last executing test programs: 2m51.726599493s ago: executing program 32 (id=565): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0xac, 0x6, 0xa5, 0x7, 0x0, 0x5, 0x2308, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0xee3adf7d4758d918, @perf_config_ext={0x4, 0x4}, 0x4000, 0x1ff, 0x5, 0x8, 0xffb, 0xa1a, 0x1, 0x0, 0xa, 0x0, 0xff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x69190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0xa, 0x8001, 0xf, 0x0, 0x2000003}, 0x0, 0xff6fbfffffffffff, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000300)="72f674", 0x3) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d8, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000380)={0xa, {0x5, 0x47, 0x7}}, 0xa) 2m28.27784682s ago: executing program 2 (id=778): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0xfffffffffffffe62) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xe39f45e35860640a, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x2) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x900, 0x9768, 0x14, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x1f, r1, 0x6a, 0x200008) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x6, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681a0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x10c0aa, 0x0, 0x2b, 0x4, 0xfffffffffffffff2, 0x8001, 0x7fff}, 0x0, 0xff6fbfdfffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x27, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timerfd_create(0x8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000080), &(0x7f0000004300)=""/164}, 0x20) 2m27.702319998s ago: executing program 2 (id=785): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x808, 0x8518}, 0x200, 0xe7e, 0x4, 0x3, 0x800000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) fcntl$setlease(r0, 0x400, 0x2) (async) r2 = socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 32) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (rerun: 32) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000180)={0x0, 0xea60}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000300), 0x106, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x2}, {@loopback, 0x15, 0x1}}, 0x44) (async) setsockopt(r5, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) (async) dup(0xffffffffffffffff) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, r4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) sendmsg$tipc(r2, &(0x7f0000000940)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000340)="3fe3001e9f75601ebd093085fbaeefdbe8c82ddcec9d680807ae5b7cbcf4512a6375e024f9370f003280dcaed4283fd4e6bb4b9734644d1686f5770657646f84a5b6bfa51546233767ebcda55c8ec11939fb319216944e7ad326f6abc310743d0fb2090a10aa0c114819cd3c7d5207d8e011b28c819aee95466df608ff3ba4bd69fef54c5c703804bf1a8b6af7111b810411a3ec48866e6b4732275b4eb3160a00e57f633feb14882c07da1c38244fe955e5eb14f9a5e86727ef4dc105fdf5570608b5bb", 0xc4}, {&(0x7f0000000480)="928da77dff2d7e1bc1fb4248dc33065bf160647210f77121e3a547e02dc5ae51f73a20ceb912ac47046b6f04fe6e4f1ffc3c0bd467", 0x35}, {&(0x7f00000004c0)="f7d6d2ba2a7afe9d3b0a1e227fb4eb89c3c05b6b18938a2d24d08d80f237f116ec544a0f0f6922483505f1ccd37f9aa4d16e26994ebb59d8626c8cc736b08e69777f68188169ae", 0x47}, {&(0x7f0000000540)="da067389814e7f8aad325023917af475521e82c7e1d1d1a4b5b8a06e932ece016a6131ee115a2f65e1053b86264aa21361fc6f44bb619b00a6f8060753945ef61d1eeb0b91f893f3b221af345a5851246f42eb0fe8c623c6556d2d95ca6653b9af55b3cd252486c441f1b1e8ff3d99600f4f747a865d4d0a7f4801877315ed043b7583a25c4b4b15f5c69bb1f07333da9fa7f7cf4edab494cba47fb2794da2925051fed4ee912f2fb69b143f273f2b479f9eb920f47617a882faf7982788d92f616e980fe52c22aff29d9cf22ac9cd69b5b257158ecfbe820b4f41e4d28995550e443f812838ee327b957cace594c1e25b", 0xf1}, {&(0x7f0000000700)="fb1ccb11e62e2b96fb6345177bec83a93a3abc644c6876985beefde642d9a0a4a1458e638bccd1c684af38fda5d81931b6bcba99d292a53ed69b357d5ce61e25403bbda44506fe7396267d23f00fd097849047574c3e2c6a546a1b546e24754f7a169e49b35836f55792c03df2159e79d002ff1ef7e883c1e4443a7ab05b18c442633338ce4b015bf41086b22d4cccc7825e3e", 0x93}], 0x5, &(0x7f0000000840)="9c76085b5afb4475bf471ab5490b42220ceaf4334e660a9e08ebd0dec538b7ed0521e594d5baac9fb1eaf89215af19daff54b06c3222bcd7dd6fddccfd9497f39c818fafc97c227496053d322a64ad851727bc5675e7b4dfd53150ca00cae7824840c3e9fac81f3bb1a20bdd3512a85a2bfddccfe1b0143bd0daff873b16e49c7ab5f7a051ebe27170f031108e1e76e2743697f81b09c28d8c2d6506e9cfa35f5bf4a980c57e970f0a47a21005a9e1fbc7860ba026493066b9ca11aae33e94c2574bf99209eb26c05f00", 0xca, 0x4}, 0x2000c880) 2m27.416458971s ago: executing program 2 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x10) 2m27.402128511s ago: executing program 2 (id=792): r0 = syz_open_pts(0xffffffffffffffff, 0x200100) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x6) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) lseek(r2, 0x8, 0x3) fadvise64(r1, 0x2400000, 0x2, 0x500) 2m27.149041153s ago: executing program 2 (id=794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, 0x20044050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0xfffffffd}]}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r6, &(0x7f0000000200), 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000600030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000001c0)=""/73, 0x49}], 0x2}, 0x8}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x20f5800}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) 2m25.898345252s ago: executing program 2 (id=805): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0xc48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000001000000d70d00000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000001000000000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r0}, 0x38) 2m25.847731014s ago: executing program 33 (id=805): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0xc48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000001000000d70d00000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000001000000000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r0}, 0x38) 1m58.852731708s ago: executing program 5 (id=1173): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x3f, 0x4}, 0xb093, 0x800000, 0x2, 0x1, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) r0 = io_uring_setup(0x899, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m58.493941105s ago: executing program 5 (id=1181): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0x0, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a000100ccbd700000000000020020000002ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x885}, 0x2000000) 1m58.444975946s ago: executing program 5 (id=1184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev, 0x5}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x40000000000018e, 0x4000000) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x6c0a02, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 1m56.821775583s ago: executing program 5 (id=1204): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x400, 0x8}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x8f2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, &(0x7f00000002c0)={0x97f6, 0x1, 0x7ff, 0x7, 0x1, 0x4, 0x4fa, 0x3ff, 0xed1}) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x80000000, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) modify_ldt$write2(0x11, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x2000, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x3]}, 0x0, 0x8) 1m56.45411968s ago: executing program 5 (id=1205): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="7bdee065febdfe4163a42ee1919884821b0ec4b5149ce3dfdee3043c8b1ca2f23713ab5469275817b0e417b6f445ff7fcb7af421ab7db298aa50b7230229331bb95b5b55d098c3807451ca7675e50a173a49057223257040bb49868f1eeb920155c8cb4a945228611d2847bf66b6543d713145deff47525ba1f8dd8c048b16e6b8cf2f1c1eed7ab3d649424a636c44b10c7c284f93a677cfae7f3016d9621b5fbaecd0e67c52dd17c7a4068010bedd1558edf9dd1fb81cf3f1b9d5d388d4fee963fa6616fd9473a79fe02a4b78ef7fdb9fb22b9c94a3136aaf626c239f2bc68c1c7baaeaafaedc8337f1b128272e4a323779bd", 0xf3}, {&(0x7f0000000140)="5ab25f7de9f4e3086c311bb609119a9c13", 0x11}, {&(0x7f0000000180)="6f6aae10149227fd77bfad44a9327595bfc8460b6e51f391812114ec1e4a", 0x1e}, {&(0x7f00000001c0)="e402dabcc6e2a6bfcd9dbea03c89b51c430607dfd5598a414b31c46f64f585f7cc670efe93788cb2c37b036be6e86255c42102ea8ef22d38acd91f0df0ca6034780e2bcc728c201dfe09f6862a6a9a3302ff145343eb0a4c4e98eb0dac23066a42a008ab69f8", 0x66}, {&(0x7f0000000240)="543c425c7012b6ac792504e523fe263315d96c07ea9b45def109dc48929ec3dbcca1e9f4c2d0fd67d282844299a681f91eb3d03fc2385b3ef6b9d16794f15276a7a83959a4a081d633fa8b6df0bb8c33a50700153b0d26eb613e", 0x5a}, {&(0x7f00000002c0)="6be09ecbc40330e1cd84944ef0937c63464dd59e78b96014d7691634d7ab4c654a3b6a12427335b584dee01ab88aa513f2bf7342ba36b3427e2b1477612fccd2f49b0b43973c14fc6229528d195d2392591369b5c11705fb6a20d19f9b1011f46f5f596ae033cf571825c4b4c702797159f2b0817a44cf8a1743e75ca685059db6e34d49bdffecd4cf9cc095b01e048638758725620d370f82512747ff931fbee02bf8cb4a83b8fdda296c6cd42365c4546f8df318bdb7ae3a882b91833d3e2f29714a5886192850702b63c9830a32105de9572df403061d098f631d26bff573df858041710e7138a0c460ca0da08937c40e7063215c10a3e7eae44378", 0xfd}], 0x6, &(0x7f0000000440)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @authinfo={0x18, 0x84, 0x6, {0x1ff}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @init={0x18, 0x84, 0x0, {0x81, 0x5, 0xf001, 0x8}}, @init={0x18, 0x84, 0x0, {0x71, 0x2, 0x2, 0xa}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0xa8, 0x180}, 0x80) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x9, 0x4, 0x1, 0xe00}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async) r3 = socket(0x21, 0xa, 0x72587536) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x0, 0x0}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x7, 0x3, 0x0, 0x24800, r4, 0x6, '\x00', 0x0, r5, 0x3, 0x1, 0x0, 0xd}, 0x50) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = dup2(r4, r8) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000840)="5ceb5b50b381afe54fb51f0868524bb3", 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000009c0)={0x4, 0x10, 0x4, 0x5, 0x49, 0xf, 0x4, 0x7, 0x1, 0x95, 0x3, 0xb0, 0x5d}, 0xe) (async) r11 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) (async) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000a00)=0x0) (async) r13 = syz_clone(0x12011000, &(0x7f0000000a40)="72b84ba70a6cdc08008541d9cd8902e710ff9376f411da172e461444d67202612783e6f18c24f533af376d72e893aa64427712d629c1009b", 0x38, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)="a15ff0963840df1fa0f8b32d5e957773d23ca26fac1fe1e58b1ce0063238de6293e0c4240864f58da28aa72c0df332d9226bb469fb7dfe635f3cd023397cf4ec5bc8f3e3052f7040b7c685b6c474b0c2ed9420c4901f6ade49a200c82331f2d1ffbe13984af7d8d6640413a3b514a77dd8466908047191b159138ff5e6581840e8b32d5444824dc6643d") shmctl$IPC_SET(r11, 0x1, &(0x7f0000000bc0)={{0x3, r6, r7, r6, r7, 0x0, 0x9}, 0x28, 0xfffffffffffffffe, 0x7, 0x1, r12, r13, 0x27f5}) (async) sendmsg$nl_route(r3, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@delneigh={0x34, 0x1d, 0x2, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x40, 0x80, 0xb}, [@NDA_PROBES={0x8, 0x4, 0x1}, @NDA_LINK_NETNSID={0x8, 0xa, 0xfffffffb}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24000884) (async) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) utimes(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000dc0)={{r14, r15/1000+10000}, {0x77359400}}) (async) fsetxattr$security_selinux(r0, &(0x7f0000000e00), &(0x7f0000000e40)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28, 0x0) (async) sched_setscheduler(r12, 0x5, &(0x7f0000000e80)=0x6) shmctl$SHM_LOCK(r11, 0xb) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000ec0)={0x0, 0x76, "198a98756b02cbf113e11d69fa278bcf5056b6b434b14fbb12c22c84aeafa904c681cdd8b23136fe241f6fbbe8f31215d9f95bbb66331f04176d14cfe143ba5c96e42195d70cfae43f38e5d65804221f4e5479c26cf34ab8ea0bd67da89108f414dff0e5ca092cdfab7415f970bdd0f64318fb31b067"}, &(0x7f0000000f40)=0x7e) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000f80)={r16, @in6={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}}}, 0x84) 1m56.130053485s ago: executing program 5 (id=1211): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x8, 0xa, 0x200000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000ff020205000000000600150002000000140016"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r4, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', 0x0}}, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000ac0)={0x6492, 0x8, 0x2}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r6], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0) (fail_nth: 1) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") 1m56.125835875s ago: executing program 34 (id=1211): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x8, 0xa, 0x200000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000ff020205000000000600150002000000140016"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r4, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', 0x0}}, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000ac0)={0x6492, 0x8, 0x2}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r6], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0) (fail_nth: 1) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") 1m51.059058002s ago: executing program 7 (id=1212): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], &(0x7f0000000240)=""/84, 0x5f, 0x54, 0x1, 0x4003}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x4890) r2 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x103) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = socket$inet6(0xa, 0x80802, 0x0) shutdown(r3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000020)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='xprtsec\x00', &(0x7f00000000e0)='\a\x00\x00\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x1032, 0x0, 0x2, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r4, 0xa) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x80, &(0x7f0000000540)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000001900)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") r6 = socket$kcm(0x2, 0x200000000000001, 0x106) creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0x4) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 1m49.706858125s ago: executing program 7 (id=1264): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xa, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (fail_nth: 8) 1m47.024358401s ago: executing program 7 (id=1285): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:crack_db_t:s0\x00', 0x20, 0x2) (fail_nth: 4) 1m47.024191111s ago: executing program 35 (id=1285): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:crack_db_t:s0\x00', 0x20, 0x2) (fail_nth: 4) 1m0.670178918s ago: executing program 0 (id=1676): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x401, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x6, 0x6, 0x0, 0x80000, 0xffffffff, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 1m0.61032202s ago: executing program 0 (id=1677): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079a0480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, r0}, 0x18) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 1m0.283854355s ago: executing program 0 (id=1682): futex(&(0x7f0000000100)=0x6, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122d, &(0x7f0000001280)="$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") r1 = syz_ublk_setup_io_uring(0x5930, &(0x7f0000000140)={0x0, 0x3eb3, 0x0, 0x1, 0x21a}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x10, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xe}}, './file0\x00'}) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000080)=@routing={0x32, 0xa, 0x1, 0x3, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1d}]}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) statfs(&(0x7f0000000680)='./file0\x00', 