspan0: entered allmulticast mode [ 286.436953][ T7073] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.463846][T13569] loop7: detected capacity change from 0 to 128 [ 286.609414][ T28] audit: type=1400 audit(1786837043.501:27328): avc: denied { write } for pid=13563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.651507][T13583] __nla_validate_parse: 4 callbacks suppressed [ 286.651536][T13583] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2605'. [ 286.683765][T13583] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2605'. [ 286.705656][T13583] netlink: 'syz.7.2605': attribute type 4 has an invalid length. [ 286.721578][ T28] audit: type=1400 audit(1786837043.569:27329): avc: denied { write } for pid=13585 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.780035][T13594] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2607'. [ 286.796152][ T28] audit: type=1400 audit(1786837043.704:27330): avc: denied { recv } for pid=13596 comm="syz.2.2608" dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 286.816687][T13595] xt_l2tp: v2 doesn't support IP mode [ 286.824928][T13594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.840546][T13595] xt_l2tp: v2 doesn't support IP mode [ 286.848431][T13595] xt_l2tp: v2 doesn't support IP mode [ 286.854545][T13595] xt_l2tp: v2 doesn't support IP mode [ 286.860437][T13595] xt_l2tp: v2 doesn't support IP mode [ 286.868613][T13595] xt_l2tp: v2 doesn't support IP mode [ 286.879665][T13595] xt_l2tp: v2 doesn't support IP mode [ 286.891643][T13595] xt_l2tp: v2 doesn't support IP mode [ 286.914033][T13595] xt_l2tp: v2 doesn't support IP mode [ 286.928845][T13595] xt_l2tp: v2 doesn't support IP mode [ 286.981199][ T28] audit: type=1400 audit(1786837043.877:27331): avc: denied { write } for pid=13587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.016572][ T28] audit: type=1400 audit(1786837043.877:27332): avc: denied { write } for pid=13612 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.184775][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.254857][T13628] loop8: detected capacity change from 0 to 512 [ 287.274571][T13628] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.284142][T13628] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 287.295593][T13628] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 287.305908][T13628] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 287.314619][T13628] System zones: 0-2, 18-18, 34-34 [ 287.321034][T13628] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.2609: bad orphan inode 15 [ 287.332036][T13628] loop8: lost filesystem error report for type 5 error -117 [ 287.332832][T13628] ext4_test_bit(bit=14, block=18) = 1 [ 287.346727][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 287.346781][ C0] EXT4-fs (loop8): initial error at time 1786837044: ext4_orphan_get:1425 [ 287.346935][ C0] EXT4-fs (loop8): last error at time 1786837044: ext4_orphan_get:1425 [ 287.371013][T13628] is_bad_inode(inode)=0 [ 287.376486][T13628] NEXT_ORPHAN(inode)=2264924160 [ 287.381690][T13628] max_ino=32 [ 287.385457][T13628] i_nlink=0 [ 287.389121][T13628] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.2609: corrupted inode contents [ 287.401409][T13628] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.402100][T13628] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #15: comm syz.8.2609: mark_inode_dirty error [ 287.423394][T13628] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.424033][T13628] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.2609: corrupted inode contents [ 287.446045][T13628] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.446850][T13628] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.2609: mark_inode_dirty error [ 287.468873][T13628] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.469542][T13628] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.2609: mark inode dirty (error -117) [ 287.492718][T13628] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.493105][T13628] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 287.521521][T13628] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.560235][T13631] loop5: detected capacity change from 0 to 1024 [ 287.577252][T13631] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 287.672909][T13643] loop5: detected capacity change from 0 to 128 [ 287.681119][T13635] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 287.693075][T13635] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 287.712629][T13643] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.728073][T13646] loop3: detected capacity change from 0 to 128 [ 287.775830][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.795393][T13643] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.861296][T13643] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2614'. [ 287.891145][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2618'. [ 287.910613][T13655] netlink: 'syz.7.2618': attribute type 20 has an invalid length. [ 287.918612][T13655] netlink: 'syz.7.2618': attribute type 21 has an invalid length. [ 287.953579][T13658] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 287.967166][T13658] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 288.015507][T10743] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.059515][T13668] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2623'. [ 288.068698][T13668] veth0_to_bond: default FDB implementation only supports local addresses [ 288.277717][T13688] x_tables: duplicate underflow at hook 1 [ 288.331591][T13688] gretap0 speed is unknown, defaulting to 1000 [ 288.365933][T13693] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2639'. [ 288.375235][T13693] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2639'. [ 288.385410][T13687] gretap0 speed is unknown, defaulting to 1000 [ 288.427789][T13698] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 288.438932][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2631'. [ 288.454339][T13692] netlink: 'syz.5.2631': attribute type 20 has an invalid length. [ 288.462414][T13692] netlink: 'syz.5.2631': attribute type 21 has an invalid length. [ 288.537249][T13704] syz.2.2635(13704): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 288.578545][T13707] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.596575][T13704] serio: Serial port ptm1 [ 288.643615][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2638'. [ 288.664695][T13717] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 288.820056][T13734] tmpfs: Unexpected value for 'inode32' [ 288.898506][T13740] macsec1: entered allmulticast mode [ 288.910456][T13740] veth1_macvtap: entered allmulticast mode [ 288.927001][T13744] loop2: detected capacity change from 0 to 1024 [ 288.977059][T13744] ext4: Bad value for 'max_batch_time' [ 288.992651][T13742] netlink: 'syz.8.2647': attribute type 20 has an invalid length. [ 289.000542][T13742] netlink: 'syz.8.2647': attribute type 21 has an invalid length. [ 289.092705][T13740] veth1_macvtap (unregistering): left allmulticast mode [ 289.254567][T13758] FAULT_INJECTION: forcing a failure. [ 289.254567][T13758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.291682][T13758] CPU: 1 UID: 0 PID: 13758 Comm: syz.8.2655 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 289.291772][T13758] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 289.291781][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.291794][T13758] Call Trace: [ 289.291802][T13758] [ 289.291809][T13758] __dump_stack+0x1d/0x30 [ 289.291836][T13758] dump_stack_lvl+0x95/0xd0 [ 289.291890][T13758] dump_stack+0x15/0x1b [ 289.291916][T13758] should_fail_ex+0x25e/0x270 [ 289.291959][T13758] should_fail+0xb/0x20 [ 289.292015][T13758] should_fail_usercopy+0x1a/0x20 [ 289.292060][T13758] _copy_from_user+0x1c/0xb0 [ 289.292088][T13758] __sys_bpf+0x1e2/0xc30 [ 289.292125][T13758] ? get_pid_task+0x92/0xc0 [ 289.292174][T13758] ? vfs_write+0x770/0x990 [ 289.292201][T13758] __x64_sys_bpf+0x69/0x80 [ 289.292237][T13758] x64_sys_call+0x10cb/0x3020 [ 289.292269][T13758] do_syscall_64+0x136/0x3c0 [ 289.292368][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.292393][T13758] RIP: 0033:0x7fb3ee99e0d9 [ 289.292413][T13758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.292438][T13758] RSP: 002b:00007fb3ed3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.292466][T13758] RAX: ffffffffffffffda RBX: 00007fb3eec25fa0 RCX: 00007fb3ee99e0d9 [ 289.292486][T13758] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 000000000000001c [ 289.292540][T13758] RBP: 00007fb3ed3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.292558][T13758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.292646][T13758] R13: 00007fb3eec26038 R14: 00007fb3eec25fa0 R15: 00007ffef718c308 [ 289.292749][T13758] [ 289.466792][T13764] ext2: Unknown parameter 'obj_type' [ 289.540706][T13769] EXT4-fs: dax option not supported [ 289.593076][T13769] EXT4-fs: Ignoring removed oldalloc option [ 289.605567][T13769] EXT4-fs: Ignoring removed oldalloc option [ 289.653686][T13769] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.2660: corrupted in-inode xattr: invalid ea_ino [ 289.682729][T13769] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 289.684264][T13769] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2660: couldn't read orphan inode 15 (err -117) [ 289.693557][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 289.693584][ C1] EXT4-fs (loop8): initial error at time 1786837046: ext4_iget_extra_inode:5180: inode 15 [ 289.693648][ C1] EXT4-fs (loop8): last error at time 1786837046: ext4_iget_extra_inode:5180: inode 15 [ 289.732276][T13769] loop8: lost filesystem error report for type 5 error -117 [ 289.734212][T13769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.757169][T13769] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2660: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 289.810104][T13769] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2660: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 289.883311][T13784] program syz.8.2660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.006244][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.159343][T13797] xt_hashlimit: overflow, try lower: 277025390592/11 [ 290.335243][T13801] sctp: [Deprecated]: syz.7.2672 (pid 13801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.335243][T13801] Use struct sctp_sack_info instead [ 290.411552][T13801] set_capacity_and_notify: 7 callbacks suppressed [ 290.411571][T13801] loop7: detected capacity change from 0 to 1764 [ 290.512676][T13801] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 290.531322][T13801] isofs_fill_super: get root inode failed [ 290.637870][T13814] netlink: 'syz.7.2676': attribute type 63 has an invalid length. [ 290.645767][T13814] lo: entered promiscuous mode [ 290.650691][T13814] lo: entered allmulticast mode [ 290.673558][T13811] loop3: detected capacity change from 0 to 4096 [ 290.751107][T13811] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.2675: inode #0: comm syz.3.2675: iget: illegal inode # [ 290.764744][T13811] loop3: lost filesystem error report for type 5 error -117 [ 290.765471][T13811] EXT4-fs (loop3): Remounting filesystem read-only [ 290.795079][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 290.801545][ C0] EXT4-fs (loop3): initial error at time 1786837047: ext4_init_orphan_info:583 [ 290.810570][ C0] EXT4-fs (loop3): last error at time 1786837047: ext4_init_orphan_info:583 [ 290.826777][T13811] EXT4-fs (loop3): get orphan inode failed [ 290.852048][T13811] EXT4-fs (loop3): mount failed [ 290.988543][T13817] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 290.997296][T13817] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 291.194939][T13833] loop7: detected capacity change from 0 to 512 [ 291.201544][T13833] EXT4-fs: dax option not supported [ 291.383325][T13846] loop8: detected capacity change from 0 to 512 [ 291.408450][T13846] vfat: Unknown parameter 'rhΎ'jԇgS( h'eK[ [ 291.408450][T13846] [D' [ 291.521615][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 291.521631][ T28] audit: type=1400 audit(1786837048.170:27345): avc: denied { node_bind } for pid=13862 comm="syz.7.2690" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 291.592526][T13869] loop7: detected capacity change from 0 to 512 [ 291.603430][T13869] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2692: inode has both inline data and extents flags [ 291.618749][T13869] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.618906][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 291.634544][ C1] EXT4-fs (loop7): initial error at time 1786837048: ext4_orphan_get:1399: inode 15 [ 291.644000][ C1] EXT4-fs (loop7): last error at time 1786837048: ext4_orphan_get:1399: inode 15 [ 291.652838][T13869] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2692: couldn't read orphan inode 15 (err -117) [ 291.665751][T13869] loop7: lost filesystem error report for type 5 error -117 [ 291.666452][T13869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.687883][ T28] audit: type=1400 audit(1786837048.301:27346): avc: denied { write } for pid=13868 comm="syz.7.2692" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.726994][ T7073] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.744833][T13875] loop7: detected capacity change from 0 to 128 [ 291.774282][T13873] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 291.784623][T13873] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 292.087260][T13903] qrtr: Invalid version 20 [ 292.094579][T13909] loop5: detected capacity change from 0 to 128 [ 292.220361][T13921] loop2: detected capacity change from 0 to 512 [ 292.230392][T13921] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 292.246098][T13921] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2707: bad orphan inode 131083 [ 292.260899][T13921] loop2: lost filesystem error report for type 5 error -117 [ 292.262334][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 292.276173][ C1] EXT4-fs (loop2): initial error at time 1786837048: ext4_orphan_get:1425 [ 292.284762][ C1] EXT4-fs (loop2): last error at time 1786837048: ext4_orphan_get:1425 [ 292.294921][T13915] gretap0 speed is unknown, defaulting to 1000 [ 292.299119][T13927] FAULT_INJECTION: forcing a failure. [ 292.299119][T13927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.314449][T13927] CPU: 1 UID: 0 PID: 13927 Comm: syz.5.2710 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 292.314496][T13927] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 292.314505][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.314599][T13927] Call Trace: [ 292.314606][T13927] [ 292.314616][T13927] __dump_stack+0x1d/0x30 [ 292.314643][T13927] dump_stack_lvl+0x95/0xd0 [ 292.314665][T13927] dump_stack+0x15/0x1b [ 292.314755][T13927] should_fail_ex+0x25e/0x270 [ 292.314824][T13927] should_fail+0xb/0x20 [ 292.314853][T13927] should_fail_usercopy+0x1a/0x20 [ 292.314931][T13927] _copy_from_user+0x1c/0xb0 [ 292.314962][T13927] ___sys_sendmsg+0xc1/0x1e0 [ 292.315111][T13927] __x64_sys_sendmsg+0xd4/0x160 [ 292.315157][T13927] x64_sys_call+0x194c/0x3020 [ 292.315271][T13927] do_syscall_64+0x136/0x3c0 [ 292.315374][T13927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.315412][T13927] RIP: 0033:0x7f6d268fe0d9 [ 292.315490][T13927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.315510][T13927] RSP: 002b:00007f6d25357028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.315537][T13927] RAX: ffffffffffffffda RBX: 00007f6d26b85fa0 RCX: 00007f6d268fe0d9 [ 292.315578][T13927] RDX: 0000000020000034 RSI: 0000200000000140 RDI: 0000000000000006 [ 292.315592][T13927] RBP: 00007f6d25357090 R08: 0000000000000000 R09: 0000000000000000 [ 292.315609][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.315627][T13927] R13: 00007f6d26b86038 R14: 00007f6d26b85fa0 R15: 00007ffccba4dc08 [ 292.315652][T13927] [ 292.342039][T13921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.501873][T13930] loop5: detected capacity change from 0 to 512 [ 292.508718][ T28] audit: type=1400 audit(1786837049.056:27347): avc: denied { write } for pid=13910 comm="syz.2.2707" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.645205][T13930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.657744][T13930] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.660407][T13915] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.675511][T13915] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.683184][T13915] bridge_slave_0: entered allmulticast mode [ 292.690146][T13915] bridge_slave_0: entered promiscuous mode [ 292.697343][T13915] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.704569][T13915] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.712129][T13915] bridge_slave_1: entered allmulticast mode [ 292.719069][T13915] bridge_slave_1: entered promiscuous mode [ 292.739895][T13915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.750731][T13915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.757684][T13930] __nla_validate_parse: 8 callbacks suppressed [ 292.757767][T13930] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2711'. [ 292.783491][T13915] team0: Port device team_slave_0 added [ 292.790488][T13915] team0: Port device team_slave_1 added [ 292.825731][T13955] loop3: detected capacity change from 0 to 128 [ 292.827245][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2711'. [ 292.838395][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.857440][T13915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.864737][T13915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.927114][T13915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.940937][T10743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.943962][T13915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.957003][T13915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.990310][T13915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.003522][T13959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13959 comm=syz.2.2718 [ 293.088147][T13915] hsr_slave_0: entered promiscuous mode [ 293.096001][T13915] hsr_slave_1: entered promiscuous mode [ 293.103063][T13915] debugfs: 'hsr0' already exists in 'hsr' [ 293.108929][T13915] Cannot create hsr debugfs directory [ 293.217890][T13968] EXT4-fs (loop8): 1 orphan inode deleted [ 293.224157][T13968] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.237926][T13968] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.252022][T13968] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 293.252901][ T28] audit: type=1400 audit(1786837049.763:27348): avc: denied { write } for pid=13965 comm="syz.8.2724" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.283057][T13915] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.294129][ T28] audit: type=1400 audit(1786837049.763:27349): avc: denied { create } for pid=13984 comm="syz.5.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 293.322412][ T28] audit: type=1400 audit(1786837049.763:27350): avc: denied { write } for pid=13965 comm="syz.8.2724" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.416571][T13915] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.500887][T13915] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.510853][T13997] netlink: 'syz.5.2731': attribute type 28 has an invalid length. [ 293.521009][T13997] netlink: 'syz.5.2731': attribute type 31 has an invalid length. [ 293.530900][T13999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2730'. [ 293.540863][T13999] tipc: Enabling of bearer rejected, failed to enable media [ 293.564997][T13915] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.611892][T14007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2734'. [ 293.687814][T14015] FAULT_INJECTION: forcing a failure. [ 293.687814][T14015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.702061][T14015] CPU: 1 UID: 0 PID: 14015 Comm: syz.3.2738 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 293.702105][T14015] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 293.702117][T14015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.702135][T14015] Call Trace: [ 293.702143][T14015] [ 293.702154][T14015] __dump_stack+0x1d/0x30 [ 293.702252][T14015] dump_stack_lvl+0x95/0xd0 [ 293.702282][T14015] dump_stack+0x15/0x1b [ 293.702311][T14015] should_fail_ex+0x25e/0x270 [ 293.702414][T14015] should_fail+0xb/0x20 [ 293.702447][T14015] should_fail_usercopy+0x1a/0x20 [ 293.702506][T14015] _copy_from_user+0x1c/0xb0 [ 293.702537][T14015] do_sock_getsockopt+0x122/0x570 [ 293.702566][T14015] ? vfs_write+0x848/0x990 [ 293.702595][T14015] __x64_sys_getsockopt+0x11d/0x1a0 [ 293.702701][T14015] x64_sys_call+0x2dcf/0x3020 [ 293.702738][T14015] do_syscall_64+0x136/0x3c0 [ 293.702783][T14015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.702825][T14015] RIP: 0033:0x7f73c5f3e0d9 [ 293.702846][T14015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.702894][T14015] RSP: 002b:00007f73c4997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 293.702922][T14015] RAX: ffffffffffffffda RBX: 00007f73c61c5fa0 RCX: 00007f73c5f3e0d9 [ 293.703011][T14015] RDX: 0000000000000037 RSI: 0000000000000029 RDI: 0000000000000003 [ 293.703027][T14015] RBP: 00007f73c4997090 R08: 00002000000002c0 R09: 0000000000000000 [ 293.703049][T14015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.703066][T14015] R13: 00007f73c61c6038 R14: 00007f73c61c5fa0 R15: 00007ffcbd0260c8 [ 293.703142][T14015] [ 293.920077][T13915] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 293.943798][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.958792][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.970664][T13915] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 293.980854][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.986832][T14021] netlink: 'syz.3.2741': attribute type 5 has an invalid length. [ 294.019145][T13915] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 294.035020][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.059458][ T28] audit: type=1326 audit(1786837050.497:27351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.2742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c5f3e0d9 code=0x7ffc0000 [ 294.079328][T13915] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 294.099670][T14027] EXT4-fs: Ignoring removed oldalloc option [ 294.106123][ T28] audit: type=1326 audit(1786837050.544:27352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.2742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c5f3e0d9 code=0x7ffc0000 [ 294.142532][T14027] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 294.163075][T14031] EXT4-fs: Ignoring removed bh option [ 294.171807][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 294.183303][T14031] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 294.196864][ T28] audit: type=1326 audit(1786837050.544:27353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.2742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c5f3e0d9 code=0x7ffc0000 [ 294.226457][ T28] audit: type=1326 audit(1786837050.544:27354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.3.2742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f73c5f3e0d9 code=0x7ffc0000 [ 294.252842][T14027] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 294.262487][T14031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.432142][T13915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.441639][T14013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14013 comm=syz.5.2736 [ 294.473007][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.478623][T13915] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.505432][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.512659][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.528852][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.535980][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.694936][T14066] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2749'. [ 294.702258][T14062] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.742301][T14062] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.2748: corrupted in-inode xattr: e_value size too large [ 294.756346][T14062] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.757623][T14066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2749'. [ 294.759753][T14062] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2748: couldn't read orphan inode 15 (err -117) [ 294.788599][T14062] loop8: lost filesystem error report for type 5 error -117 [ 294.801659][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 294.815509][ C0] EXT4-fs (loop8): initial error at time 1786837051: ext4_iget_extra_inode:5180: inode 15 [ 294.820701][T14062] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.825506][ C0] EXT4-fs (loop8): last error at time 1786837051: ext4_orphan_get:1404 [ 