0x0) futex(&(0x7f0000000100)=0x6, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122d, &(0x7f0000001280)="$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") (async) syz_ublk_setup_io_uring(0x5930, &(0x7f0000000140)={0x0, 0x3eb3, 0x0, 0x1, 0x21a}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x10, r1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xe}}, './file0\x00'}) (async) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000080)=@routing={0x32, 0xa, 0x1, 0x3, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1d}]}, 0x58) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) statfs(&(0x7f0000000680)='./file0\x00', 0x0) (async) 59.985818798s ago: executing program 0 (id=1685): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_getoverrun(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000007600110a00400000fedbdf250300000000001e0008"], 0x20}, 0x1, 0x0, 0x0, 0x44045}, 0x0) r2 = dup2(r0, r0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xae, 0x1, 0x0, 0x2, 0x2, 0x5}, &(0x7f0000001100)=0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0xff, 0x4d6, &(0x7f0000000b40)="$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") perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xdea, 0x7}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_gettime(r3, &(0x7f00000010c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x2, &(0x7f0000000180)=[{0xe, 0x6, 0x5d, 0x1ff}, {0x9, 0x5e, 0x7, 0x1}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)={0x545, 0xa, 0x7, 0x69ba, 0x9, 0x2000000000002, 0x3, 0x1, 0xe8}) 59.593707686s ago: executing program 0 (id=1693): sched_getscheduler(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getscheduler(r0) ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000040)) r1 = socket(0x22, 0x800, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r3 = getpgid(r2) migrate_pages(r2, 0x80000001, &(0x7f0000000100)=0x800, &(0x7f0000000140)=0x800) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000180)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000200)=r3) get_robust_list(r0, &(0x7f0000000380)=&(0x7f0000000340)={&(0x7f0000000240), 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={&(0x7f0000000280)}}}, &(0x7f00000003c0)=0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x18, 0x4, 0x10, 0x200, 0x2, r4, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000480)={0xffffffffffffffff, r1, 0xfffffffe}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000004c0)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000500)={0x2, 0x7aa2, 0x9, 0x7fff, 0x1a, "7c0cd84f533024bb1acbaa1f8b8273df19f4d3"}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000000640)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) setreuid(r7, r8) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040841) syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@getnetconf={0x14, 0x52, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000045) getgid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) r10 = accept$inet(0xffffffffffffffff, &(0x7f0000000900)={0x2, 0x0, @empty}, &(0x7f0000000940)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r10, 0x0, 0x489, &(0x7f0000000980)={{0xc, @remote, 0x4e21, 0x2, 'sh\x00', 0x0, 0x9a7, 0x2c}, {@multicast1, 0x4e22, 0x3, 0x800, 0xab, 0x8000}}, 0x44) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000a00), 0x1001) 58.029562308s ago: executing program 0 (id=1701): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f00000000c0)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}], [{@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}, 0xff, 0x560, &(0x7f0000000240)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x147142, 0xc1) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) 58.025782618s ago: executing program 36 (id=1701): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f00000000c0)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}], [{@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}, 0xff, 0x560, &(0x7f0000000240)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x147142, 0xc1) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) 45.445072319s ago: executing program 4 (id=1795): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x20}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x6001) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x922000000003, 0x11) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x335}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x3}}, 0x20) 45.141446252s ago: executing program 4 (id=1801): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x8ac, 0xffffffffffff60bb}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x240042, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4040814) syz_open_dev$evdev(&(0x7f0000000380), 0x14a, 0x400) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600) r2 = syz_open_dev$evdev(0x0, 0x2, 0x862f01) io_setup(0x10, &(0x7f0000000640)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x1, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @const={0x0, {0x10}}}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000003c0)={'geneve1\x00', {0x2, 0x4e22, @multicast1}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r3}, {r3, 0x40}], 0x2, 0x5e5f) shutdown(r3, 0x0) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x68a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 43.726347067s ago: executing program 4 (id=1808): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000500), 0x341082) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x40000000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x24}]) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x4000800) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$RNDCLEARPOOL(r5, 0x5206, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x12048, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x10, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 40.282032425s ago: executing program 4 (id=1820): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/connector\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18090000007baff888180800009027fc9ec3738a95afae76fe34bbb232391634980d6dba467019eb07f9af", @ANYRES32, @ANYBLOB="000000000000000018000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) setns(0xc9, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/connector\x00') (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18090000007baff888180800009027fc9ec3738a95afae76fe34bbb232391634980d6dba467019eb07f9af", @ANYRES32, @ANYBLOB="000000000000000018000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") (async) open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x0) (async) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) (async) 39.294317632s ago: executing program 4 (id=1832): getgroups(0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000480)={[{@lazytime}, {@noblock_validity}, {@bh}, {@grpquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [{@smackfsdef}, {@smackfshat={'smackfshat', 0x3d, 'lazytime'}}], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x200) 38.584154504s ago: executing program 4 (id=1838): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setresuid(0xee00, 0xee01, 0xee01) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000ab5c58000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000000010000000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x13, r0, 0xffffd000) socket(0xb, 0xa, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 38.448118081s ago: executing program 37 (id=1838): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setresuid(0xee00, 0xee01, 0xee01) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000ab5c58000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000000010000000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x13, r0, 0xffffd000) socket(0xb, 0xa, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 7.576898067s ago: executing program 3 (id=2166): madvise(&(0x7f00002f8000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f0000000000), 0x0, 0x400, 0xc4, 0x0, 0x0, 0x8}) 7.466349692s ago: executing program 3 (id=2168): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffff9, 0x12f382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x4, [{0xf, 0x1, 0x6}, {0x1, 0x3, 0x6}]}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @struct={0x7, 0x1, 0x0, 0x4, 0x0, 0x5, [{0x9, 0x0, 0x9}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x2e, 0x30, 0x0, 0x5f, 0x2e]}}, &(0x7f00000000c0)=""/72, 0x6b, 0x48, 0x1, 0xd}, 0x28) r6 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) sendto$packet(r6, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r8 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) bind$phonet(r8, &(0x7f0000000200)={0x23, 0x3, 0x5, 0x6}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 7.142905496s ago: executing program 3 (id=2173): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x87, 0x80, 0xfc, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x3, 0x5}}}}}]}}]}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000107010300000000594d98c40a00000214000780"], 0x28}, 0x1, 0x0, 0x0, 0x2000090}, 0x24000006) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) mknod$loop(0x0, 0x1000, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) 2.630336731s ago: executing program 1 (id=2212): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7}) 2.630205571s ago: executing program 1 (id=2213): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = io_uring_setup(0x6d59, &(0x7f0000000300)={0x0, 0xeb21, 0x48, 0x8001002, 0x3d7}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x480000, 0x0) 2.042270058s ago: executing program 1 (id=2221): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000140)='./bus\x00', 0xe2b40, 0xa8) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0xff70) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x4fee, 0x0) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) r2 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, 0x0, 0x70b5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d600000000000010000000005000100110000000c0005000000000011000000300000001800050000000000000000002d000000000000010000000005000100090000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000c0000000c000500000000000a00"], 0xe1c}}, 0x0) 1.948483262s ago: executing program 6 (id=2224): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x407, 0xe2120, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4ce6475984bd9cd0}, 0xecc8, 0x2b0, 0x0, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x9, 0x5, 0x1}) r1 = memfd_create(&(0x7f0000000700)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\x06\x00\x00\x00\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d\x00\x02\xd45\xb8\xca\xa8\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\xdfu\xa4\x19:LQN\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5wQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\x00\x02\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xc6\xe5\xf0\x81\xd6&\xc00x0, 0x0, 0x80, 0x2, 0x8, {{0x15, 0x4, 0x2, 0x2, 0x54, 0x68, 0x0, 0xb0, 0x29, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x14, 0x30, 0x3, 0x4, [{@local, 0xe8a}, {@multicast1, 0x800}]}, @generic={0x82, 0x9, "db990596e286b7"}, @timestamp={0x44, 0x18, 0x10, 0x0, 0xd, [0x0, 0x7f, 0x4, 0x0, 0x6]}, @timestamp={0x44, 0x8, 0xf3, 0x0, 0x2, [0x2]}, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@bridge_newneigh={0x34, 0x1c, 0x4, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x0, 0x2, 0x6}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x6}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4000, r1}, 0x18) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000ac0)=@usbdevfs_disconnect={0x4}) (async, rerun: 32) add_key(&(0x7f0000000b00)='keyring\x00', &(0x7f0000000b40)={'syz', 0x0}, &(0x7f0000000b80)="fd90dc6c7bebb71d663336448a19ef1698ad4106786d9431aac5d26370a728151a1d3052020086045a5999dc891d4b14755e51b64c41510add271fe84390752757babae45e98c517c0cb421b12f937fc109c31c15cc2fe3f9e8039011570ea8bb60e5447e4b24706d308c3afbbbd324abe3402d2bb94f3c24fa028a52e67137b4a73a1d0", 0x84, 0xfffffffffffffffa) (rerun: 32) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000dc0)={&(0x7f0000001000)={[{&(0x7f0000000c40)="c58912687f82f5e8e09f5b598acbd3824a2e3deb7a16ea31ef1b90d9f66db4150bcb7ae1faefa9f995766487e5598a9545ba97d245b3af39df8f421a9b8c8f72d1e9ff66f4b63bb3930f1dc7b4cc07d1b3a966210d43e50a65b92a662d12aa5bfbff746d12046db63f4bfd59", 0x6c, 0x2}, {&(0x7f0000000cc0)="adaaa45d642db7c7c36807634958f1125e0b892cb455bdf6fd2754dc5c76fff70ca17b05790a3a009316d8065179a3066aed8b4f7bab60f4f3983e906cf02c0d6099f3db76a8531fec5cd2c3a144d08fc2bffdcc4775bd671cb3c1df98e89c1c59db371ded623134f6d0d139f89e41d1e63b1f3186ce299ca313189ae17561fed48ffd70a088c765790934382b732e555a008fc8afa57d9510b7d9f48e42e0254dbb0c6af456ae6b428e695de333d3ce01ceaca69a6120c7dec2a1ac10df0345b43f48ded45de0ec38184aa3ce283ab584322b8f463124b998d94aea11edc882d62996dc8a1dc4bb88becddcb95294eb", 0xf0}]}, 0x2, 0x0, 0x1}, 0x1) r4 = syz_usb_connect$uac2(0x5, 0x94, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3f04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x3, 0x80, 0x6, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xd5, 0x7, 0x13, 0x7a}, [@extension_unit={0xa, 0x24, 0x9, 0x2, 0x31, 0x10, "9c2a7f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x3, 0x2, {0x8, 0x25, 0x1, 0x80, 0x36, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xbe, 0x2, 0x6, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xf, 0x6, {0x8, 0x25, 0x1, 0x80, 0x3, 0x80, 0x5}}}}}}}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x201, 0x7, 0x51, 0xff, 0x40, 0x1}, 0x3d, &(0x7f0000000f00)={0x5, 0xf, 0x3d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x4, 0xa4}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0xc, 0xf000, 0x9, [0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0x4c, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ff160b632a2d734dde840e89b6cf9454"}]}, 0x9, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0xe462}}, {0xb9, &(0x7f0000002000)=@string={0xb9, 0x3, "63177f4fbe41f321111d53a9dc5adca3aa840c13d8354bd0ceec51fc20e2f7f503368d694ff2147c76d2a10276e1e34e84ff0d4e5334941213c7360402706459690e505f5198a0fa2d16dd9fb9068429ff8ce54fea1ff968ed2fed74cd79827713595c938ca00216da3b61d2138cc68472a37d883eb8fda87ce827757105dad613700195687cc4094a7bf5305bc1cf385e7c36353fd9b3de81e789bb36ab861375bc481298163d497758491e2c2e9575229b71855ef806"}}, {0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_control_io$uac2(r4, &(0x7f00000023c0)={0x14, &(0x7f00000022c0)={0x20, 0xe, 0xb0, {0xb0, 0x6, "f60221dc58a20ae06f370bdcb8e3d353317981f6d9461b782fc1ec1d1d8f71cc16a5e6654340a5e83ad84346b1a64d9aa3d5641cfb2d6e3e379a8a08998369c0fc5966ff571f0b4c90ee27a0fba044d5182c6345bc7958a952e0286b59244f9aaf2c6e872227e3045224249f8b051b50b0de919311d6b0ba995c4440c2a604de6d4ac981f547791868944b92f6eadbdf053b906e355f57ddddb3b8f1703cca5a7da7e818a050b02b90984a01bf42"}}, &(0x7f0000002380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}}, &(0x7f00000026c0)={0x44, &(0x7f0000002400)={0x60, 0x11, 0xd4, "26b4359207247e4f416a267402e098a703b7969cd1ccdb12bea2113762a7c6e303b0a7a4884250c739af5dbd7190ed13212720d571d5f11350714766606400eeb937b2bbe8c738e397144daf86a94c8e555f95fd49ea320e3042c17b214bf5fb12abb8233cb7c733ca72075e9e9155e64554fb1b8f6c6984f0c82d53cf5612ddba635d83e73a523568d707bc902cca6de9d19e78dd6f8ff5f39cef639dcbf3ce62e933b8423b470ea4d04ba7617fb1ff85859fd24307ee1d9b9f6e2084b523f4046475b721e46c2b11f2457f1552c434cb158977"}, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002580)={0x20, 0x81, 0x3, "9b3ff5"}, &(0x7f00000025c0)={0x20, 0x82, 0x2, "db7c"}, &(0x7f0000002600)={0x20, 0x83, 0x3, "309308"}, &(0x7f0000002640)={0x20, 0x84, 0x2, "fa3e"}, &(0x7f0000002680)={0x20, 0x85, 0x3, "48b0e3"}}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002740)={0x0, 