294.889286][T13915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.902897][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.908014][T14074] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.928458][T14074] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.095188][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.174202][T13915] veth0_vlan: entered promiscuous mode [ 295.182556][T14118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.196891][T14118] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.209439][T13915] veth1_vlan: entered promiscuous mode [ 295.235116][T13915] veth0_macvtap: entered promiscuous mode [ 295.250841][T13915] veth1_macvtap: entered promiscuous mode [ 295.264754][T13915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.282500][T13915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.293040][ T396] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.324577][T14126] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 295.343369][ T7869] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.356556][T14126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 295.359941][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.372728][T14126] EXT4-fs (loop5): orphan cleanup on readonly fs [ 295.381245][T14126] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.2762: bad orphan inode 3 [ 295.395142][ T68] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.402028][T14126] loop5: lost filesystem error report for type 5 error -117 [ 295.405732][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 295.411740][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.413085][ C0] EXT4-fs (loop5): initial error at time 1786837051: ext4_orphan_get:1425 [ 295.428418][T14126] EXT4-fs (loop5): Remounting filesystem read-only [ 295.436760][ C0] EXT4-fs (loop5): last error at time 1786837051: ext4_orphan_get:1425 [ 295.479117][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2708'. [ 295.483385][T14126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 295.502038][T14126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 295.594086][T14138] EXT4-fs: Ignoring removed nobh option [ 295.613257][T14138] EXT4-fs (loop7): 1 orphan inode deleted [ 295.622326][T14138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.649294][T13915] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.696203][T14151] iso9660: Bad value for 'session' [ 295.949144][T14158] gretap0 speed is unknown, defaulting to 1000 [ 295.963121][T14177] set_capacity_and_notify: 11 callbacks suppressed [ 295.963141][T14177] loop3: detected capacity change from 0 to 1024 [ 296.024090][T14177] loop3: detected capacity change from 0 to 512 [ 296.051920][T14183] tmpfs: Unknown parameter 'no' [ 296.062376][T14177] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 296.075228][T14177] System zones: 0-2, 18-18, 34-35 [ 296.102318][T14177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.140186][T14177] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.159584][T14192] loop5: detected capacity change from 0 to 128 [ 296.170847][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2777'. [ 296.186985][T14192] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.216051][T14192] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.271569][T14192] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 296.284087][ T969] IPVS: starting estimator thread 0... [ 296.297589][ T9589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.422098][ T7869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.432557][T14199] IPVS: using max 2448 ests per chain, 122400 per kthread [ 296.457717][T10743] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.468534][ T7869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.512312][T14158] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.519465][T14158] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.526829][T14158] bridge_slave_0: entered allmulticast mode [ 296.533431][T14158] bridge_slave_0: entered promiscuous mode [ 296.541382][T14158] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.548466][T14158] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.555893][T14158] bridge_slave_1: entered allmulticast mode [ 296.562529][T14158] bridge_slave_1: entered promiscuous mode [ 296.591304][ T7869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.623608][ T7869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.650402][T14158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.676021][ T7869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.688110][ T7869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.706007][T14158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.718180][T14231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2786'. [ 296.731210][T14228] loop5: detected capacity change from 0 to 512 [ 296.738100][T14231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2786'. [ 296.753276][T14228] EXT4-fs (loop5): inodes count not valid: 66 vs 32 [ 296.777314][ T7869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.788314][ T7869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.808341][T14231] syzkaller0: entered promiscuous mode [ 296.814861][T14231] syzkaller0: entered allmulticast mode [ 296.826352][T14158] team0: Port device team_slave_0 added [ 296.841124][T14158] team0: Port device team_slave_1 added [ 296.912938][T14240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.926072][T14240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.941159][ T6620] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 296.953866][T14158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.960834][T14158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.987034][T14158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.004355][T14158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.011526][T14158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.038695][T14158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.054310][T14240] loop8: detected capacity change from 0 to 512 [ 297.090434][T14240] EXT4-fs: Ignoring removed nobh option [ 297.096041][T14240] EXT4-fs: Ignoring removed oldalloc option [ 297.102551][T14240] EXT4-fs: old and new quota format mixing [ 297.137392][T14250] program syz.3.2791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.158344][T14240] loop8: detected capacity change from 0 to 1764 [ 297.175906][ T7869] bridge_slave_1: left allmulticast mode [ 297.181762][ T7869] bridge_slave_1: left promiscuous mode [ 297.196099][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.226032][ T7869] bridge_slave_0: left allmulticast mode [ 297.234534][ T7869] bridge_slave_0: left promiscuous mode [ 297.252493][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.264793][T14264] loop3: detected capacity change from 0 to 128 [ 297.272687][T14264] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.293764][ T28] kauditd_printk_skb: 198 callbacks suppressed [ 297.293852][ T28] audit: type=1400 audit(1786837053.528:27553): avc: denied { watch_reads } for pid=14263 comm="syz.3.2796" path="/216/file0/file0" dev="loop3" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 297.453761][ T7869] bond1 (unregistering): (slave bond2): Releasing backup interface [ 297.463247][ T7869] bond1 (unregistering): Released all slaves [ 297.489970][T14267] loop5: detected capacity change from 0 to 1764 [ 297.496768][T14267] iso9660: Bad value for 'gid' [ 297.501560][T14267] iso9660: Bad value for 'gid' [ 297.507017][ T7869] bond2 (unregistering): Released all slaves [ 297.523565][ T7869] bond3 (unregistering): Released all slaves [ 297.533284][ T7869] bond4 (unregistering): Released all slaves [ 297.551449][ T7869] bond5 (unregistering): Released all slaves [ 297.563779][ T7869] bond0 (unregistering): Released all slaves [ 297.577304][ T7869] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 297.586245][T14271] loop5: detected capacity change from 0 to 128 [ 297.622338][ T7869] bond6 (unregistering): Released all slaves [ 297.663088][T14158] hsr_slave_0: entered promiscuous mode [ 297.672019][T14158] hsr_slave_1: entered promiscuous mode [ 297.678439][T14158] debugfs: 'hsr0' already exists in 'hsr' [ 297.690434][T14158] Cannot create hsr debugfs directory [ 297.700650][ T35] gretap0 speed is unknown, defaulting to 1000 [ 297.707060][T11801] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 297.716199][ T35] infiniband syz1: ib_query_port failed (-19) [ 297.751096][ T6643] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 297.770999][ T6643] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 297.799479][ T7869] tipc: Left network mode [ 297.837235][ T7869] hsr_slave_0: left promiscuous mode [ 297.851469][ T7869] hsr_slave_1: left promiscuous mode [ 297.860861][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.870260][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.920052][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.933421][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.938334][ T28] audit: type=1400 audit(1786837054.120:27554): avc: denied { write } for pid=14283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.987483][ T7869] veth1_macvtap: left promiscuous mode [ 297.993078][ T7869] veth0_macvtap: left promiscuous mode [ 298.015272][ T28] audit: type=1400 audit(1786837054.185:27555): avc: denied { write } for pid=14302 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.067456][T14305] loop7: detected capacity change from 0 to 128 [ 298.074152][T14305] ext4: Unknown parameter 'dont_appraise' [ 298.192357][ T7869] team0 (unregistering): Port device team_slave_1 removed [ 298.212624][ T7869] team0 (unregistering): Port device team_slave_0 removed [ 298.298233][T14298] ip6erspan0: entered allmulticast mode [ 298.306192][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 298.424893][T14158] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 298.444528][T14332] tmpfs: Bad value for 'mpol' [ 298.507338][T14336] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.539452][T14158] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 298.577002][T14336] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.2817: bad orphan inode 13 [ 298.587249][T14336] loop8: lost filesystem error report for type 5 error -117 [ 298.587539][T14336] ext4_test_bit(bit=12, block=18) = 1 [ 298.594886][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 298.594908][ C0] EXT4-fs (loop8): last error at time 1786837054: ext4_orphan_get:1425 [ 298.616043][T14336] is_bad_inode(inode)=0 [ 298.620246][T14336] NEXT_ORPHAN(inode)=0 [ 298.624846][T14336] max_ino=32 [ 298.629449][T14336] i_nlink=1 [ 298.633064][T14336] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 298.656292][T14350] __nla_validate_parse: 1 callbacks suppressed [ 298.656309][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2817'. [ 298.678600][T14158] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 298.714236][ T28] audit: type=1400 audit(1786837054.841:27556): avc: denied { write } for pid=14335 comm="syz.8.2817" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.714335][T14351] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 298.763608][T14351] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2817: bg 0: block 248: padding at end of block bitmap is not set [ 298.780486][T14351] Quota error (device loop8): write_blk: dquota write failed [ 298.788141][T14351] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 298.800327][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2817'. [ 298.811593][ T28] audit: type=1400 audit(1786837054.934:27557): avc: denied { write } for pid=14334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.834076][T14351] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.2817: Failed to acquire dquot type 1 [ 298.839333][T14354] bridge0: port 3(vlan2) entered blocking state [ 298.866616][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2817'. [ 298.878981][ T28] audit: type=1400 audit(1786837054.998:27558): avc: denied { write } for pid=14364 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.902173][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2817'. [ 298.925640][T14354] bridge0: port 3(vlan2) entered disabled state [ 298.933086][ T28] audit: type=1400 audit(1786837055.026:27559): avc: denied { write } for pid=14335 comm="syz.8.2817" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.955302][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2817'. [ 298.957175][T14354] vlan2: entered allmulticast mode [ 298.965976][ T28] audit: type=1400 audit(1786837055.026:27560): avc: denied { write } for pid=14335 comm="syz.8.2817" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.993901][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2817'. [ 298.995910][T14354] bridge0: entered allmulticast mode [ 299.008580][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2817'. [ 299.009173][T14354] bridge0: entered promiscuous mode [ 299.023041][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2817'. [ 299.033085][T14354] vlan2: left allmulticast mode [ 299.038378][T14354] bridge0: left allmulticast mode [ 299.043520][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2817'. [ 299.053119][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2817'. [ 299.067393][ T3611] bridge0: left promiscuous mode [ 299.077168][ T7869] IPVS: stop unused estimator thread 0... [ 299.104388][T14158] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 299.190308][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 299.212176][ T36] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 299.229874][ T36] loop8: lost filesystem error report for type 5 error -117 [ 299.251274][T14158] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.300481][ T3611] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 299.310188][ T3611] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.405482][T14158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.422563][T14158] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.432314][T14158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.440631][T14391] udevd[14391]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 299.464989][T14158] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.482869][T14158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.532719][T14158] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.557523][T14158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.609512][T14400] ALSA: seq fatal error: cannot create timer (-22) [ 299.628634][T14158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.643636][T14158] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.673040][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.680170][ T6643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.690938][T14404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.701714][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.708909][ T7869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.822095][T14437] ip6gretap1: entered allmulticast mode [ 299.922560][T14443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.970001][T14158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.983704][T14443] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.010359][T14443] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.2836: iget: bad i_size value: 2533274857506816 [ 300.024658][T14437] EXT4-fs (loop3): orphan cleanup on readonly fs [ 300.039882][T14437] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.2834: corrupted inode contents [ 300.051764][T14437] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 300.058905][T14437] EXT4-fs (loop3): Remounting filesystem read-only [ 300.072067][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 300.074619][T14437] EXT4-fs (loop3): 1 orphan inode deleted [ 300.081047][ C1] EXT4-fs (loop3): initial error at time 1786837056: ext4_do_update_inode:5742: inode 15 [ 300.087895][T14437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 300.096697][ C1] EXT4-fs (loop3): last error at time 1786837056: ext4_do_update_inode:5742: inode 15 [ 300.146556][T14448] EXT4-fs (loop7): 1 orphan inode deleted [ 300.152845][T14448] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.166713][ T36] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 300.178194][ T36] loop7: lost filesystem error report for type 5 error -117 [ 300.178937][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.195466][T14448] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.237640][T14158] veth0_vlan: entered promiscuous mode [ 300.251611][T14448] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 300.279635][T14158] veth1_vlan: entered promiscuous mode [ 300.323118][ T9589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.361417][T14158] veth0_macvtap: entered promiscuous mode [ 300.376567][T14158] veth1_macvtap: entered promiscuous mode [ 300.695120][T14158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.731452][T14158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.922447][ T7869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.932761][ T7869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.941667][ T7869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.950539][ T7869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.974944][T13915] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.130680][T14491] EXT4-fs: Ignoring removed bh option [ 301.264434][T14491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 302.236979][T14542] set_capacity_and_notify: 10 callbacks suppressed [ 302.237012][T14542] loop8: detected capacity change from 0 to 4096 [ 302.254778][T14542] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.281914][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.437006][T14557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.446003][T14557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.576460][T14562] loop3: detected capacity change from 0 to 1024 [ 302.584844][T14562] EXT4-fs: Ignoring removed bh option [ 302.694745][T14562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 302.729274][ T28] kauditd_printk_skb: 180 callbacks suppressed [ 302.729295][ T28] audit: type=1400 audit(1786837058.538:27739): avc: denied { write } for pid=14561 comm="syz.3.2872" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.761486][ T28] audit: type=1400 audit(1786837058.538:27740): avc: denied { write } for pid=14561 comm="syz.3.2872" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.812888][T13188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 302.824107][T13188] syz_tun (unregistering): left allmulticast mode [ 302.830730][T13188] syz_tun (unregistering): left promiscuous mode [ 302.837354][T13188] bridge0: port 3(syz_tun) entered disabled state [ 302.934307][T14576] loop8: detected capacity change from 0 to 128 [ 302.973924][T14580] loop8: detected capacity change from 0 to 512 [ 303.063412][T14580] EXT4-fs (loop8): 1 orphan inode deleted [ 303.069716][T14580] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.082405][T14580] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.096774][ T28] audit: type=1400 audit(1786837058.898:27741): avc: denied { write } for pid=14579 comm="syz.8.2880" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.120675][T14580] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 303.164240][T14577] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.172363][T14577] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.179680][T14577] bridge_slave_0: entered allmulticast mode [ 303.187161][T14577] bridge_slave_0: entered promiscuous mode [ 303.194577][ T28] audit: type=1400 audit(1786837058.990:27742): avc: denied { write } for pid=14579 comm="syz.8.2880" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.216979][T14577] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.224426][T14577] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.231790][T14577] bridge_slave_1: entered allmulticast mode [ 303.238739][T14577] bridge_slave_1: entered promiscuous mode [ 303.258505][T14577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.269166][T14577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.316650][T14602] loop5: detected capacity change from 0 to 128 [ 303.329470][T14602] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.342219][T14602] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.354795][ T28] audit: type=1400 audit(1786837059.138:27743): avc: denied { write } for pid=14601 comm="syz.5.2883" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.381885][T14577] team0: Port device team_slave_0 added [ 303.417986][T14577] team0: Port device team_slave_1 added [ 303.436190][T14577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.443346][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.448933][T14608] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:19999 [ 303.469392][T14577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.487535][T14577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.494525][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.520528][T14577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.558574][T14610] bridge0: port 3(vlan2) entered blocking state [ 303.565040][T14610] bridge0: port 3(vlan2) entered disabled state [ 303.570695][ T28] audit: type=1400 audit(1786837059.332:27744): avc: denied { setattr } for pid=14601 comm="syz.5.2883" path="/217/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 303.571973][T14610] vlan2: entered allmulticast mode [ 303.600002][T14610] bridge0: entered allmulticast mode [ 303.606699][ T28] audit: type=1400 audit(1786837059.369:27745): avc: denied { map } for pid=14601 comm="syz.5.2883" path="/217/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 303.638352][T14610] bridge0: entered promiscuous mode [ 303.646310][ T28] audit: type=1400 audit(1786837059.369:27746): avc: denied { execute } for pid=14601 comm="syz.5.2883" path="/217/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 303.670428][T14610] vlan2: left allmulticast mode [ 303.681366][T14610] bridge0: left allmulticast mode [ 303.693560][ T28] audit: type=1400 audit(1786837059.434:27747): avc: denied { ioctl } for pid=14601 comm="syz.5.2883" path="/217/file1/file1" dev="loop5" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 303.721277][T14614] loop7: detected capacity change from 0 to 8192 [ 303.755989][ T9137] bridge0: left promiscuous mode [ 303.764974][ T396] bridge_slave_1: left allmulticast mode [ 303.770908][ T396] bridge_slave_1: left promiscuous mode [ 303.776931][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.784721][ T396] bridge_slave_0: left allmulticast mode [ 303.790465][ T396] bridge_slave_0: left promiscuous mode [ 303.796192][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.845359][T14617] loop7: detected capacity change from 0 to 512 [ 303.853155][T14617] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 303.867708][ T396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.881803][ T396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.891215][ T396] bond0 (unregistering): Released all slaves [ 303.899238][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.901142][ T396] bond1 (unregistering): Released all slaves [ 303.924323][ T396] bond2 (unregistering): Released all slaves [ 303.944994][ T396] bond4 (unregistering): Released all slaves [ 303.955255][T14620] netlink: 'syz.7.2887': attribute type 13 has an invalid length. [ 304.037872][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 304.064260][T14621] bridge1: entered promiscuous mode [ 304.070227][T14621] bridge1: entered allmulticast mode [ 304.075709][ T396] tipc: Left network mode [ 304.101733][ T396] hsr_slave_0: left promiscuous mode [ 304.107477][ T396] hsr_slave_1: left promiscuous mode [ 304.114436][ T396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.122579][ T396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.255679][ T396] team0 (unregistering): Port device team_slave_1 removed [ 304.344341][T14625] loop7: detected capacity change from 0 to 128 [ 304.352426][ T396] team0 (unregistering): Port device team_slave_0 removed [ 304.580569][T14577] hsr_slave_0: entered promiscuous mode [ 304.604748][T14577] hsr_slave_1: entered promiscuous mode [ 304.632636][T14577] debugfs: 'hsr0' already exists in 'hsr' [ 304.649435][T14577] Cannot create hsr debugfs directory [ 304.686599][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 304.695267][ T36] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 304.709385][ T28] audit: type=1326 audit(1786837060.385:27748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14626 comm="syz.7.2890" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d28e0d9 code=0x7ffc0000 [ 304.721062][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 304.836070][T14577] netdevsim netdevsim4 eth12 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 304.963770][T14577] netdevsim netdevsim4 eth11 