0x8}, &(0x7f0000002780)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002880)={r5, 0x90, &(0x7f00000027c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0xe15}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0xd7e3, @remote, 0x5}, @in6={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}, @in6={0xa, 0x4e24, 0x1, @local, 0x2}]}, &(0x7f00000028c0)=0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002940), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x58, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000060) (async) openat$cgroup_ro(r0, &(0x7f0000002a80)='cpuacct.usage_percpu\x00', 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002ac0), 0x515600, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, &(0x7f0000002b00)=""/114, &(0x7f0000002b80)=0x72) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0xa743de55248a1516}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x60, 0x2, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000800) (async) fstat(r6, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r8, &(0x7f0000002fc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f80)={&(0x7f0000002dc0)=@newsa={0x19c, 0x10, 0x800, 0x70bd28, 0x25dfdbfe, {{@in=@multicast2, @in6=@loopback, 0x4e23, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x84, r3, r9}, {@in=@multicast2, 0x4d5, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x80, 0x5, 0x8000000000000000, 0x0, 0x10000, 0x8, 0x8000, 0x776}, {0x8, 0x9, 0x7, 0x1}, {0x480, 0x1, 0xf8}, 0x70bd29, 0x3502, 0x2, 0x4, 0x4, 0x25}, [@user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback, 0x0, 0xa}}, @algo_crypt={0x48, 0x2, {{'cbc-serpent-sse2\x00'}}}, @iptfs_drop_time={0x8}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@loopback, 0x2, 0x99, 0x1}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.742176962s ago: executing program 1 (id=2228): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x3fffe}, 0x0, 0x0, 0xc40, 0x8, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) io_setup(0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect$uac3(0x2, 0xf1, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0xec, 0x0, 0x3, {0x8, 0xb, 0x2, 0x0, 0x1, 0x24, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x25, 0x1208}, [@processing_unit={0x15, 0x24, 0x9, 0x4, 0x6, [0x0, 0x0, 0x2, 0x2]}, @cluster_info_segment={0x6, 0x20, 0x3, 0x12, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x80, 0x0, 0x6}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x4, 0xff, "ca9a7493"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x66, 0x1a, 0xde, {0xa, 0x25, 0x25, 0x8, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x80}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0xe, 0xc, 0x0, 0xae}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x0, 0x8, 0xc1, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x7}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0xf7, 0x6, "da", "e5d8a9"}, @as_header={0x17, 0x24, 0x1, 0x3, 0xfc8, 0x757, 0x3, 0x5, 0x6, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x6, 0xa, {0xa, 0x25, 0x25, 0x762, 0x80, 0x1}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x62, 0xb6, 0x9, 0x20, 0xa2}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x1a, &(0x7f0000000380)=@string={0x1a, 0x3, "5ede2b9fbb8aac45f92b818687ab0280d345584a61848eb6"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x6c, &(0x7f0000000400)=@string={0x6c, 0x3, "944e7cda40b1c3f91e8b28464ee9273e3b49fa81e7b852e6c26b0b0a0b59f0fde24136365766b7a7dbe4823dcf74ef492371855e605864aeeda111a0880ae11a2396ec7c4e1837ab56fd6892cb7f3664436170ae65a449390db245c6cd76967d5f2bf12cb59147984027"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c01}}, {0xa, &(0x7f0000000580)=@string={0xa, 0x3, "f169514cc738f1cb"}}, {0x7f, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f0337d3b936816223408f177688faf00d83f13dbebb6901844f33e19cff45c26c5a4743c5c4f2868338c48c0b61e4239975e695bd2bba211605761e8bb71f1fc0ef31d1e7226a2b82bdeb19fb087852e2a8c2f669b5a0134e8de9cd1cdf93486c92e5eab770000000000000000000000000000100"]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x410}}]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) 1.510096632s ago: executing program 8 (id=2232): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000926e0d0fa4c95d760798ea70b9fd00"/27, @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800010004000000140003007866726d3000"/56], 0x50}}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x200, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0, 0x1, 0x0, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x27, 0x80000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mknod$loop(&(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffff6, 0x1}, {0xae9, 0xfffffffe}]}}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x48}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r8, &(0x7f0000000500)=[{&(0x7f0000000600)="47e7", 0x2}], 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESDEC=r6]) 1.418743566s ago: executing program 9 (id=2233): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_setup(0x7fff, &(0x7f0000000080)) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x14}}, "00186371ae9b1c03"}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805516, 0x0}) 1.033253244s ago: executing program 6 (id=2234): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f0000000100), 0x7, 0x101301) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1006}]}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x200080b4) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0xb, 0x8402, 0xfff, 0x5, 0x5, "475bf783a68f3b2ff762f3f9533ab46f245754"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) 905.806219ms ago: executing program 8 (id=2235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2d}]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000080), &(0x7f0000004300)=""/164}, 0x20) 905.50929ms ago: executing program 6 (id=2236): openat(0xffffffffffffff9c, 0x0, 0x1450c2, 0x183) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x10001}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) socket$kcm(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, 0x50) 888.62112ms ago: executing program 3 (id=2237): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 sync 2 7:0 0 7:1 0 1 h', 0x4a) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="04000000000000000000000090010000380100000100000000000000000032000000000000000000000000000000000074") 876.006921ms ago: executing program 6 (id=2238): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x100, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet(0xa, 0x80000, 0x88) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) write$P9_RGETLOCK(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="20000000370100030100010000000016a1c203ce9a23f182ef13790c0c9893e4a5316d65fe02bc1ad4ac1746f67370515b38533ea657fb525d4cbf6318f65c36ef18c61b58470f7a06db6a6443cfb700188d55302bc43df092be3b39ee233b3415df7aa741a820d6110d362b1d57aa7f6737c26a803abe9e322ba95065e814f34323970e777a8b748b4ac02fb02852d775e60cca941d507ff40cef1f5c747ba87b9371700942a7817b78e355a688723529b9128ef327d423f377bbf3d42dc1bbeb85f952aeae9af96115e32327d3b180c1a85a7699373d3a28a9aef9", @ANYRES32, @ANYBLOB="02002d26"], 0x20) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80400) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000024c0), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x30, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x40, 0x0, 0xfffffffc, 0x101}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20000804) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) close(r7) 834.390023ms ago: executing program 3 (id=2239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, 0x20044050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0xfffffffd}]}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r6, &(0x7f0000000200), 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000600030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000001c0)=""/73, 0x49}], 0x2}, 0x8}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x225c17d03}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) 828.892023ms ago: executing program 9 (id=2240): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000000700000018fffd003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], 0x0, 0x6}, 0x94) 828.331513ms ago: executing program 8 (id=2241): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000001440)=[{0x0}], 0x1, 0x1, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x10a, 0x2}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r3], 0x7c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x20040840}}], 0x1, 0x804) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="e06e270c784c23ebfeee2750061ba64d20d32db9833fe22c1d7cbd0138e4c8fc8a2e4c1f69a79905bc319568791b2823610e14c6731317eb37939eba993298031405541200654b69f028b3186eeed2b9034c40073ebff0a6dea776ee62d20292fc"], 0x2a) write(r6, &(0x7f0000000000)="8016f8aade2c2048c0e3f84d428a1155e721eafed25f5043caeba714c1085844d148b210db689e77a218a97b5c47075a6ff5a074601cc2268fc6d5a585fa5a0b3486cefcc52c4e4737261710dc08962c577573b1011f338cb4f8d8b76567d805b42a2f", 0x63) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000480)={'\x00', 0x6, 0x0, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x804818, &(0x7f0000000240)=ANY=[@ANYRES32=r7], 0x2, 0x553, &(0x7f0000000b00)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) ptrace(0x10, r7) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x808c17, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) 770.255456ms ago: executing program 9 (id=2242): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000400000000000850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 769.995126ms ago: executing program 9 (id=2243): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYBLOB="e37cfb802145220afb7abcead11ed3945accf2ad911433d749563d167869dc8775f33ddecf29d175ed88f78c90541753818d99b395a3db22d993664d13165c5482761f845f90d1dd249b8d0115428d18c719629d70", @ANYRES32=r0], 0x138}}, 0x240448c4) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f00004bf000/0x4000)=nil, 0x4000, 0xb635773f066bbeeb, 0x12, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x1f4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x8}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01072cbd7000fcdbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_open_procfs(r2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4095, 0xfff) socket$inet6(0xa, 0x2, 0x0) 570.334905ms ago: executing program 9 (id=2244): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x5, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000180)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@i_version}, {@usrquota}]}, 0x3, 0x43d, &(0x7f0000000ec0)="$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") openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000140), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000e0000280000002800000006000000040000000000000e0300000000000000010000000000009200000000000000000000000202000000002e000061"], 0x0, 0x46}, 0x28) bind$packet(0xffffffffffffffff, 0x0, 0x0) 488.721249ms ago: executing program 1 (id=2245): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x402, 0xa}, 0x100480, 0xe7e, 0x0, 0x3, 0x80000001, 0x43, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000380)='logfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3327, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mkdir(0x0, 0x1ff) lseek(r1, 0x9a, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000380)={0x5, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0xe308, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="03000000000000000a004e240000000cff010000000000000000000000000001080400004000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) 284.398818ms ago: executing program 1 (id=2246): getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000001}, 0x1002, 0x1000000000, 0x0, 0x5, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0x2}) socket$inet6(0xa, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) iopl(0x3) writev(r2, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f00000002c0)={@val={0x70, 0x88ca}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x78, 0x0, 0x4000, 0x0, 0x2f, 0x0, @empty, @empty}, {0x2004, 0x86dd, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "c713a8d57dd9cf4efc6e5fdeb2b0b3ac999423a794362ce3cfeaec6677b67d94", "d05f9891aef286bc3eaee71eacc71ff2", {"662e6dedf296ffaa33e57bfa448348f2", "1e675435785c6d0881869ddcb6881fa2"}}}}}}}}, 0x8a) dup(r4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) 227.136301ms ago: executing program 8 (id=2247): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x2000, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x1, 0x0, 0x17, 0x0, 0x20000, 0x10, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @in6=@mcast1, @in6=@mcast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast1}}, @sadb_x_kmaddress={0x2000000000000385, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}, @in={0x2, 0x4e23, @multicast1}}]}, 0xb8}}, 0x20000000) 181.530102ms ago: executing program 8 (id=2248): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x108600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x1, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(r0, 0x0, 0xc800) setsockopt$sock_int(r1, 0x1, 0x2a, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r3], 0x84}}, 0x20008040) 18.02254ms ago: executing program 9 (id=2249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)=0x5) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00'}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdafd, {0x2, 0x10, 0x94bb92785a4f5fde, 0x0, 0x9, 0x0, 0x0, 0x2, 0x9}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000844) (async) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r5, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r5, &(0x7f0000000140)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r4, 0x3}}, 0x1) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) (async) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) (async) r10 = getpid() ioprio_get$pid(0x2, r10) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000440)={r8, 0xec, "5139cdaa12523f4b11afd7a0921a4fcba115ef2dd36a234b3adf6ef41ff4c75175df3a35859a5dd0d3f8983ee58a2e54ec49ebafb72e7e13f8dd67052b1ba88753a3e0d8411689f7a7e709e77fa53adfb8654b77dfe4ce7176c959b3da701aee5bba6fbe96ae65e9866e12118c88d28ac12ec60b497cab8ad64468d2f084223f5c10ac7ece84472d6e34750240491c12d4e12e095ad2271f3baf47530c204f734f4d1131af3c69943356b0d694b792e293dec3f9d8ed7d4b20465ba1c2d4b7915c9269dabb4113b8f2e32130b3f4cd311c8623c38d8af3d19cd6a20a87f0b15ed89a9e51134c0e6bed0c98b3"}, &(0x7f0000000580)=0xf4) (async) perf_event_open(0x0, r10, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4880) 17.58378ms ago: executing program 6 (id=2250): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x4000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ptrace(0x10, r0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000200)=[{0x3, 0x10, 0x800}], 0x1) semget(0x3, 0x4, 0x39c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 0s ago: executing program 8 (id=2251): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x2d}]}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): 400 audit(1789914729.091:3582): avc: denied { write } for pid=10148 comm="syz.4.1700" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.875220][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.916180][T10163] loop1: detected capacity change from 0 to 512 [ 208.934974][ T5423] bridge_slave_1: left promiscuous mode [ 208.935104][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.936000][ T5423] bridge_slave_0: left allmulticast mode [ 208.936020][ T5423] bridge_slave_0: left promiscuous mode [ 208.936170][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.969500][T10163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.969587][T10163] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.026746][ T29] audit: type=1326 audit(1789914729.331:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.1.1703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd6dbe159 code=0x7ffc0000 [ 209.026829][ T29] audit: type=1326 audit(1789914729.331:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.1.1703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd6dbe159 code=0x7ffc0000 [ 209.026945][ T29] audit: type=1326 audit(1789914729.331:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.1.1703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd6dbe159 code=0x7ffc0000 [ 209.027004][ T29] audit: type=1326 audit(1789914729.331:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.1.1703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd6dbe159 code=0x7ffc0000 [ 209.027028][ T29] audit: type=1326 audit(1789914729.331:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.1.1703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5fd6dbe159 code=0x7ffc0000 [ 209.027114][ T29] audit: type=1326 audit(1789914729.331:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.1.1703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd6dbe159 code=0x7ffc0000 [ 209.027209][ T29] audit: type=1326 audit(1789914729.331:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.1.1703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd6dbe159 code=0x7ffc0000 [ 209.027343][ T29] audit: type=1326 audit(1789914729.331:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.1.1703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd6dbe159 code=0x7ffc0000 [ 209.027377][ T29] audit: type=1326 audit(1789914729.331:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.1.1703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd6dbe159 code=0x7ffc0000 [ 209.318524][ T5423] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 209.392046][ T5423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.462652][ T5423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.472581][ T5423] bond0 (unregistering): Released all slaves [ 209.490026][ T5423] bond1 (unregistering): Released all slaves [ 209.493561][ T5423] bond2 (unregistering): Released all slaves [ 209.496673][ T5423] bond3 (unregistering): Released all slaves [ 209.504161][ T5423] bond4 (unregistering): Released all slaves [ 209.571020][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.613991][ T5423] hsr_slave_0: left promiscuous mode [ 209.614391][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.614406][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.616040][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.616056][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.713868][ T5423] veth1_macvtap: left promiscuous mode [ 209.713901][ T5423] veth0_macvtap: left promiscuous mode [ 209.713949][ T5423] veth1_vlan: left promiscuous mode [ 209.714029][ T5423] veth0_vlan: left promiscuous mode [ 209.746475][T10150] loop8: detected capacity change from 0 to 512 [ 209.903773][T10150] EXT4-fs: Ignoring removed oldalloc option [ 210.076860][T10150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.172793][ T5423] team0 (unregistering): Port device team_slave_1 removed [ 210.177375][ T5423] team0 (unregistering): Port device team_slave_0 removed [ 210.288519][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 210.460562][T10213] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 210.562024][ T8441] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.704816][T10228] netlink: 'syz.8.1712': attribute type 1 has an invalid length. [ 210.844365][T10239] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 210.876717][T10236] loop4: detected capacity change from 0 to 128 [ 210.890288][T10236] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.890650][T10236] ext4 filesystem being mounted at /389/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.034635][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.034688][T10153] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.034751][T10153] bridge_slave_0: entered allmulticast mode [ 211.035328][T10153] bridge_slave_0: entered promiscuous mode [ 211.036366][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.036423][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.036476][T10153] bridge_slave_1: entered allmulticast mode [ 211.036844][T10153] bridge_slave_1: entered promiscuous mode [ 211.101863][T10153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.112130][T10153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.182812][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 211.200376][T10153] team0: Port device team_slave_0 added [ 211.201615][T10259] FAULT_INJECTION: forcing a failure. [ 211.201615][T10259] name failslab, interval 1, probability 0, space 0, times 0 [ 211.201651][T10259] CPU: 0 UID: 0 PID: 10259 Comm: syz.8.1717 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.201676][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.201688][T10259] Call Trace: [ 211.201696][T10259] [ 211.201724][T10259] __dump_stack+0x1d/0x30 [ 211.201823][T10259] dump_stack_lvl+0x95/0xd0 [ 211.201912][T10259] dump_stack+0x15/0x1b [ 211.201947][T10259] should_fail_ex+0x262/0x280 [ 211.202028][T10259] ? sk_prot_alloc+0xa8/0x180 [ 211.202055][T10259] should_failslab+0x8c/0xb0 [ 211.202133][T10259] __kmalloc_noprof+0xd0/0x4d0 [ 211.202166][T10259] ? sk_prot_alloc+0xa8/0x180 [ 211.202190][T10259] sk_prot_alloc+0xa8/0x180 [ 211.202215][T10259] sk_alloc+0x34/0x3e0 [ 211.202236][T10259] pppol2tp_create+0x32/0x120 [ 211.202336][T10259] pppox_create+0xd3/0x120 [ 211.202364][T10259] __sock_create+0x2e5/0x580 [ 211.202396][T10259] __sys_socket+0xaf/0x180 [ 211.202498][T10259] __x64_sys_socket+0x3f/0x50 [ 211.202531][T10259] x64_sys_call+0x246e/0x2550 [ 211.202598][T10259] do_syscall_64+0x112/0x360 [ 211.202647][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.202675][T10259] RIP: 0033:0x7f5c6c9de159 [ 211.202744][T10259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.202771][T10259] RSP: 002b:00007f5c6b437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 211.202800][T10259] RAX: ffffffffffffffda RBX: 00007f5c6cc65fa0 RCX: 00007f5c6c9de159 [ 211.202818][T10259] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000018 [ 211.202835][T10259] RBP: 00007f5c6ca7506b R08: 0000000000000000 R09: 0000000000000000 [ 211.202852][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.202868][T10259] R13: 00007f5c6cc66038 R14: 00007f5c6cc65fa0 R15: 00007ffc4a251ba8 [ 211.202970][T10259] [ 211.212147][T10153] team0: Port device team_slave_1 added [ 211.237367][T10257] FAULT_INJECTION: forcing a failure. [ 211.237367][T10257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.237437][T10257] CPU: 1 UID: 0 PID: 10257 Comm: syz.1.1716 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.237471][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.237484][T10257] Call Trace: [ 211.237492][T10257] [ 211.237501][T10257] __dump_stack+0x1d/0x30 [ 211.237551][T10257] dump_stack_lvl+0x95/0xd0 [ 211.237574][T10257] dump_stack+0x15/0x1b [ 211.237595][T10257] should_fail_ex+0x262/0x280 [ 211.237620][T10257] should_fail+0xb/0x20 [ 211.237655][T10257] should_fail_usercopy+0x1a/0x20 [ 211.237682][T10257] _copy_from_user+0x1c/0xb0 [ 211.237712][T10257] ___sys_sendmsg+0xc1/0x1e0 [ 211.237747][T10257] __x64_sys_sendmsg+0xd4/0x160 [ 211.237771][T10257] x64_sys_call+0x22ab/0x2550 [ 211.237799][T10257] do_syscall_64+0x112/0x360 [ 211.237832][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.237882][T10257] RIP: 0033:0x7f5fd6dbe159 [ 211.237963][T10257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.237983][T10257] RSP: 002b:00007f5fd5817028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.238006][T10257] RAX: ffffffffffffffda RBX: 00007f5fd7045fa0 RCX: 00007f5fd6dbe159 [ 211.238021][T10257] RDX: 0000000000020010 RSI: 0000200000001f40 RDI: 0000000000000005 [ 211.238036][T10257] RBP: 00007f5fd5817090 R08: 0000000000000000 R09: 0000000000000000 [ 211.238050][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.238064][T10257] R13: 00007f5fd7046038 R14: 00007f5fd7045fa0 R15: 00007ffd8c68d5a8 [ 211.238153][T10257] [ 211.260803][T10153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.260817][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.260893][T10153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.263860][T10153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.263873][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.263969][T10153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.350064][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.372310][T10153] hsr_slave_0: entered promiscuous mode [ 211.372686][T10153] hsr_slave_1: entered promiscuous mode [ 211.372930][T10153] debugfs: 'hsr0' already exists in 'hsr' [ 211.372945][T10153] Cannot create hsr debugfs directory [ 211.584453][T10275] FAULT_INJECTION: forcing a failure. [ 211.584453][T10275] name failslab, interval 1, probability 0, space 0, times 0 [ 211.584545][T10275] CPU: 1 UID: 0 PID: 10275 Comm: syz.1.1722 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.584630][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.584643][T10275] Call Trace: [ 211.584684][T10275] [ 211.584692][T10275] __dump_stack+0x1d/0x30 [ 211.584719][T10275] dump_stack_lvl+0x95/0xd0 [ 211.584813][T10275] dump_stack+0x15/0x1b [ 211.584834][T10275] should_fail_ex+0x262/0x280 [ 211.584858][T10275] ? __kernfs_new_node+0x70/0x440 [ 211.584924][T10275] should_failslab+0x8c/0xb0 [ 211.584962][T10275] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 211.585046][T10275] ? rb_insert_color+0x291/0x2a0 [ 211.585076][T10275] ? __kernfs_new_node+0x70/0x440 [ 211.585097][T10275] __kernfs_new_node+0x70/0x440 [ 211.585175][T10275] ? kernfs_add_one+0x2cf/0x350 [ 211.585197][T10275] kernfs_new_node+0xcf/0xf0 [ 211.585230][T10275] kernfs_create_link+0x70/0x130 [ 211.585256][T10275] sysfs_do_create_link_sd+0x6a/0x100 [ 211.585366][T10275] sysfs_create_link+0x51/0x70 [ 211.585394][T10275] device_add_class_symlinks+0x8e/0x1d0 [ 211.585420][T10275] device_add+0x359/0x790 [ 211.585496][T10275] wakeup_source_sysfs_add+0x15a/0x1d0 [ 211.585526][T10275] wakeup_source_register+0xfd/0x240 [ 211.585577][T10275] ep_insert+0x86c/0xd70 [ 211.585628][T10275] do_epoll_ctl_file+0x645/0x700 [ 211.585660][T10275] __se_sys_epoll_ctl+0xf1/0x190 [ 211.585747][T10275] __x64_sys_epoll_ctl+0x55/0x70 [ 211.585777][T10275] x64_sys_call+0x6a5/0x2550 [ 211.585803][T10275] do_syscall_64+0x112/0x360 [ 211.585907][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.585937][T10275] RIP: 0033:0x7f5fd6dbe159 [ 211.585955][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.586026][T10275] RSP: 002b:00007f5fd5817028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 211.586049][T10275] RAX: ffffffffffffffda RBX: 00007f5fd7045fa0 RCX: 00007f5fd6dbe159 [ 211.586065][T10275] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 211.586078][T10275] RBP: 00007f5fd5817090 R08: 0000000000000000 R09: 0000000000000000 [ 211.586165][T10275] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.586179][T10275] R13: 00007f5fd7046038 R14: 00007f5fd7045fa0 R15: 00007ffd8c68d5a8 [ 211.586198][T10275] [ 211.753736][T10281] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1724'. [ 211.786377][T10282] loop1: detected capacity change from 0 to 1764 [ 211.798384][T10282] iso9660: Unknown parameter 'nor/ck' [ 212.041310][T10288] loop6: detected capacity change from 0 to 128 [ 212.067294][T10153] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 212.087910][T10153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.088486][T10153] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 212.105787][T10153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.107148][T10153] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 212.126526][T10153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.128559][T10153] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 212.149080][T10153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.157555][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 212.266339][T10153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.279663][T10153] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.282302][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.282333][ T5423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.460125][ T5036] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.460234][ T5036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.495547][T10306] loop4: detected capacity change from 0 to 128 [ 212.519330][T10324] syz_tun: left promiscuous mode [ 212.520158][T10324] bridge0: port 3(syz_tun) entered disabled state [ 212.573876][T10324] team0: Port device bond0 removed [ 212.623897][T10324] bridge_slave_0: left allmulticast mode [ 212.623923][T10324] bridge_slave_0: left promiscuous mode [ 212.624023][T10324] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.653904][T10324] bridge_slave_1: left allmulticast mode [ 212.653932][T10324] bridge_slave_1: left promiscuous mode [ 212.654083][T10324] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.690086][T10324] bond0: (slave bond_slave_0): Releasing backup interface [ 212.697924][T10324] bond0: (slave bond_slave_1): Releasing backup interface [ 212.726105][T10306] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 212.727198][T10324] team0: Port device team_slave_0 removed [ 212.750013][T10324] team0: Port device team_slave_1 removed [ 212.769639][T10324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.769658][T10324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.772946][T10324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.772962][T10324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.777085][T10324] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.820588][T10306] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.840247][T10306] ext2 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.866952][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 213.149245][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.183333][T10365] loop1: detected capacity change from 0 to 128 [ 213.190434][T10365] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 213.213688][T10365] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1736'. [ 213.225635][T10365] vlan3: entered allmulticast mode [ 213.225659][T10365] syz_tun: entered allmulticast mode [ 213.242441][T10351] SELinux: DCCP has been removed, pid=10351 comm=syz.6.1734 [ 213.387674][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1739'. [ 213.427362][T10383] FAULT_INJECTION: forcing a failure. [ 213.427362][T10383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.427451][T10383] CPU: 1 UID: 0 PID: 10383 Comm: syz.4.1740 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.427483][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.427497][T10383] Call Trace: [ 213.427506][T10383] [ 213.427516][T10383] __dump_stack+0x1d/0x30 [ 213.427545][T10383] dump_stack_lvl+0x95/0xd0 [ 213.427641][T10383] dump_stack+0x15/0x1b [ 213.427664][T10383] should_fail_ex+0x262/0x280 [ 213.427692][T10383] should_fail+0xb/0x20 [ 213.427720][T10383] should_fail_usercopy+0x1a/0x20 [ 213.427749][T10383] _copy_to_user+0x20/0xa0 [ 213.427785][T10383] simple_read_from_buffer+0xb5/0x130 [ 213.427875][T10383] proc_fail_nth_read+0x10e/0x150 [ 213.427932][T10383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.427955][T10383] vfs_read+0x18e/0x7c0 [ 213.428007][T10383] ? __rcu_read_unlock+0x4e/0x70 [ 213.428056][T10383] ? __fget_files+0x184/0x1c0 [ 213.428124][T10383] ? mutex_lock+0x57/0x90 [ 213.428153][T10383] ksys_read+0xdc/0x1a0 [ 213.428194][T10383] __x64_sys_read+0x40/0x50 [ 213.428236][T10383] x64_sys_call+0x2135/0x2550 [ 213.428265][T10383] do_syscall_64+0x112/0x360 [ 213.428302][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.428343][T10383] RIP: 