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 304.979079][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 305.059236][T14577] netdevsim netdevsim4 eth10 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 305.112929][ T396] IPVS: stop unused estimator thread 0... [ 305.156641][T10743] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.167960][T14577] netdevsim netdevsim4 eth9 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 305.198723][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 305.241521][T14672] bridge0: port 1(vlan2) entered blocking state [ 305.258027][T14672] bridge0: port 1(vlan2) entered disabled state [ 305.268464][T14672] vlan2: entered allmulticast mode [ 305.273684][T14672] bridge0: entered allmulticast mode [ 305.289765][T14672] bridge0: entered promiscuous mode [ 305.313205][T14672] vlan2: left allmulticast mode [ 305.321900][T14672] bridge0: left allmulticast mode [ 305.346282][ T11] bridge0: left promiscuous mode [ 305.394283][T14577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.411160][T14577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.427693][T14577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.437119][T14681] loop5: detected capacity change from 0 to 8192 [ 305.446380][T14577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.455752][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 305.463304][T14577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.494584][T14577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.511812][T14577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.545820][T14577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.563253][T14695] __nla_validate_parse: 63 callbacks suppressed [ 305.563302][T14695] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2898'. [ 305.622592][T14577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.638414][T14695] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2898'. [ 305.652343][T14577] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.664076][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.671309][ T7869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.684983][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.692093][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.724663][T14577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.766186][T14712] loop7: detected capacity change from 0 to 256 [ 305.805973][T14158] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 305.833469][ T396] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.042703][T14577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.371363][T14786] netlink: 'syz.8.2908': attribute type 1 has an invalid length. [ 306.380465][T14577] veth0_vlan: entered promiscuous mode [ 306.418882][T14786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.430435][T14577] veth1_vlan: entered promiscuous mode [ 306.478362][T14577] veth0_macvtap: entered promiscuous mode [ 306.496207][T14577] veth1_macvtap: entered promiscuous mode [ 306.527370][T14577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.553387][T14577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.571218][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.680816][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 306.710609][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.719953][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.798474][ T6643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.847033][T14742] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.860489][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.893912][T14742] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.912101][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.930381][T14742] bridge_slave_0: entered allmulticast mode [ 306.956024][T14742] bridge_slave_0: entered promiscuous mode [ 306.971850][T14742] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.995793][T14742] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.016904][T14742] bridge_slave_1: entered allmulticast mode [ 307.035517][T14742] bridge_slave_1: entered promiscuous mode [ 307.080549][T14742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.107011][ T396] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.134243][T14848] netlink: 'syz.4.2878': attribute type 30 has an invalid length. [ 307.150458][T14742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.178775][T14848] bond1: option arp_missed_max: invalid value (0) [ 307.196291][T14848] bond1: option arp_missed_max: allowed values 1 - 255 [ 307.207078][T14848] bond1 (unregistering): Released all slaves [ 307.240173][T14742] team0: Port device team_slave_0 added [ 307.250073][ T396] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.264863][T14742] team0: Port device team_slave_1 added [ 307.306958][T14742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.337429][T14742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.415107][T14742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.444472][T14742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.452925][T14742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.479215][T14742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.542628][ T396] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.587911][T14742] hsr_slave_0: entered promiscuous mode [ 307.595942][T14742] hsr_slave_1: entered promiscuous mode [ 307.603125][T14742] debugfs: 'hsr0' already exists in 'hsr' [ 307.609086][T14742] Cannot create hsr debugfs directory [ 307.653286][ T36] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20001 - 0 [ 307.695047][ T36] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 20001 - 0 [ 307.708724][ T6643] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 20001 - 0 [ 307.720016][ T6643] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 20001 - 0 [ 307.763118][ T396] bridge_slave_1: left allmulticast mode [ 307.768861][ T396] bridge_slave_1: left promiscuous mode [ 307.779961][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.815352][ T396] bridge_slave_0: left allmulticast mode [ 307.835669][ T396] bridge_slave_0: left promiscuous mode [ 307.847100][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.018265][ T396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.052733][ T396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.080284][ T396] bond0 (unregistering): Released all slaves [ 308.158314][ T396] hsr_slave_0: left promiscuous mode [ 308.186029][ T396] hsr_slave_1: left promiscuous mode [ 308.191742][ T28] kauditd_printk_skb: 424 callbacks suppressed [ 308.191761][ T28] audit: type=1400 audit(1786837063.598:28173): avc: denied { listen } for pid=14943 comm="syz.7.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 308.205152][ T396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.237826][ T396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.248933][ T396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.256559][ T396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.268560][T14950] loop8: detected capacity change from 0 to 512 [ 308.280015][ T396] veth1_macvtap: left promiscuous mode [ 308.287266][ T396] veth0_macvtap: left promiscuous mode [ 308.312460][ T396] veth1_vlan: left promiscuous mode [ 308.324808][ T396] veth0_vlan: left promiscuous mode [ 308.330417][T14952] loop5: detected capacity change from 0 to 128 [ 308.340602][T14950] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.362293][T14950] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.395054][T14952] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.408076][ T28] audit: type=1400 audit(1786837063.765:28174): avc: denied { write } for pid=14941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.467062][T14952] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.487537][ T28] audit: type=1400 audit(1786837063.866:28175): avc: denied { write } for pid=14951 comm="syz.5.2937" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.521928][ T28] audit: type=1400 audit(1786837063.903:28176): avc: denied { write } for pid=14974 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.552198][ T28] audit: type=1400 audit(1786837063.931:28177): avc: denied { write } for pid=14977 comm="syz.5.2937" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.684693][ T396] team0 (unregistering): Port device team_slave_1 removed [ 308.719419][ T28] audit: type=1400 audit(1786837064.060:28178): avc: denied { write } for pid=14980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.742923][ T28] audit: type=1400 audit(1786837064.060:28179): avc: denied { write } for pid=14991 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.837334][T15004] loop7: detected capacity change from 0 to 512 [ 308.849828][ T28] audit: type=1400 audit(1786837064.199:28180): avc: denied { write } for pid=14994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.886494][T15004] EXT4-fs: Mount option(s) incompatible with ext2 [ 308.901532][ T28] audit: type=1400 audit(1786837064.254:28181): avc: denied { write } for pid=15007 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.930035][ T396] team0 (unregistering): Port device team_slave_0 removed [ 309.013849][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.035366][T10743] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.070136][T15015] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2946'. [ 309.109909][ T28] audit: type=1326 audit(1786837064.448:28182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15010 comm="syz.4.2944" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa970ce0d9 code=0x7ffc0000 [ 309.158219][T14742] netdevsim netdevsim0 eth16 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 309.322736][T15036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.331496][T15036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.359984][T14742] netdevsim netdevsim0 eth15 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 309.783939][T14742] netdevsim netdevsim0 eth14 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 309.875607][T15058] loop8: detected capacity change from 0 to 512 [ 309.911960][T15039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=15039 comm=syz.4.2951 [ 310.027835][T14742] netdevsim netdevsim0 eth13 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 310.297582][T14742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.310148][T14742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.338027][T14742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.368709][T14742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.382801][T14742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.397658][T14742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.405860][T14742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.415386][T14742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.465032][T14742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.477999][T14742] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.488878][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.496021][ T6643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.516234][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.523463][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.620465][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 310.672007][T14742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.764098][T14742] veth0_vlan: entered promiscuous mode [ 310.770969][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 310.780831][T14742] veth1_vlan: entered promiscuous mode [ 310.799691][T14742] veth0_macvtap: entered promiscuous mode [ 310.807480][T14742] veth1_macvtap: entered promiscuous mode [ 310.840547][T14742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.853029][T14742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.883385][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.896952][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.924398][ T7869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.931710][T15164] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2963'. [ 310.937956][ T7869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.998461][T15172] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2902'. [ 311.037882][T15177] ip6tnl0: Caught tx_queue_len zero misconfig [ 311.096860][T15184] program syz.8.2967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.098930][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 311.166155][T15186] netlink: 'syz.8.2968': attribute type 10 has an invalid length. [ 311.180916][T15186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.215458][T15186] : (slave netdevsim2): Enslaving as an active interface with an up link [ 311.245588][T15191] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2968'. [ 311.308280][T15199] loop7: detected capacity change from 0 to 1024 [ 311.319218][T15191]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.327811][T15199] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.354939][T15199] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 311.383426][T15191]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.397979][T15199] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 311.423603][T15199] EXT4-fs error (device loop7): ext4_get_journal_inode:5900: inode #2: comm syz.7.2971: iget: special inode unallocated [ 311.440444][T15199] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 311.442167][T15191]  (unregistering): (slave netdevsim2): Releasing backup interface [ 311.451356][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 311.451381][ C0] EXT4-fs (loop7): initial error at time 1786837066: ext4_get_journal_inode:5900: inode 2 [ 311.451409][ C0] EXT4-fs (loop7): last error at time 1786837066: ext4_get_journal_inode:5900: inode 2 [ 311.477093][T15199] EXT4-fs (loop7): no journal found [ 311.509276][T15191]  (unregistering): Released all slaves [ 311.535401][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 311.560285][T15221] PM: Enabling pm_trace changes system date and time during resume. [ 311.560285][T15221] PM: Correct system time has to be restored manually after resume. [ 311.583781][T15209] bridge0: port 1(vlan2) entered blocking state [ 311.590129][T15209] bridge0: port 1(vlan2) entered disabled state [ 311.596741][T15209] vlan2: entered allmulticast mode [ 311.602050][T15209] bridge0: entered allmulticast mode [ 311.607424][T15209] bridge0: entered promiscuous mode [ 311.637863][T15209] vlan2: left allmulticast mode [ 311.643011][T15209] bridge0: left allmulticast mode [ 311.652817][ T11] bridge0: left promiscuous mode [ 311.718003][T15240] tmpfs: Bad value for 'mpol' [ 311.727157][T15238] loop0: detected capacity change from 0 to 1024 [ 311.744450][T15238] EXT4-fs: dax option not supported [ 311.844855][T15247] bond0: entered promiscuous mode [ 311.850056][T15247] bond_slave_0: entered promiscuous mode [ 311.855887][T15247] bond_slave_1: entered promiscuous mode [ 311.863070][T15247] batadv0: entered promiscuous mode [ 311.869887][T15247] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 311.887368][T15247] bond0: left promiscuous mode [ 311.892203][T15247] bond_slave_0: left promiscuous mode [ 311.892483][T15238] loop0: detected capacity change from 0 to 512 [ 311.897882][T15247] bond_slave_1: left promiscuous mode [ 311.914440][T15247] batadv0: left promiscuous mode [ 311.933160][T15257] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2984'. [ 311.965586][T15257] netlink: 'syz.4.2984': attribute type 29 has an invalid length. [ 311.977707][T15257] netlink: 'syz.4.2984': attribute type 29 has an invalid length. [ 311.996162][T15238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.008823][T15238] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.035509][T15238] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 312.183992][T15284] bond1: option all_slaves_active: invalid value (5) [ 312.208527][T15291] loop7: detected capacity change from 0 to 1764 [ 312.211263][T15284] bond1 (unregistering): Released all slaves [ 312.363941][T15312] loop0: detected capacity change from 0 to 1024 [ 312.388408][T15312] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 312.422516][T15312] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 312.458079][T15312] JBD2: no valid journal superblock found [ 312.471703][T15312] EXT4-fs (loop0): Could not load journal inode [ 312.512893][T15321] bridge0: port 1(vlan2) entered blocking state [ 312.525479][T15321] bridge0: port 1(vlan2) entered disabled state [ 312.543870][T15321] vlan2: entered allmulticast mode [ 312.559638][T15321] bridge0: entered allmulticast mode [ 312.581279][T15321] bridge0: entered promiscuous mode [ 312.598659][T15329] loop0: detected capacity change from 0 to 512 [ 312.628670][T15321] vlan2: left allmulticast mode [ 312.637706][T15321] bridge0: left allmulticast mode [ 312.650940][T15329] EXT4-fs error (device loop0): ext4_quota_enable:7228: comm syz.0.2995: Bad quota inum: 3774873604, type: 1 [ 312.678469][T15329] loop0: lost filesystem error report for type 5 error -117 [ 312.678655][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 312.692546][ C1] EXT4-fs (loop0): initial error at time 1786837067: ext4_quota_enable:7228 [ 312.701301][ C1] EXT4-fs (loop0): last error at time 1786837067: ext4_quota_enable:7228 [ 312.710085][T15329] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=3774873604). Please run e2fsck to fix. [ 312.728393][T15329] EXT4-fs (loop0): mount failed [ 312.733805][ T11] bridge0: left promiscuous mode [ 312.776033][T15344] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2997'. [ 312.822592][T15348] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2998'. [ 313.064122][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3004'. [ 313.085154][T15370] FAULT_INJECTION: forcing a failure. [ 313.085154][T15370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.117067][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.4.3004 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 313.117108][T15370] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 313.117156][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.117174][T15370] Call Trace: [ 313.117204][T15370] [ 313.117214][T15370] __dump_stack+0x1d/0x30 [ 313.117247][T15370] dump_stack_lvl+0x95/0xd0 [ 313.117277][T15370] dump_stack+0x15/0x1b [ 313.117304][T15370] should_fail_ex+0x25e/0x270 [ 313.117381][T15370] should_fail+0xb/0x20 [ 313.117410][T15370] should_fail_usercopy+0x1a/0x20 [ 313.117503][T15370] _copy_to_user+0x20/0xa0 [ 313.117532][T15370] simple_read_from_buffer+0xb5/0x130 [ 313.117561][T15370] proc_fail_nth_read+0x10e/0x150 [ 313.117655][T15370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.117686][T15370] vfs_read+0x18e/0x7c0 [ 313.117712][T15370] ? __rcu_read_unlock+0x4e/0x70 [ 313.117748][T15370] ? __fget_files+0x184/0x1c0 [ 313.117790][T15370] ? mutex_lock+0x57/0x90 [ 313.117896][T15370] ksys_read+0xdc/0x1a0 [ 313.117919][T15370] __x64_sys_read+0x40/0x50 [ 313.117939][T15370] x64_sys_call+0x2886/0x3020 [ 313.118030][T15370] do_syscall_64+0x136/0x3c0 [ 313.118066][T15370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.118098][T15370] RIP: 0033:0x7ffa9708e90e [ 313.118115][T15370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.118173][T15370] RSP: 002b:00007ffa95b26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.118201][T15370] RAX: ffffffffffffffda RBX: 00007ffa95b276c0 RCX: 00007ffa9708e90e [ 313.118222][T15370] RDX: 000000000000000f RSI: 00007ffa95b270a0 RDI: 0000000000000004 [ 313.118240][T15370] RBP: 00007ffa95b27090 R08: 0000000000000000 R09: 0000000000000000 [ 313.118257][T15370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.118274][T15370] R13: 00007ffa97356038 R14: 00007ffa97355fa0 R15: 00007fff8627b5e8 [ 313.118302][T15370] [ 313.358336][T15348] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 313.367901][T15348] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.2998: corrupted in-inode xattr: e_value size too large [ 313.458461][T15348] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 313.462477][T15348] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2998: couldn't read orphan inode 15 (err -117) [ 313.472366][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 313.472495][ C1] EXT4-fs (loop7): initial error at time 1786837068: ext4_iget_extra_inode:5180: inode 15 [ 313.472893][ C1] EXT4-fs (loop7): last error at time 1786837068: ext4_iget_extra_inode:5180: inode 15 [ 313.477300][T15392] FAT-fs (loop4): data area starts beyond volume (542 > 512) [ 313.543765][T15392] FAT-fs (loop4): Can't find a valid FAT filesystem [ 313.600845][T15348] loop7: lost filesystem error report for type 5 error -117 [ 313.724280][ T28] kauditd_printk_skb: 214 callbacks suppressed [ 313.724301][ T28] audit: type=1400 audit(1786837068.704:28397): avc: denied { setopt } for pid=15399 comm="syz.4.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.814560][ T28] audit: type=1400 audit(1786837068.787:28398): avc: denied { write } for pid=15397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.876962][T15416] set_capacity_and_notify: 2 callbacks suppressed [ 313.877042][T15416] loop5: detected capacity change from 0 to 128 [ 313.891093][ T28] audit: type=1400 audit(1786837068.815:28399): avc: denied { write } for pid=15346 comm="syz.7.2998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 313.910615][ T28] audit: type=1400 audit(1786837068.815:28400): avc: denied { mmap_zero } for pid=15346 comm="syz.7.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 313.930495][ T28] audit: type=1400 audit(1786837068.815:28401): avc: denied { write } for pid=15417 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.011117][T15426] loop8: detected capacity change from 0 to 128 [ 314.054342][ T28] audit: type=1400 audit(1786837068.880:28402): avc: denied { mount } for pid=15415 comm="syz.5.3015" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 314.080544][ T28] audit: type=1400 audit(1786837068.990:28403): avc: denied { create } for pid=15423 comm="syz.7.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 314.194897][ T28] audit: type=1400 audit(1786837069.138:28404): avc: denied { create } for pid=15430 comm="syz.4.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 314.215469][T15440] loop7: detected capacity change from 0 to 4096 [ 314.232088][ T28] audit: type=1400 audit(1786837069.166:28405): avc: denied { write } for pid=15421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.255991][ T28] audit: type=1400 audit(1786837069.175:28406): avc: denied { mount } for pid=15445 comm="syz.8.3023" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 314.280508][T15440] EXT4-fs (loop7): shut down requested (2) [ 314.407800][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3027'. [ 314.421821][T15457] netlink: 'syz.5.3025': attribute type 1 has an invalid length. [ 314.466669][T15454] loop5: detected capacity change from 0 to 7 [ 314.498778][T15457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.500305][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.514992][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 314.526688][T15463] loop4: detected capacity change from 0 to 512 [ 314.533459][T15463] EXT4-fs: Ignoring removed nobh option [ 314.541304][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.550902][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 314.559070][T15454] loop5: unable to read partition table [ 314.564752][T15454] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 314.584235][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.593834][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 314.602954][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.612619][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 314.633486][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.643134][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 314.652446][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.662093][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 314.670219][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.679887][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 314.694203][T15463] EXT4-fs (loop4): 1 orphan inode deleted [ 314.779834][T15457] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 314.845870][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3031'. [ 315.087382][T15513] geneve2: entered allmulticast mode [ 315.392950][T15551] loop7: detected capacity change from 0 to 512 [ 315.508871][T15551] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 315.523012][T15551] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 315.543145][T15551] System zones: 0-1, 15-15, 18-18, 34-34 [ 315.554856][T15551] EXT4-fs (loop7): orphan cleanup on readonly fs [ 315.567419][T15551] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 315.592913][T15551] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 