0033:0x7fb36d89e98e [ 213.428371][T10383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.428393][T10383] RSP: 002b:00007fb36c336fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.428418][T10383] RAX: ffffffffffffffda RBX: 00007fb36c3376c0 RCX: 00007fb36d89e98e [ 213.428457][T10383] RDX: 000000000000000f RSI: 00007fb36c3370a0 RDI: 0000000000000007 [ 213.428472][T10383] RBP: 00007fb36c337090 R08: 0000000000000000 R09: 0000000000000000 [ 213.428487][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.428502][T10383] R13: 00007fb36db66038 R14: 00007fb36db65fa0 R15: 00007ffe83e25668 [ 213.428523][T10383] [ 213.466548][T10370] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1738'. [ 213.508707][T10386] FAULT_INJECTION: forcing a failure. [ 213.508707][T10386] name failslab, interval 1, probability 0, space 0, times 0 [ 213.508738][T10386] CPU: 1 UID: 0 PID: 10386 Comm: syz.1.1741 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.508814][T10386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.508826][T10386] Call Trace: [ 213.508873][T10386] [ 213.508882][T10386] __dump_stack+0x1d/0x30 [ 213.508909][T10386] dump_stack_lvl+0x95/0xd0 [ 213.508932][T10386] dump_stack+0x15/0x1b [ 213.508953][T10386] should_fail_ex+0x262/0x280 [ 213.509058][T10386] should_failslab+0x8c/0xb0 [ 213.509088][T10386] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 213.509120][T10386] ? __d_alloc+0x34/0x320 [ 213.509191][T10386] ? __d_alloc+0x34/0x320 [ 213.509217][T10386] __d_alloc+0x34/0x320 [ 213.509243][T10386] d_alloc+0x2e/0x100 [ 213.509267][T10386] vfs_tmpfile+0x1f7/0x5f0 [ 213.509327][T10386] do_tmpfile+0xa8/0x190 [ 213.509435][T10386] path_openat+0xd79/0x10d0 [ 213.509610][T10386] ? kstrtoull+0x119/0x150 [ 213.509667][T10386] do_file_open+0x16c/0x290 [ 213.509703][T10386] do_sys_openat2+0xa0/0x130 [ 213.509746][T10386] __se_sys_openat2+0x193/0x1f0 [ 213.509772][T10386] __x64_sys_openat2+0x55/0x70 [ 213.509862][T10386] x64_sys_call+0x196c/0x2550 [ 213.509889][T10386] do_syscall_64+0x112/0x360 [ 213.509923][T10386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.509947][T10386] RIP: 0033:0x7f5fd6dbe159 [ 213.509995][T10386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.510014][T10386] RSP: 002b:00007f5fd5817028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 213.510037][T10386] RAX: ffffffffffffffda RBX: 00007f5fd7045fa0 RCX: 00007f5fd6dbe159 [ 213.510052][T10386] RDX: 0000200000000140 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 213.510067][T10386] RBP: 00007f5fd5817090 R08: 0000000000000000 R09: 0000000000000000 [ 213.510080][T10386] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 213.510170][T10386] R13: 00007f5fd7046038 R14: 00007f5fd7045fa0 R15: 00007ffd8c68d5a8 [ 213.510266][T10386] [ 214.212195][T10153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.577811][T10153] veth0_vlan: entered promiscuous mode [ 214.605375][T10153] veth1_vlan: entered promiscuous mode [ 214.646260][T10153] veth0_macvtap: entered promiscuous mode [ 214.667747][T10153] veth1_macvtap: entered promiscuous mode [ 214.713937][T10153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.729795][T10153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.739320][ T313] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.739479][ T313] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.750714][ T7019] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.750758][ T7019] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.782310][T10435] can0: slcan on ttyS3. [ 214.784233][T10435] FAULT_INJECTION: forcing a failure. [ 214.784233][T10435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.784263][T10435] CPU: 0 UID: 0 PID: 10435 Comm: syz.6.1751 Not tainted syzkaller #0 PREEMPT(lazy) [ 214.784294][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.784309][T10435] Call Trace: [ 214.784318][T10435] [ 214.784328][T10435] __dump_stack+0x1d/0x30 [ 214.784401][T10435] dump_stack_lvl+0x95/0xd0 [ 214.784428][T10435] dump_stack+0x15/0x1b [ 214.784469][T10435] should_fail_ex+0x262/0x280 [ 214.784500][T10435] should_fail+0xb/0x20 [ 214.784537][T10435] should_fail_usercopy+0x1a/0x20 [ 214.784588][T10435] _copy_from_user+0x1c/0xb0 [ 214.784614][T10435] __se_sys_io_uring_register+0x7f3/0x1330 [ 214.784640][T10435] ? __se_sys_futex+0x2f6/0x370 [ 214.784707][T10435] ? xfd_validate_state+0x45/0xf0 [ 214.784740][T10435] ? restore_fpregs_from_fpstate+0x61/0x110 [ 214.784764][T10435] __x64_sys_io_uring_register+0x55/0x70 [ 214.784796][T10435] x64_sys_call+0x1ff6/0x2550 [ 214.784876][T10435] do_syscall_64+0x112/0x360 [ 214.784914][T10435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.784940][T10435] RIP: 0033:0x7feb7bace159 [ 214.784959][T10435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.784980][T10435] RSP: 002b:00007feb7a527028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 214.785002][T10435] RAX: ffffffffffffffda RBX: 00007feb7bd55fa0 RCX: 00007feb7bace159 [ 214.785017][T10435] RDX: 00002000000004c0 RSI: 000000000000000b RDI: ffffffffffffffff [ 214.785060][T10435] RBP: 00007feb7bb6506b R08: 0000000000000000 R09: 0000000000000000 [ 214.785074][T10435] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 214.785086][T10435] R13: 00007feb7bd56038 R14: 00007feb7bd55fa0 R15: 00007fff250e0928 [ 214.785140][T10435] [ 214.793571][T10432] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 214.832916][T10434] can0 (unregistered): slcan off ttyS3. [ 215.103536][T10437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.103699][T10437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.345794][T10450] loop9: detected capacity change from 0 to 128 [ 215.424040][T10450] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.426124][T10450] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.463631][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 215.463653][ T29] audit: type=1400 audit(1789914735.768:3713): avc: denied { write } for pid=10447 comm="syz.9.1702" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.592147][T10153] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.770732][T10458] loop9: detected capacity change from 0 to 512 [ 215.794765][T10458] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 215.796707][T10458] EXT4-fs (loop9): 1 truncate cleaned up [ 215.797121][T10458] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.798057][T10458] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.617856][T10476] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1766'. [ 216.674874][T10475] ip_tables: iptables: counters copy to user failed while replacing table [ 217.162826][T10496] loop4: detected capacity change from 0 to 512 [ 217.163627][T10496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.196307][T10496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.196400][T10496] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.218734][ T29] audit: type=1400 audit(1789914737.507:3714): avc: denied { write } for pid=10487 comm="syz.4.1771" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.279654][T10496] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1771: corrupted xattr block 33: invalid ea_ino [ 217.279919][T10496] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 217.280009][T10496] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1771: corrupted xattr block 33: invalid ea_ino [ 217.280271][T10496] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 217.280411][T10496] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1771: corrupted xattr block 33: invalid ea_ino [ 217.280591][ T29] audit: type=1400 audit(1789914737.577:3715): avc: denied { read write } for pid=10487 comm="syz.4.1771" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 217.280775][T10496] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 217.566064][T10504] netlink: 'syz.6.1770': attribute type 8 has an invalid length. [ 217.696716][T10490] loop1: detected capacity change from 0 to 512 [ 217.720697][T10490] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 217.720777][T10490] EXT4-fs (loop1): orphan cleanup on readonly fs [ 217.720844][T10490] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1768: bad orphan inode 15 [ 217.720869][T10490] loop1: lost filesystem error report for type 5 error -117 [ 217.721997][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 217.722020][ C1] EXT4-fs (loop1): initial error at time 1789914738: ext4_orphan_get:1429 [ 217.722040][ C1] EXT4-fs (loop1): last error at time 1789914738: ext4_orphan_get:1429 [ 217.722179][T10490] ext4_test_bit(bit=14, block=5) = 0 [ 217.722729][T10490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 217.734142][T10490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1768'. [ 217.734161][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'. [ 217.780941][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'. [ 217.781505][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'. [ 218.301580][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.316287][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.384132][T10520] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 218.384154][T10520] mroute: pending queue full, dropping entries [ 218.465064][T10528] FAULT_INJECTION: forcing a failure. [ 218.465064][T10528] name failslab, interval 1, probability 0, space 0, times 0 [ 218.465095][T10528] CPU: 1 UID: 0 PID: 10528 Comm: syz.6.1777 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.465123][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.465137][T10528] Call Trace: [ 218.465145][T10528] [ 218.465234][T10528] __dump_stack+0x1d/0x30 [ 218.465264][T10528] dump_stack_lvl+0x95/0xd0 [ 218.465288][T10528] dump_stack+0x15/0x1b [ 218.465311][T10528] should_fail_ex+0x262/0x280 [ 218.465337][T10528] ? skb_clone+0x151/0x1f0 [ 218.465401][T10528] should_failslab+0x8c/0xb0 [ 218.465417][ T29] audit: type=1400 audit(1789914738.766:3716): avc: denied { map } for pid=10519 comm="syz.4.1775" path="socket:[31911]" dev="sockfs" ino=31911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.465434][T10528] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 218.465467][T10528] ? skb_clone+0x151/0x1f0 [ 218.465549][T10528] skb_clone+0x151/0x1f0 [ 218.465572][T10528] __netlink_deliver_tap+0x2be/0x510 [ 218.465611][T10528] netlink_unicast+0x656/0x680 [ 218.465681][T10528] netlink_sendmsg+0x5be/0x6f0 [ 218.465720][T10528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.465757][T10528] ____sys_sendmsg+0x532/0x580 [ 218.465836][T10528] ___sys_sendmsg+0x195/0x1e0 [ 218.465871][T10528] __x64_sys_sendmsg+0xd4/0x160 [ 218.465965][T10528] x64_sys_call+0x22ab/0x2550 [ 218.465995][T10528] do_syscall_64+0x112/0x360 [ 218.466038][T10528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.466062][T10528] RIP: 0033:0x7feb7bace159 [ 218.466079][T10528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.466179][T10528] RSP: 002b:00007feb7a527028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.466200][T10528] RAX: ffffffffffffffda RBX: 00007feb7bd55fa0 RCX: 00007feb7bace159 [ 218.466214][T10528] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 218.466230][T10528] RBP: 00007feb7a527090 R08: 0000000000000000 R09: 0000000000000000 [ 218.466246][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.466323][T10528] R13: 00007feb7bd56038 R14: 00007feb7bd55fa0 R15: 00007fff250e0928 [ 218.466342][T10528] [ 218.526781][T10525] loop4: detected capacity change from 0 to 164 [ 218.578416][T10529] loop8: detected capacity change from 0 to 128 [ 218.585928][T10525] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 218.599145][T10525] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 218.633760][T10525] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 218.635679][T10525] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 218.710981][T10529] Cannot find set identified by id 0 to match [ 218.730692][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1778'. [ 219.329012][ T29] audit: type=1400 audit(1789914739.626:3717): avc: denied { write } for pid=10546 comm="syz.6.1783" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 219.413782][T10550] loop6: detected capacity change from 0 to 512 [ 219.430942][T10550] ext4: Bad value for 'mb_optimize_scan' [ 219.520832][T10552] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1785'. [ 220.108184][T10560] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 220.144459][T10562] usb usb8: usbfs: process 10562 (syz.1.1788) did not claim interface 0 before use [ 220.850861][T10513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.956630][T10570] loop9: detected capacity change from 0 to 128 [ 220.969327][T10570] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.973068][T10570] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 221.016154][T10570] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1792'. [ 221.023046][ T29] audit: type=1400 audit(1789914741.325:3718): avc: denied { write } for pid=10569 comm="syz.9.1792" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.061121][ T29] audit: type=1400 audit(1789914741.365:3719): avc: denied { write } for pid=10569 comm="syz.9.1792" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.062824][ T29] audit: type=1400 audit(1789914741.365:3720): avc: denied { write } for pid=10569 comm="syz.9.1792" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.107705][ T29] audit: type=1400 audit(1789914741.415:3721): avc: denied { connect } for pid=10575 comm="syz.8.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.164054][ T29] audit: type=1400 audit(1789914741.475:3722): avc: denied { lock } for pid=10569 comm="syz.9.1792" path="/6/mnt/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 221.174623][T10586] IPVS: Unknown mcast interface: veth1_to_bridge [ 221.275258][T10153] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.314197][T10586] Invalid logical block size (1) [ 221.404475][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.411773][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.692205][T10607] loop1: detected capacity change from 0 to 512 [ 222.692619][T10607] ext2: Unknown parameter 'uid<00000000000000000000' [ 222.743315][T10611] loop9: detected capacity change from 0 to 512 [ 222.786418][T10612] ip6gre1: entered allmulticast mode [ 222.802189][ T5423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.189913][T10621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.189931][T10621] IPv6: NLM_F_CREATE should be set when creating new route [ 223.274450][T10624] FAULT_INJECTION: forcing a failure. [ 223.274450][T10624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.274488][T10624] CPU: 1 UID: 0 PID: 10624 Comm: syz.9.1809 Not tainted syzkaller #0 PREEMPT(lazy) [ 223.274531][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.274545][T10624] Call Trace: [ 223.274554][T10624] [ 223.274564][T10624] __dump_stack+0x1d/0x30 [ 223.274660][T10624] dump_stack_lvl+0x95/0xd0 [ 223.274686][T10624] dump_stack+0x15/0x1b [ 223.274722][T10624] should_fail_ex+0x262/0x280 [ 223.274750][T10624] should_fail+0xb/0x20 [ 223.274829][T10624] should_fail_usercopy+0x1a/0x20 [ 223.274859][T10624] set_fd_set+0x29/0x90 [ 223.274894][T10624] core_sys_select+0x5aa/0x730 [ 223.274942][T10624] ? timespec64_add_safe+0x106/0x150 [ 223.275032][T10624] __se_sys_pselect6+0x23f/0x2a0 [ 223.275124][T10624] __x64_sys_pselect6+0x78/0x90 [ 223.275148][T10624] x64_sys_call+0x1dfc/0x2550 [ 223.275177][T10624] do_syscall_64+0x112/0x360 [ 223.275263][T10624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.275368][T10624] RIP: 0033:0x7f3cbb7fe159 [ 223.275387][T10624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.275409][T10624] RSP: 002b:00007f3cba257028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 223.275433][T10624] RAX: ffffffffffffffda RBX: 00007f3cbba85fa0 RCX: 00007f3cbb7fe159 [ 223.275451][T10624] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.275527][T10624] RBP: 00007f3cbb89506b R08: 0000200000000280 R09: 0000000000000000 [ 223.275543][T10624] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 223.275559][T10624] R13: 00007f3cbba86038 R14: 00007f3cbba85fa0 R15: 00007ffc4a416fc8 [ 223.275580][T10624] [ 223.635679][ T29] audit: type=1400 audit(1789914743.874:3723): avc: denied { write } for pid=10623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.005585][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.005675][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.059773][ T29] audit: type=1400 audit(1789914744.364:3724): avc: denied { write } for pid=10649 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.611111][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.876615][T10639] loop9: detected capacity change from 0 to 512 [ 225.105123][T10621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.145230][ T29] audit: type=1400 audit(1789914745.443:3725): avc: denied { bind } for pid=10654 comm="syz.6.