315.619385][T15551] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.3036: bad orphan inode 16 [ 315.631012][T15587] netlink: 161700 bytes leftover after parsing attributes in process `syz.8.3040'. [ 315.631116][T15587] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 315.654360][T15551] loop7: lost filesystem error report for type 5 error -117 [ 315.655361][T15551] ext4_test_bit(bit=15, block=18) = 1 [ 315.655698][T15551] is_bad_inode(inode)=0 [ 315.655717][T15551] NEXT_ORPHAN(inode)=0 [ 315.655827][T15551] max_ino=32 [ 315.655848][T15551] i_nlink=2 [ 315.676535][T15534] SELinux: ebitmap: truncated map [ 315.676558][T15534] SELinux: invalid class [ 315.677854][T15534] SELinux: failed to load policy [ 315.946969][T15606] pim6reg9: entered allmulticast mode [ 315.956034][T15606] loop8: detected capacity change from 0 to 512 [ 315.979290][T15606] EXT4-fs (loop8): orphan cleanup on readonly fs [ 315.999244][T15606] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.3044: ea_inode with extended attributes [ 316.028935][T15606] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 316.029212][T15606] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.3044: error while reading EA inode 11 err=-117 [ 316.038452][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 316.038475][ C0] EXT4-fs (loop8): initial error at time 1786837070: ext4_xattr_inode_iget:441: inode 11 [ 316.038528][ C0] EXT4-fs (loop8): last error at time 1786837070: ext4_xattr_inode_iget:441: inode 11 [ 316.084047][T15606] loop8: lost filesystem error report for type 5 error -117 [ 316.084499][T15606] EXT4-fs (loop8): 1 orphan inode deleted [ 316.308107][T15631] loop8: detected capacity change from 0 to 8192 [ 316.333738][T15633] vhci_hcd vhci_hcd.3: default hub control req: 010b v0000 i0000 l0 [ 316.439794][T15646] loop4: detected capacity change from 0 to 128 [ 316.485339][T15646] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.697891][T15663] loop0: detected capacity change from 0 to 512 [ 316.739664][T14577] EXT4-fs unmount: 12 callbacks suppressed [ 316.739682][T14577] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.806538][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3063'. [ 316.873763][T15674] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #11: block 992: comm syz.7.3067: lblock 6 mapped to illegal pblock 992 (length 1) [ 316.873813][T15674] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 316.874177][T15674] EXT4-fs (loop7): 1 orphan inode deleted [ 316.874768][T15674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.903761][T15672] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 316.903967][T15672] udc usbip-vudc.0: failed to start g1: -19 [ 316.904517][T15672] UDC core: g1: couldn't find an available UDC or it's busy [ 316.938399][T13915] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.056709][T15685] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 317.066852][T15685] FAT-fs (loop4): Filesystem has been set read-only [ 317.160621][T15694] bridge0: port 3(vlan2) entered blocking state [ 317.175383][T15694] bridge0: port 3(vlan2) entered disabled state [ 317.189855][T15694] vlan2: entered allmulticast mode [ 317.195212][T15694] bridge0: entered allmulticast mode [ 317.200802][T15694] bridge0: entered promiscuous mode [ 317.282066][T15694] vlan2: left allmulticast mode [ 317.286982][T15694] bridge0: left allmulticast mode [ 317.299916][ T5803] bridge0: left promiscuous mode [ 317.313963][T15696] bridge0: port 1(vlan2) entered blocking state [ 317.320403][T15696] bridge0: port 1(vlan2) entered disabled state [ 317.326793][T15696] vlan2: entered allmulticast mode [ 317.331941][T15696] bridge0: entered allmulticast mode [ 317.337385][T15696] bridge0: entered promiscuous mode [ 317.343289][T15696] vlan2: left allmulticast mode [ 317.348178][T15696] bridge0: left allmulticast mode [ 317.367158][T15709] SET target dimension over the limit! [ 317.692415][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3081'. [ 317.885106][ T969] bridge0: left promiscuous mode [ 317.913729][T15721] UDC core: g1: couldn't find an available UDC or it's busy [ 317.971228][T15726] EXT4-fs: dax option not supported [ 318.052849][T15722] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 318.174246][ T11] IPVS: starting estimator thread 0... [ 318.204325][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.230721][T15744] tmpfs: Bad value for 'mpol' [ 318.367483][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.377895][T15738] IPVS: using max 2448 ests per chain, 122400 per kthread [ 318.407319][T15758] futex_wake_op: syz.0.3095 tries to shift op by 35; fix this program [ 318.426036][T15758] netlink: 'syz.0.3095': attribute type 1 has an invalid length. [ 318.490220][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.558311][T15764] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3096'. [ 318.575110][T15764] netlink: 176 bytes leftover after parsing attributes in process `syz.8.3096'. [ 318.611893][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.705536][T15776] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 318.705536][T15776] The task syz.0.3097 (15776) triggered the difference, watch for misbehavior. [ 318.741709][ T396] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 20001 - 0 [ 318.864237][ T68] bridge_slave_1: left allmulticast mode [ 318.870045][ T68] bridge_slave_1: left promiscuous mode [ 318.889786][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.898242][ T68] bridge_slave_0: left allmulticast mode [ 318.904255][ T68] bridge_slave_0: left promiscuous mode [ 318.910341][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.009584][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.045017][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.084179][ T68] bond0 (unregistering): Released all slaves [ 319.113626][T15740] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.135807][T15740] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.165924][T15740] bridge_slave_0: entered allmulticast mode [ 319.190894][T15740] bridge_slave_0: entered promiscuous mode [ 319.218284][T15740] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.243867][T15740] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.269223][T15740] bridge_slave_1: entered allmulticast mode [ 319.293983][T15740] bridge_slave_1: entered promiscuous mode [ 319.396974][T15740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.443416][T15740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.540541][T15740] team0: Port device team_slave_0 added [ 319.568367][T15740] team0: Port device team_slave_1 added [ 319.646708][ T68] hsr_slave_0: left promiscuous mode [ 319.666824][ T68] hsr_slave_1: left promiscuous mode [ 319.698233][ T28] kauditd_printk_skb: 246 callbacks suppressed [ 319.698251][ T28] audit: type=1400 audit(1786837074.206:28652): avc: denied { write } for pid=15786 comm="syz.0.3102" name="instances" dev="tracefs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 319.727245][ T28] audit: type=1400 audit(1786837074.206:28653): avc: denied { add_name } for pid=15786 comm="syz.0.3102" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 319.748022][ T28] audit: type=1400 audit(1786837074.206:28654): avc: denied { create } for pid=15786 comm="syz.0.3102" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 319.780549][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.788029][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.795696][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.803560][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.835670][T15793] set_capacity_and_notify: 3 callbacks suppressed [ 319.835767][T15793] loop7: detected capacity change from 0 to 128 [ 319.836956][ T68] veth1_macvtap: left promiscuous mode [ 319.879432][ T68] veth0_macvtap: left promiscuous mode [ 319.889734][ T28] audit: type=1326 audit(1786837074.400:28655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.8.3101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ee99e0d9 code=0x7ffc0000 [ 319.917236][ T68] veth1_vlan: left promiscuous mode [ 319.927929][ T68] veth0_vlan: left promiscuous mode [ 319.973236][ T28] audit: type=1326 audit(1786837074.400:28656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.8.3101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ee99e0d9 code=0x7ffc0000 [ 320.062000][ T28] audit: type=1326 audit(1786837074.400:28657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.8.3101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ee99e0d9 code=0x7ffc0000 [ 320.122458][ T28] audit: type=1326 audit(1786837074.400:28658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.8.3101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ee99e0d9 code=0x7ffc0000 [ 320.180293][ T28] audit: type=1326 audit(1786837074.400:28659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.8.3101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ee99e0d9 code=0x7ffc0000 [ 320.238555][ T28] audit: type=1326 audit(1786837074.428:28660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.8.3101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ee99e0d9 code=0x7ffc0000 [ 320.239414][T15811] loop7: detected capacity change from 0 to 8192 [ 320.290499][ T28] audit: type=1326 audit(1786837074.428:28661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15784 comm="syz.8.3101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ee99e0d9 code=0x7ffc0000 [ 320.344060][ T68] team0 (unregistering): Port device team_slave_1 removed [ 320.357446][ T68] team0 (unregistering): Port device team_slave_0 removed [ 320.415973][T15740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.423146][T15740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.482718][T15740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.505373][T15787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3102'. [ 320.519531][T15808] bridge0: port 3(vlan2) entered blocking state [ 320.526047][T15808] bridge0: port 3(vlan2) entered disabled state [ 320.542722][T15808] vlan2: entered allmulticast mode [ 320.563356][T15808] bridge0: entered allmulticast mode [ 320.577021][T15808] bridge0: entered promiscuous mode [ 320.595955][T15817] x_tables: duplicate underflow at hook 2 [ 320.602117][T15808] vlan2: left allmulticast mode [ 320.607019][T15808] bridge0: left allmulticast mode [ 320.649775][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 320.679196][ T35] bridge0: left promiscuous mode [ 320.703592][T15740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.710712][T15740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.727976][T15824] program syz.8.3110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.736754][T15740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.760258][T15821] SELinux: ebitmap: truncated map [ 320.765389][T15821] SELinux: failed to load policy [ 320.802626][T15740] hsr_slave_0: entered promiscuous mode [ 320.808825][T15740] hsr_slave_1: entered promiscuous mode [ 320.815468][T15740] debugfs: 'hsr0' already exists in 'hsr' [ 320.821436][T15740] Cannot create hsr debugfs directory [ 320.903358][ T396] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 20001 - 0 [ 320.971589][T11801] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 20001 - 0 [ 321.013974][T11801] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 20001 - 0 [ 321.586040][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 321.636197][T15740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.646872][T15740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.660493][T15853] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 321.775440][T15740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.867195][T15875] netdevsim netdevsim7: Direct firmware load for .. failed with error -2 [ 321.874878][T15740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.925771][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 322.020766][T15740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.045409][T15740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.108324][T15740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.137531][T15740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.230924][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 323.341008][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3121'. [ 323.376478][T15740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.403082][T15740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.425359][T15740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.453495][T15740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.495988][T15740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.523311][T15740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.571645][T15740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.603133][T15740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.039549][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3122'. [ 324.076833][T15930] bridge0: port 3(vlan2) entered blocking state [ 324.083260][T15930] bridge0: port 3(vlan2) entered disabled state [ 324.090166][T15930] vlan2: entered allmulticast mode [ 324.092195][T15918] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 324.092195][T15918] program syz.8.3122 not setting count and/or reply_len properly [ 324.096300][T15930] bridge0: entered allmulticast mode [ 324.118819][T15930] bridge0: entered promiscuous mode [ 324.184874][T15930] vlan2: left allmulticast mode [ 324.188512][T15933] netlink: 'syz.8.3124': attribute type 10 has an invalid length. [ 324.193908][T15930] bridge0: left allmulticast mode [ 324.214540][T15931] loop7: detected capacity change from 0 to 8192 [ 324.241007][ T3611] bridge0: left promiscuous mode [ 324.255001][T15933] macvlan0: entered allmulticast mode [ 324.262848][T15933] veth1_vlan: entered allmulticast mode [ 324.271849][T15933] team0: Port device macvlan0 added [ 324.279685][T15740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.292111][T15740] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.318095][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.325243][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.377244][ T6643] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.384379][ T6643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.410192][T15740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.456651][T15942] FAULT_INJECTION: forcing a failure. [ 324.456651][T15942] name failslab, interval 1, probability 0, space 0, times 0 [ 324.493571][T15942] CPU: 0 UID: 0 PID: 15942 Comm: syz.8.3127 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 324.493731][T15942] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 324.493744][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.493762][T15942] Call Trace: [ 324.493771][T15942] [ 324.493781][T15942] __dump_stack+0x1d/0x30 [ 324.493815][T15942] dump_stack_lvl+0x95/0xd0 [ 324.493946][T15942] dump_stack+0x15/0x1b [ 324.493975][T15942] should_fail_ex+0x25e/0x270 [ 324.494055][T15942] should_failslab+0x8c/0xb0 [ 324.494089][T15942] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 324.494121][T15942] ? fcntl_setlk+0x4c/0x910 [ 324.494298][T15942] ? fcntl_setlk+0x4c/0x910 [ 324.494336][T15942] fcntl_setlk+0x4c/0x910 [ 324.494380][T15942] ? should_fail_ex+0xd9/0x270 [ 324.494424][T15942] do_fcntl+0x69c/0xf80 [ 324.494470][T15942] __se_sys_fcntl+0xb1/0x120 [ 324.494505][T15942] __x64_sys_fcntl+0x43/0x50 [ 324.494594][T15942] x64_sys_call+0x2844/0x3020 [ 324.494629][T15942] do_syscall_64+0x136/0x3c0 [ 324.494666][T15942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.494690][T15942] RIP: 0033:0x7fb3ee99e0d9 [ 324.494788][T15942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.494816][T15942] RSP: 002b:00007fb3ed3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 324.494844][T15942] RAX: ffffffffffffffda RBX: 00007fb3eec25fa0 RCX: 00007fb3ee99e0d9 [ 324.494939][T15942] RDX: 0000200000000140 RSI: 0000000000000025 RDI: 0000000000000003 [ 324.494968][T15942] RBP: 00007fb3ed3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.494987][T15942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.495079][T15942] R13: 00007fb3eec26038 R14: 00007fb3eec25fa0 R15: 00007ffef718c308 [ 324.495103][T15942] [ 324.828728][T15740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.012815][T15740] veth0_vlan: entered promiscuous mode [ 325.036497][T15740] veth1_vlan: entered promiscuous mode [ 325.082898][T15740] veth0_macvtap: entered promiscuous mode [ 325.106292][T15740] veth1_macvtap: entered promiscuous mode [ 325.137687][T15740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.170176][T15740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.079363][ T6643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.131761][ T6643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.157661][ T6643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.172429][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 326.172449][ T28] audit: type=1400 audit(1786837080.198:28796): avc: denied { ioctl } for pid=15968 comm="syz.1.3090" path="socket:[45528]" dev="sockfs" ino=45528 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.263237][ T28] audit: type=1400 audit(1786837080.290:28797): avc: denied { read } for pid=15972 comm="syz.1.3133" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 326.263464][ T6643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.360912][ T28] audit: type=1400 audit(1786837080.290:28798): avc: denied { open } for pid=15972 comm="syz.1.3133" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 326.450207][T15978] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 326.460203][ T28] audit: type=1400 audit(1786837080.457:28799): avc: denied { relabelfrom } for pid=15977 comm="syz.8.3136" name="NETLINK" dev="sockfs" ino=46192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 326.523214][ T28] audit: type=1400 audit(1786837080.457:28800): avc: denied { mac_admin } for pid=15977 comm="syz.8.3136" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.575943][ T28] audit: type=1400 audit(1786837080.493:28801): avc: denied { relabelto } for pid=15977 comm="syz.8.3136" name="NETLINK" dev="sockfs" ino=46192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_audit_socket permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 326.646336][ T28] audit: type=1400 audit(1786837080.613:28802): avc: denied { create } for pid=15979 comm="syz.1.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 326.672073][T15981] loop1: detected capacity change from 0 to 736 [ 326.678866][T15981] iso9660: Unknown parameter 'mar' [ 326.686231][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3134'. [ 326.703450][T15985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15985 comm=syz.8.3138 [ 326.731044][ T28] audit: type=1400 audit(1786837080.613:28803): avc: denied { write } for pid=15979 comm="syz.1.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 326.954041][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3141'. [ 326.967060][T15993] loop1: detected capacity change from 0 to 764 [ 326.997667][T15993] iso9660: Unknown parameter 'u' [ 327.037004][ T28] audit: type=1400 audit(1786837080.992:28804): avc: denied { write } for pid=15992 comm="syz.1.3142" name="igmp6" dev="proc" ino=4026534171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 327.090755][T16004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16004 comm=syz.7.3143 [ 327.134585][ T28] audit: type=1400 audit(1786837081.075:28805): avc: denied { write } for pid=15991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.537268][T16032] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3146'. [ 327.710500][T16041] loop1: detected capacity change from 0 to 512 [ 327.758017][T16041] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 327.769920][T16041] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 327.850294][T16048] bridge0: port 3(vlan2) entered blocking state [ 327.867707][T16048] bridge0: port 3(vlan2) entered disabled state [ 327.886225][T16048] vlan2: entered allmulticast mode [ 327.891736][T16051] loop7: detected capacity change from 0 to 512 [ 327.906882][T16048] bridge0: entered allmulticast mode [ 327.928858][T16048] bridge0: entered promiscuous mode [ 327.943403][T16051] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3153: inode has both inline data and extents flags [ 327.964941][T16052] loop8: detected capacity change from 0 to 8192 [ 327.972430][T16051] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 327.972850][T16048] vlan2: left allmulticast mode [ 327.982054][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 327.982075][ C1] EXT4-fs (loop7): initial error at time 1786837081: ext4_orphan_get:1399: inode 15 [ 327.982102][ C1] EXT4-fs (loop7): last error at time 1786837081: ext4_orphan_get:1399: inode 15 [ 328.013057][T16048] bridge0: left allmulticast mode [ 328.020139][T16051] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3153: couldn't read orphan inode 15 (err -117) [ 328.039891][T16053] loop1: detected capacity change from 0 to 8192 [ 328.048555][T16051] loop7: lost filesystem error report for type 5 error -117 [ 328.074269][T16051] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.145812][ T3611] bridge0: left promiscuous mode [ 328.861113][T16092] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3156'. [ 329.827753][T13915] Trying to write to read-only block-device loop7 [ 329.838454][T13915] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.065183][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 330.513291][T16182] loop1: detected capacity change from 0 to 256 [ 330.779592][T16194] loop1: detected capacity change from 0 to 764 [ 330.800518][T16194] iso9660: Unknown parameter '' [ 330.831284][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3169'. [ 331.106692][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'. [ 331.137583][T16208] bridge_slave_1: left allmulticast mode [ 331.143339][T16208] bridge_slave_1: left promiscuous mode [ 331.172346][T16208] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.302733][ T2981] ================================================================== [ 331.310894][ T2981] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 331.317540][ T2981] [ 331.319888][ T2981] read-write to 0xffff888105a51000 of 4 bytes by task 11567 on cpu 1: [ 331.328062][ T2981] dont_mount+0x2a/0x40 [ 331.332252][ T2981] vfs_unlink+0x202/0x490 [ 331.336623][ T2981] filename_unlinkat+0x1dc/0x410 [ 331.341600][ T2981] __se_sys_unlink+0x2b/0xe0 [ 331.346236][ T2981] __x64_sys_unlink+0x1f/0x30 [ 331.350949][ T2981] x64_sys_call+0x2eb6/0x3020 [ 331.355684][ T2981] do_syscall_64+0x136/0x3c0 [ 331.360317][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.366241][ T2981] [ 331.368592][ T2981] read to 0xffff888105a51000 of 4 bytes by task 2981 on cpu 0: [ 331.376159][ T2981] lookup_fast+0xf1/0x320 [ 331.380547][ T2981] path_lookupat+0x120/0x4c0 [ 331.385174][ T2981] filename_lookup+0x18f/0x390 [ 331.389988][ T2981] do_readlinkat+0x74/0x2f0 [ 331.394544][ T2981] __x64_sys_readlink+0x47/0x60 [ 331.399432][ T2981] x64_sys_call+0x2b51/0x3020 [ 331.404151][ T2981] do_syscall_64+0x136/0x3c0 [ 331.408769][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.414683][ T2981] [ 331.417025][ T2981] value changed: 0x00300080 -> 0x00004080 [ 331.422767][ T2981] [ 331.425114][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 331.431302][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 331.441775][ T2981] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 331.447432][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.457608][ T2981] ================================================================== [ 335.468920][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 335.468939][ T28] audit: type=1400 audit(1786837088.784:28935): avc: denied { write } for pid=16220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.528696][ T28] audit: type=1400 audit(1786837088.839:28936): avc: denied { write } for pid=16231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.186286][ T28] audit: type=1400 audit(1786837089.449:28937): avc: denied { write } for pid=16234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.258361][ T28] audit: type=1400 audit(1786837089.504:28938): avc: denied { write } for pid=16245 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.511439][ T28] audit: type=1400 audit(1786837089.744:28939): avc: denied { write } for pid=16248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.578682][ T28] audit: type=1400 audit(1786837089.809:28940): avc: denied { write } for pid=16259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.223896][ T28] audit: type=1400 audit(1786837090.409:28941): avc: denied { write } for pid=16263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.291047][ T28] audit: type=1400 audit(1786837090.464:28942): avc: denied { write } for pid=16274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1