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 225.197332][T10621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.312304][T10657] loop6: detected capacity change from 0 to 32768 [ 225.397175][T10657] loop6: p1 p3 < > [ 225.405746][T10639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.405847][T10639] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.197547][ T313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.226446][ T5423] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.226490][ T5423] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.228344][ T5423] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.228428][ T5423] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.228599][ T5423] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.228695][ T5423] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.228774][ T5423] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.228807][ T5423] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.324524][T10153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.339320][ T313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.468539][ T313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.489017][T10686] loop4: detected capacity change from 0 to 512 [ 226.508382][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.598985][T10680] loop1: detected capacity change from 0 to 1024 [ 226.726712][T10680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.752642][T10686] EXT4-fs (loop4): 1 orphan inode deleted [ 226.753190][T10686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.756004][T10686] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.812849][ T29] audit: type=1400 audit(1789914747.112:3726): avc: denied { write } for pid=10677 comm="syz.4.1820" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.844377][ T29] audit: type=1400 audit(1789914747.142:3727): avc: denied { mounton } for pid=10677 comm="syz.4.1820" path="/409/file1/bus" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 226.917227][ T29] audit: type=1400 audit(1789914747.222:3728): avc: denied { write } for pid=10679 comm="syz.1.1822" name="file1" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.964126][ T29] audit: type=1400 audit(1789914747.262:3729): avc: denied { write } for pid=10679 comm="syz.1.1822" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.000688][ T313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.089171][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.207751][T10721] device-mapper: dirty region log: unrecognised sync argument to dirty region log: s [ 227.207771][T10721] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL) [ 227.207791][T10721] device-mapper: ioctl: error adding target to table [ 227.214229][ T3302] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /409/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 227.214963][ T29] audit: type=1400 audit(1789914747.512:3730): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.214963][ T3302] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 227.215142][ T3302] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 227.215243][ T3302] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /409/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 227.215724][ T29] audit: type=1400 audit(1789914747.512:3731): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.215716][ T3302] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 227.215924][ T3302] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 227.216023][ T3302] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /409/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 227.216386][ T3302] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 227.216440][ T29] audit: type=1400 audit(1789914747.512:3732): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.216638][ T3302] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 227.218518][ T3302] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /409/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 227.221100][ T3302] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 227.226579][ T3302] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 227.226734][ T3302] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /409/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 227.227293][ T3302] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 227.228215][ T29] audit: type=1400 audit(1789914747.522:3733): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.228247][ T29] audit: type=1400 audit(1789914747.522:3734): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.229749][ T3302] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 227.232663][ T3302] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 227.237797][ T29] audit: type=1400 audit(1789914747.532:3735): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.239564][ T3302] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 227.243060][ T3302] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 227.243712][ T3302] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 227.244375][ T3302] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 227.312605][T10727] SET target dimension over the limit! [ 227.331948][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1829'. [ 227.371939][ T313] bridge_slave_1: left allmulticast mode [ 227.371963][ T313] bridge_slave_1: left promiscuous mode [ 227.372151][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.393968][ T313] bridge_slave_0: left allmulticast mode [ 227.393994][ T313] bridge_slave_0: left promiscuous mode [ 227.394135][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.542369][T10737] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10737 comm=syz.6.1831 [ 227.705745][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.813925][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.815189][ T313] bond0 (unregistering): Released all slaves [ 227.857857][T10742] loop8: detected capacity change from 0 to 164 [ 227.858719][ T8857] syz_tun (unregistering): left allmulticast mode [ 227.906571][ T313] hsr_slave_0: left promiscuous mode [ 227.907385][ T313] hsr_slave_1: left promiscuous mode [ 227.910979][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.910996][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.915294][ T8857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.915769][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.915852][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.936506][ T313] veth1_macvtap: left promiscuous mode [ 227.936533][ T313] veth0_macvtap: left promiscuous mode [ 227.936693][ T313] veth1_vlan: left promiscuous mode [ 227.936724][ T313] veth0_vlan: left promiscuous mode [ 228.105648][T10755] loop6: detected capacity change from 0 to 512 [ 228.768725][ T313] team0 (unregistering): Port device team_slave_1 removed [ 228.776020][ T313] team0 (unregistering): Port device team_slave_0 removed [ 229.072390][T10790] Illegal XDP return value 4294967294 on prog (id 289) dev N/A, expect packet loss! [ 229.096928][T10789] loop1: detected capacity change from 0 to 2048 [ 229.149097][T10791] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1843'. [ 229.225684][T10798] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1843'. [ 229.225707][T10798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.254810][T10810] bridge1: entered promiscuous mode [ 229.254830][T10810] bridge1: entered allmulticast mode [ 229.264396][T10810] team0: Port device bridge1 added [ 229.577555][T10827] loop6: detected capacity change from 0 to 512 [ 229.578565][T10827] EXT4-fs: Ignoring removed bh option [ 229.578647][T10827] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.578702][T10827] ext4: Unknown parameter 'smackfsdef' [ 229.631293][T10827] loop6: detected capacity change from 0 to 256 [ 229.685496][T10838] loop8: detected capacity change from 0 to 512 [ 229.698005][T10838] FAT-fs (loop8): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 229.698034][T10838] FAT-fs (loop8): bogus number of directory entries (65535) [ 229.698051][T10838] FAT-fs (loop8): Can't find a valid FAT filesystem [ 229.979618][ T313] bridge_slave_0: left allmulticast mode [ 229.979642][ T313] bridge_slave_0: left promiscuous mode [ 229.979800][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.020451][T10865] loop8: detected capacity change from 0 to 512 [ 230.028916][T10865] EXT4-fs (loop8): bad geometry: first data block is 0 with a 1k block and cluster size [ 230.142661][T10872] loop6: detected capacity change from 0 to 512 [ 230.165384][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.166520][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.168773][ T313] bond0 (unregistering): Released all slaves [ 230.211420][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.211456][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.211519][T10778] bridge_slave_0: entered allmulticast mode [ 230.212136][T10778] bridge_slave_0: entered promiscuous mode [ 230.227509][T10778] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.227569][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.227647][T10778] bridge_slave_1: entered allmulticast mode [ 230.228171][T10778] bridge_slave_1: entered promiscuous mode [ 230.229277][ T313] tipc: Left network mode [ 230.234482][T10872] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -ENXIO [ 230.276254][T10872] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1857'. [ 230.299063][T10878] loop1: detected capacity change from 0 to 512 [ 230.313123][ T313] hsr_slave_0: left promiscuous mode [ 230.313624][ T313] hsr_slave_1: left promiscuous mode [ 230.314063][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.314409][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.443015][T10884] loop1: detected capacity change from 0 to 512 [ 230.462800][T10884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.462959][T10884] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.479976][T10884] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.520780][ T313] team0 (unregistering): Port device team_slave_1 removed [ 230.536089][ T313] team0 (unregistering): Port device team_slave_0 removed [ 230.564600][T10897] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 230.587680][ T313] team0 (unregistering): Port device dummy0 removed [ 230.598992][T10778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.600307][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1858'. [ 230.641247][T10778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.681047][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 230.690702][T10778] team0: Port device team_slave_0 added [ 230.691989][T10778] team0: Port device team_slave_1 added [ 230.718934][T10778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.718951][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.718982][T10778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.723645][T10778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.723660][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.723708][T10778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.807338][T10906] EXT4-fs: Ignoring removed bh option [ 230.807377][T10906] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.807442][T10906] ext4: Unknown parameter 'smackfsdef' [ 230.818929][T10778] hsr_slave_0: entered promiscuous mode [ 230.819356][T10778] hsr_slave_1: entered promiscuous mode [ 230.819633][T10778] debugfs: 'hsr0' already exists in 'hsr' [ 230.819649][T10778] Cannot create hsr debugfs directory [ 231.143842][T10927] smpboot: CPU 1 is now offline [ 231.156400][T10929] netlink: 'syz.8.1867': attribute type 1 has an invalid length. [ 231.388157][T10929] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 231.764754][T10933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.764769][T10933] IPv6: NLM_F_CREATE should be set when creating new route [ 231.936123][T10948] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.956269][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 231.956289][ T29] audit: type=1400 audit(1789914752.240:3844): avc: denied { write } for pid=10947 comm="syz.8.1870" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.967754][T10948] xt_hashlimit: size too large, truncated to 1048576 [ 232.154200][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 232.179497][ T313] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.180075][ T313] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.180114][ T313] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.180191][ T313] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.441731][T10966] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.442871][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1873'. [ 232.443000][T10966] netlink: 'syz.9.1873': attribute type 2 has an invalid length. [ 232.448494][T10778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.641826][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.648953][ T29] audit: type=1400 audit(1789914752.939:3845): avc: denied { write } for pid=10964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.653545][T10778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.699320][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.702519][T10778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.720364][ T8441] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.721691][T10153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.726460][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.727034][T10778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.743606][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.810144][ T29] audit: type=1400 audit(1789914753.099:3846): avc: denied { write } for pid=10989 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.884484][T11002] set_capacity_and_notify: 4 callbacks suppressed [ 232.884531][T11002] loop8: detected capacity change from 0 to 512 [ 232.886359][T11002] EXT4-fs: Ignoring removed bh option [ 232.892778][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 232.915026][T11002] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.915066][T11002] ext4: Unknown parameter 'smackfsdef' [ 233.010235][T10778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.049010][T10778] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.065085][T10991] loop6: detected capacity change from 0 to 512 [ 233.080474][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.080554][ T5036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.099292][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.099333][ T5437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.104895][T10991] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.1875: Unrecognised inode hash code 255 [ 233.104927][T10991] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1875: Corrupt directory, running e2fsck is recommended [ 233.175398][T10991] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 233.180472][T10991] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.1875: corrupted in-inode xattr: invalid ea_ino [ 233.180528][T10991] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.185646][T10991] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1875: couldn't read orphan inode 15 (err -117) [ 233.185682][T10991] loop6: lost filesystem error report for type 5 error -117 [ 233.187057][T10991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.256351][ T6469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.421853][ T29] audit: type=1400 audit(1789914753.719:3847): avc: denied { write } for pid=11020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.513265][T11054] loop1: detected capacity change from 0 to 1024 [ 233.513838][ T29] audit: type=1400 audit(1789914753.809:3848): avc: denied { write } for pid=11048 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.546163][T11054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.587446][ T29] audit: type=1400 audit(1789914753.879:3849): avc: denied { write } for pid=11051 comm="syz.1.1885" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.615199][ T29] audit: type=1400 audit(1789914753.889:3850): avc: denied { write } for pid=11051 comm="syz.1.1885" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.649134][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 233.702932][T11070] loop6: detected capacity change from 0 to 512 [ 233.705974][T11070] EXT4-fs: Ignoring removed bh option [ 233.706013][T11070] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.706047][T11070] ext4: Unknown parameter 'smackfsdef' [ 233.714684][T10778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.733479][T11059] loop8: detected capacity change from 0 to 128 [ 233.787573][ T29] audit: type=1400 audit(1789914754.079:3851): avc: denied { write } for pid=3296 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.788088][ T29] audit: type=1400 audit(1789914754.079:3852): avc: denied { write } for pid=3296 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.788415][ T29] audit: type=1400 audit(1789914754.079:3853): avc: denied { write } for pid=3296 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.888553][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.950162][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.988823][T10778] veth0_vlan: entered promiscuous mode [ 234.105460][T10778] veth1_vlan: entered promiscuous mode [ 235.101142][T10778] veth0_macvtap: entered promiscuous mode [ 235.105318][T10778] veth1_macvtap: entered promiscuous mode [ 235.120715][T10778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.124809][T10778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.044749][ T7019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.045332][ T7019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.045395][ T7019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.045504][ T7019] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.767207][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 236.792763][T11121] netlink: 'syz.6.1895': attribute type 7 has an invalid length. [ 236.988185][T11133] loop6: detected capacity change from 0 to 512 [ 236.998568][T11140] loop3: detected capacity change from 0 to 512 [ 236.998993][T11140] EXT4-fs: Ignoring removed bh option [ 236.999033][T11140] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.999083][T11140] ext4: Unknown parameter 'smackfsdef' [ 237.042996][T11133] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1899: bg 0: block 4: invalid block bitmap [ 237.043031][T11133] loop6: lost filesystem error report for type 5 error -117 [ 237.044680][T11133] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 237.044843][T11133] loop6: lost filesystem error report for type 5 error -117 [ 237.046187][T11140] loop3: detected capacity change from 0 to 256 [ 237.048718][T11133] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1899: invalid indirect mapped block 1 (level 1) [ 237.048826][T11133] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 237.050145][T11133] EXT4-fs (loop6): 1 truncate cleaned up [ 237.050717][T11133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.225345][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 237.225366][ T29] audit: type=1400 audit(1789914757.518:3865): avc: denied { write } for pid=11135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.434430][T11160] syz_tun: entered allmulticast mode [ 237.461593][ T29] audit: type=1400 audit(1789914757.748:3866): avc: denied { write } for pid=11163 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.502701][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24 [ 237.593331][T11162] netlink: 160 bytes leftover after parsing attributes in process `syz.9.1905'. [ 237.728532][T11166] loop3: detected capacity change from 0 to 8192 [ 237.773841][T11166] loop3: p1[EZD] p3 p4 [ 237.774537][T11166] loop3: p3 start 150994944 is beyond EOD, truncated [ 237.896296][ T6469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.938691][ T29] audit: type=1400 audit(1789914758.228:3867): avc: denied { write } for pid=11167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.991337][T11193] netlink: 'syz.8.1908': attribute type 14 has an invalid length. [ 238.011645][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1910'. [ 238.087206][ T29] audit: type=1400 audit(1789914758.378:3868): avc: denied { write } for pid=11195 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.289454][T11208] loop6: detected capacity change from 0 to 512 [ 238.289822][T11208] EXT4-fs: Ignoring removed bh option [ 238.289932][T11208] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.289985][T11208] ext4: Unknown parameter 'smackfsdef' [ 238.312360][T11208] loop6: detected capacity change from 0 to 256 [ 238.557399][T11225] loop1: detected capacity change from 0 to 1024 [ 238.606329][T11225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.616418][T11226] syzkaller0: entered promiscuous mode [ 238.616474][T11226] syzkaller0: entered allmulticast mode [ 239.163994][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.178681][ T29] audit: type=1326 audit(1789914759.467:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.9.1922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cbb7fe159 code=0x0 [ 239.230228][ T29] audit: type=1400 audit(1789914759.507:3870): avc: denied { write } for pid=11204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.295706][T11249] loop1: detected capacity change from 0 to 512 [ 239.309528][T11249] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.1925: iget: bad i_size value: 12154757448730 [ 239.309590][T11249] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 239.310097][T11249] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1925: couldn't read orphan inode 13 (err -117) [ 239.310200][T11249] loop1: lost filesystem error report for type 5 error -117 [ 239.311297][T11249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.347376][ T29] audit: type=1400 audit(1789914759.637:3871): avc: denied { write } for pid=11258 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.405222][T11248] netlink: 'syz.1.1925': attribute type 4 has an invalid length. [ 239.405860][T11248] netlink: 'syz.1.1925': attribute type 4 has an invalid length. [ 239.405904][T11248] netlink: 'syz.1.1925': attribute type 4 has an invalid length. [ 239.405944][T11248] netlink: 'syz.1.1925': attribute type 4 has an invalid length. [ 239.405981][T11248] netlink: 'syz.1.1925': attribute type 4 has an invalid length. [ 239.406010][T11248] netlink: 'syz.1.1925': attribute type 4 has an invalid length. [ 239.406040][T11248] netlink: 'syz.1.1925': attribute type 4 has an invalid length. [ 239.406108][T11248] netlink: 'syz.1.1925': attribute type 4 has an invalid length. [ 239.415514][ T29] audit: type=1400 audit(1789914759.707:3872): avc: denied { write } for pid=11263 comm="syz.6.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.416016][ T29] audit: type=1400 audit(1789914759.707:3873): avc: denied { write } for pid=11247 comm="syz.1.1925" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.898036][T11281] loop6: detected capacity change from 0 to 512 [ 239.901988][T11281] EXT4-fs: Ignoring removed bh option [ 239.902033][T11281] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.902071][T11281] ext4: Unknown parameter 'smackfsdef' [ 240.526358][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.568492][T11292] loop1: detected capacity change from 0 to 512 [ 240.611308][T11292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.611379][T11292] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.615427][T11294] sctp: [Deprecated]: syz.6.1933 (pid 11294) Use of int in max_burst socket option deprecated. [ 240.615427][T11294] Use struct sctp_assoc_value instead [ 240.706686][ T29] audit: type=1400 audit(1789914760.996:3874): avc: denied { write } for pid=11291 comm="syz.1.1935" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.150776][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.349869][T11324] batman_adv: batadv0: Adding interface: veth0 [ 241.349887][T11324] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.350076][T11324] batman_adv: batadv0: Interface activated: veth0 [ 241.467325][T11326] loop9: detected capacity change from 0 to 512 [ 241.467817][T11326] EXT4-fs: Ignoring removed bh option [ 241.467947][T11326] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.467979][T11326] ext4: Unknown parameter 'smackfsdef' [ 241.489520][T11327] batman_adv: batadv0: Interface deactivated: veth0 [ 241.489538][T11327] batman_adv: batadv0: Removing interface: veth0 [ 241.495616][T11326] loop9: detected capacity change from 0 to 256 [ 241.572782][T11330] loop1: detected capacity change from 0 to 512 [ 241.642177][T11330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.642244][T11330] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.655695][T11330] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1941: bg 0: block 448: padding at end of block bitmap is not set [ 241.656136][T11330] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.1941: Failed to acquire dquot type 0 [ 241.846733][T11343] syzkaller0: entered promiscuous mode [ 241.846755][T11343] syzkaller0: entered allmulticast mode [ 242.143652][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1949'. [ 242.143758][T11349] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1949'. [ 242.252958][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 242.252988][ T29] audit: type=1326 audit(1789914762.545:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 242.253642][ T29] audit: type=1326 audit(1789914762.545:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 242.257464][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.284314][ T29] audit: type=1326 audit(1789914762.575:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 242.286276][ T29] audit: type=1326 audit(1789914762.585:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 242.289182][ T29] audit: type=1326 audit(1789914762.585:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 242.290701][ T29] audit: type=1326 audit(1789914762.585:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 242.291453][ T29] audit: type=1326 audit(1789914762.585:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff723cadec2 code=0x7ffc0000 [ 242.308016][ T29] audit: type=1326 audit(1789914762.605:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff723c6e98e code=0x7ffc0000 [ 242.331425][ T29] audit: type=1326 audit(1789914762.625:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff723cadf87 code=0x7ffc0000 [ 242.333839][ T29] audit: type=1326 audit(1789914762.625:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11351 comm="syz.3.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff723c6e98e code=0x7ffc0000 [ 242.351005][T11352] loop3: detected capacity change from 0 to 512 [ 242.945340][T11369] FAULT_INJECTION: forcing a failure. [ 242.945340][T11369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.945387][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.3.1954 Not tainted syzkaller #0 PREEMPT(lazy) [ 242.945412][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.945424][T11369] Call Trace: [ 242.945452][T11369] [ 242.945462][T11369] __dump_stack+0x1d/0x30 [ 242.945489][T11369] dump_stack_lvl+0x95/0xd0 [ 242.945534][T11369] dump_stack+0x15/0x1b [ 242.945599][T11369] should_fail_ex+0x262/0x280 [ 242.945657][T11369] should_fail+0xb/0x20 [ 242.945757][T11369] should_fail_usercopy+0x1a/0x20 [ 242.945846][T11369] _copy_from_user+0x1c/0xb0 [ 242.945877][T11369] restore_altstack+0x4b/0x300 [ 242.945908][T11369] ? __set_current_blocked+0x284/0x2e0 [ 242.945936][T11369] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 242.946023][T11369] ? arch_do_signal_or_restart+0x2f3/0x480 [ 242.946062][T11369] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 242.946101][T11369] ? ksys_write+0x194/0x1a0 [ 242.946212][T11369] ? __rcu_read_unlock+0x4e/0x70 [ 242.946246][T11369] x64_sys_call+0x1532/0x2550 [ 242.946270][T11369] do_syscall_64+0x112/0x360 [ 242.946385][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.946413][T11369] RIP: 0033:0x7ff723c4f4d9 [ 242.946435][T11369] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 242.946465][T11369] RSP: 002b:00007ff722706a40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 242.946521][T11369] RAX: ffffffffffffffda RBX: 00007ff7227076c0 RCX: 00007ff723c4f4d9 [ 242.946539][T11369] RDX: 00007ff722706a40 RSI: 00007ff722706b70 RDI: 0000000000000021 [ 242.946556][T11369] RBP: 00007ff722707090 R08: 0000000000000000 R09: 0000000000000000 [ 242.946625][T11369] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 242.946641][T11369] R13: 00007ff723f36038 R14: 00007ff723f35fa0 R15: 00007ffd3698cc68 [ 242.946665][T11369] [ 243.311015][T11361] validate_nla: 25 callbacks suppressed [ 243.311040][T11361] netlink: 'syz.9.1952': attribute type 1 has an invalid length. [ 243.354790][T11375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1957'. [ 243.405986][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1961'. [ 243.458799][T11380] loop1: detected capacity change from 0 to 256 [ 243.512666][T11382] syzkaller0: entered promiscuous mode [ 243.512702][T11382] syzkaller0: entered allmulticast mode [ 244.462668][T11384] loop9: detected capacity change from 0 to 512 [ 244.482301][T11384] EXT4-fs: Mount option(s) incompatible with ext2 [ 244.826550][T11423] netlink: 'syz.8.1976': attribute type 2 has an invalid length. [ 244.826585][T11423] netlink: 16098 bytes leftover after parsing attributes in process `syz.8.1976'. [ 245.443165][T11446] syzkaller0: entered promiscuous mode [ 245.443191][T11446] syzkaller0: entered allmulticast mode [ 245.536012][T11443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.536161][T11443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.603706][T11449] loop9: detected capacity change from 0 to 4096 [ 245.687319][T11449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.687910][T11449] EXT4-fs (loop9): shut down requested (1) [ 245.688338][T11449] FAULT_INJECTION: forcing a failure. [ 245.688338][T11449] name failslab, interval 1, probability 0, space 0, times 0 [ 245.688367][T11449] CPU: 0 UID: 0 PID: 11449 Comm: syz.9.1981 Not tainted syzkaller #0 PREEMPT(lazy) [ 245.688395][T11449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.688473][T11449] Call Trace: [ 245.688481][T11449] [ 245.688491][T11449] __dump_stack+0x1d/0x30 [ 245.688522][T11449] dump_stack_lvl+0x95/0xd0 [ 245.688600][T11449] dump_stack+0x15/0x1b [ 245.688622][T11449] should_fail_ex+0x262/0x280 [ 245.688728][T11449] ? __es_insert_extent+0x50e/0xee0 [ 245.688751][T11449] should_failslab+0x8c/0xb0 [ 245.688836][T11449] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 245.688868][T11449] ? __es_insert_extent+0x50e/0xee0 [ 245.688891][T11449] __es_insert_extent+0x50e/0xee0 [ 245.688956][T11449] ? lapic_next_event+0x11/0x20 [ 245.688977][T11449] ? clockevents_program_event+0x2fd/0x340 [ 245.689008][T11449] ? number+0xa71/0xb80 [ 245.689066][T11449] ext4_es_cache_extent+0x386/0x5b0 [ 245.689100][T11449] ? ext4_find_extent+0x17f/0x7a0 [ 245.689160][T11449] ext4_find_extent+0x33f/0x7a0 [ 245.689192][T11449] ext4_ext_map_blocks+0x10b/0x2f40 [ 245.689223][T11449] ? page_counter_charge+0x205/0x220 [ 245.689247][T11449] ? __account_obj_stock+0x43d/0x720 [ 245.689284][T11449] ? __obj_cgroup_charge+0x194/0x250 [ 245.689376][T11449] ? __refill_obj_stock+0x1f8/0x3d0 [ 245.689400][T11449] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 245.689427][T11449] ? should_fail_ex+0x31/0x280 [ 245.689451][T11449] ? security_inode_alloc+0x37/0x100 [ 245.689635][T11449] ? lapic_next_event+0x11/0x20 [ 245.689658][T11449] ext4_map_query_blocks+0xa1/0x500 [ 245.689682][T11449] ? ext4_es_lookup_extent+0x390/0x4f0 [ 245.689708][T11449] ? __hrtimer_rearm_deferred+0x571/0x650 [ 245.689795][T11449] ext4_map_blocks+0x300/0x9a0 [ 245.689818][T11449] ? __rcu_read_unlock+0x33/0x70 [ 245.689854][T11449] ext4_getblk+0x135/0x540 [ 245.689924][T11449] ext4_bread_batch+0x5c/0x320 [ 245.689975][T11449] __ext4_find_entry+0x86e/0xe00 [ 245.690006][T11449] ? kmem_cache_alloc_lru_noprof+0x1f4/0x3f0 [ 245.690062][T11449] ? __d_alloc+0x34/0x320 [ 245.690100][T11449] ? __d_alloc+0x34/0x320 [ 245.690174][T11449] ext4_lookup+0xcd/0x3a0 [ 245.690224][T11449] lookup_one_qstr_excl+0xc7/0x240 [ 245.690256][T11449] filename_rmdir+0x161/0x360 [ 245.690287][T11449] __se_sys_unlinkat+0x6e/0x140 [ 245.690317][T11449] __x64_sys_unlinkat+0x43/0x50 [ 245.690388][T11449] x64_sys_call+0x21a3/0x2550 [ 245.690420][T11449] do_syscall_64+0x112/0x360 [ 245.690460][T11449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.690567][T11449] RIP: 0033:0x7f3cbb7fe159 [ 245.690652][T11449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.690669][T11449] RSP: 002b:00007f3cba257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 245.690689][T11449] RAX: ffffffffffffffda RBX: 00007f3cbba85fa0 RCX: 00007f3cbb7fe159 [ 245.690760][T11449] RDX: 0000000000000200 RSI: 00002000000000c0 RDI: 0000000000000004 [ 245.690773][T11449] RBP: 00007f3cba257090 R08: 0000000000000000 R09: 0000000000000000 [ 245.690864][T11449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.690876][T11449] R13: 00007f3cbba86038 R14: 00007f3cbba85fa0 R15: 00007ffc4a416fc8 [ 245.690893][T11449] [ 245.691489][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1975'. [ 246.240912][T10153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.274831][T11486] syzkaller0: entered promiscuous mode [ 247.274857][T11486] syzkaller0: entered allmulticast mode [ 247.325324][T11478] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 247.423052][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 247.423072][ T29] audit: type=1400 audit(1789914767.713:3976): avc: denied { prog_run } for pid=11492 comm="syz.3.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 247.470558][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'. [ 247.470649][T11493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1996'. [ 247.561655][T11493] bond1: option downdelay: invalid value (18446744073071951880) [ 247.561749][T11493] bond1: option downdelay: allowed values 0 - 2147483647 [ 247.571279][T11493] bond1 (unregistering): Released all slaves [ 247.698871][T11517] loop6: detected capacity change from 0 to 512 [ 247.728500][T11517] EXT4-fs warning (device loop6): read_mmp_block:110: Error -74 while reading MMP block 17 [ 248.094554][T11526] syzkaller0: entered promiscuous mode [ 248.094662][T11526] syzkaller0: entered allmulticast mode [ 248.297469][T11530] vhci_hcd vhci_hcd.2: invalid port number 236 [ 248.436782][T11540] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2011'. [ 248.473826][T11544] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 248.713301][T11553] netlink: 'syz.6.2017': attribute type 1 has an invalid length. [ 248.748654][T11553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.758197][T11557] loop1: detected capacity change from 0 to 512 [ 248.774565][T11557] EXT4-fs: Ignoring removed nobh option [ 248.812553][T11557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.853731][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.895531][T11557] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.2018: corrupted inode contents [ 248.895561][T11557] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 248.897547][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 248.897571][ C1] EXT4-fs (loop1): initial error at time 1789914769: ext4_do_update_inode:5801: inode 3 [ 248.897608][ C1] EXT4-fs (loop1): last error at time 1789914769: ext4_do_update_inode:5801: inode 3 [ 248.901518][T11557] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #3: comm syz.1.2018: mark_inode_dirty error [ 248.901547][T11557] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 248.908150][T11557] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.2018: corrupted inode contents [ 248.908180][T11557] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 248.909257][T11557] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.2018: mark_inode_dirty error [ 248.909282][T11557] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 248.910102][T11557] Quota error (device loop1): write_blk: dquota write failed [ 248.910131][T11557] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 248.910154][T11557] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.2018: Failed to acquire dquot type 0 [ 248.910239][T11557] loop1: lost filesystem error report for type 5 error -117 [ 248.910866][T11557] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.2018: corrupted inode contents [ 248.910891][T11557] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 248.912519][T11557] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #16: comm syz.1.2018: mark_inode_dirty error [ 248.912545][T11557] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 248.912956][T11557] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.2018: corrupted inode contents [ 248.912981][T11557] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 248.913256][T11557] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.2018: mark_inode_dirty error [ 248.913281][T11557] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 248.913674][T11557] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.2018: corrupted inode contents [ 248.913699][T11557] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 248.913952][T11557] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 248.914019][T11557] loop1: lost filesystem error report for type 5 error -117 [ 248.915904][T11557] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.2018: corrupted inode contents [ 248.915929][T11557] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 248.921592][T11557] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.2018: mark_inode_dirty error [ 248.922429][T11557] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 248.922447][T11557] loop1: lost filesystem error report for type 5 error -117 [ 248.924454][T11557] EXT4-fs (loop1): 1 truncate cleaned up [ 248.924819][T11557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.924987][T11557] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.935919][T11562] loop9: detected capacity change from 0 to 512 [ 248.947241][T11562] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 248.953816][T11562] EXT4-fs (loop9): 1 truncate cleaned up [ 248.954442][T11562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.961896][ T29] audit: type=1400 audit(1789914769.242:3977): avc: denied { write } for pid=11541 comm="syz.9.2012" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.252612][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.331515][T11553] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 249.376738][T10153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.395137][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.395270][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.419068][T11573] syzkaller0: entered promiscuous mode [ 249.419145][T11573] syzkaller0: entered allmulticast mode [ 249.444828][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 249.501663][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.517932][T11582] bridge_slave_1 (unregistering): left allmulticast mode [ 249.517970][T11582] bridge_slave_1 (unregistering): left promiscuous mode [ 249.518065][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.624325][T11594] netlink: 'syz.6.2024': attribute type 1 has an invalid length. [ 249.624356][T11594] netlink: 'syz.6.2024': attribute type 2 has an invalid length. [ 249.921425][T11597] loop6: detected capacity change from 0 to 4096 [ 249.926491][T11597] EXT4-fs: test_dummy_encryption option not supported [ 250.257032][ T29] audit: type=1400 audit(1789914770.541:3978): avc: denied { write } for pid=11599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.337597][ T29] audit: type=1400 audit(1789914770.621:3979): avc: denied { write } for pid=11623 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.398176][T11624] netlink: 'syz.3.2030': attribute type 10 has an invalid length. [ 250.398199][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'. [ 250.398220][T11624] bond0: option arp_all_targets: invalid value (16) [ 250.523509][T11633] FAULT_INJECTION: forcing a failure. [ 250.523509][T11633] name failslab, interval 1, probability 0, space 0, times 0 [ 250.523547][T11633] CPU: 1 UID: 0 PID: 11633 Comm: syz.6.2033 Not tainted syzkaller #0 PREEMPT(lazy) [ 250.523603][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.523618][T11633] Call Trace: [ 250.523626][T11633] [ 250.523635][T11633] __dump_stack+0x1d/0x30 [ 250.523667][T11633] dump_stack_lvl+0x95/0xd0 [ 250.523693][T11633] dump_stack+0x15/0x1b [ 250.523732][T11633] should_fail_ex+0x262/0x280 [ 250.523781][T11633] ? __alloc_skb+0x2e0/0x6f0 [ 250.523815][T11633] should_failslab+0x8c/0xb0 [ 250.523880][T11633] kmem_cache_alloc_node_noprof+0x82/0x400 [ 250.523912][T11633] ? format_decode+0xaf/0x560 [ 250.523940][T11633] ? __alloc_skb+0x2e0/0x6f0 [ 250.524097][T11633] __alloc_skb+0x2e0/0x6f0 [ 250.524131][T11633] ? __alloc_skb+0x209/0x6f0 [ 250.524192][T11633] send_monitor_note+0x9f/0x3b0 [ 250.524224][T11633] hci_sock_bind+0x4c7/0x9a0 [ 250.524258][T11633] __sys_bind+0x1d0/0x290 [ 250.524312][T11633] __x64_sys_bind+0x3f/0x50 [ 250.524342][T11633] x64_sys_call+0x1ac7/0x2550 [ 250.524371][T11633] do_syscall_64+0x112/0x360 [ 250.524468][T11633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.524491][T11633] RIP: 0033:0x7feb7bace159 [ 250.524510][T11633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.524610][T11633] RSP: 002b:00007feb7a527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 250.524634][T11633] RAX: ffffffffffffffda RBX: 00007feb7bd55fa0 RCX: 00007feb7bace159 [ 250.524649][T11633] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000005 [ 250.524664][T11633] RBP: 00007feb7a527090 R08: 0000000000000000 R09: 0000000000000000 [ 250.524684][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.524698][T11633] R13: 00007feb7bd56038 R14: 00007feb7bd55fa0 R15: 00007fff250e0928 [ 250.524796][T11633] [ 250.772686][T11649] netlink: 'syz.1.2038': attribute type 10 has an invalid length. [ 250.800394][T11649] team0: Port device wg2 added [ 250.813581][T11653] loop3: detected capacity change from 0 to 512 [ 250.846644][T11653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.846725][T11653] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.950741][T11668] netlink: 'syz.6.2043': attribute type 2 has an invalid length. [ 251.050214][T11679] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 251.303347][T10778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.557080][ T29] audit: type=1400 audit(1789914771.841:3980): avc: denied { write } for pid=11635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.656777][T11666] veth0_vlan: left promiscuous mode [ 251.679149][T11696] loop8: detected capacity change from 0 to 512 [ 251.691489][ T29] audit: type=1400 audit(1789914771.971:3981): avc: denied { write } for pid=11697 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.715301][T11696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.715415][T11696] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.853836][ T8441] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.900166][ T5437] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.900205][ T5437] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.905828][T11694] loop3: detected capacity change from 0 to 512 [ 251.909888][ T5434] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.909925][ T5434] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.910024][ T5434] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.910053][ T5434] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.910086][ T5434] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.910160][ T5434] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.984526][T11694] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.2046: inode has both inline data and extents flags [ 251.989561][T11694] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2046: couldn't read orphan inode 15 (err -117) [ 251.989592][T11694] loop3: lost filesystem error report for type 5 error -117 [ 251.994019][T11694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.025368][T11698] syzkaller0: entered promiscuous mode [ 252.025390][T11698] syzkaller0: entered allmulticast mode [ 252.045326][ T29] audit: type=1400 audit(1789914772.321:3982): avc: denied { write } for pid=11693 comm="syz.3.2046" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.080761][T11730] FAULT_INJECTION: forcing a failure. [ 252.080761][T11730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.080792][T11730] CPU: 0 UID: 0 PID: 11730 Comm: syz.8.2053 Not tainted syzkaller #0 PREEMPT(lazy) [ 252.080876][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.080888][T11730] Call Trace: [ 252.080894][T11730] [ 252.080901][T11730] __dump_stack+0x1d/0x30 [ 252.080926][T11730] dump_stack_lvl+0x95/0xd0 [ 252.080948][T11730] dump_stack+0x15/0x1b [ 252.080991][T11730] should_fail_ex+0x262/0x280 [ 252.081020][T11730] should_fail+0xb/0x20 [ 252.081039][T11730] should_fail_usercopy+0x1a/0x20 [ 252.081068][T11730] _copy_from_user+0x1c/0xb0 [ 252.081150][T11730] do_ip_setsockopt+0x373/0x22f0 [ 252.081177][T11730] ip_setsockopt+0x58/0x110 [ 252.081197][T11730] tcp_setsockopt+0x98/0xb0 [ 252.081221][T11730] sock_common_setsockopt+0x69/0x80 [ 252.081366][T11730] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 252.081412][T11730] __sys_setsockopt+0x184/0x200 [ 252.081435][T11730] __x64_sys_setsockopt+0x64/0x80 [ 252.081457][T11730] x64_sys_call+0x248f/0x2550 [ 252.081561][T11730] do_syscall_64+0x112/0x360 [ 252.081673][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.081699][T11730] RIP: 0033:0x7f5c6c9de159 [ 252.081790][T11730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.081816][T11730] RSP: 002b:00007f5c6b437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 252.081842][T11730] RAX: ffffffffffffffda RBX: 00007f5c6cc65fa0 RCX: 00007f5c6c9de159 [ 252.081895][T11730] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000004 [ 252.081910][T11730] RBP: 00007f5c6b437090 R08: 0000000000000003 R09: 0000000000000000 [ 252.081926][T11730] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.081942][T11730] R13: 00007f5c6cc66038 R14: 00007f5c6cc65fa0 R15: 00007ffc4a251ba8 [ 252.081965][T11730] [ 252.274757][T11738] team_slave_1: entered allmulticast mode [ 252.274833][T11738] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 252.277565][ T29] audit: type=1400 audit(1789914772.570:3983): avc: denied { mounton } for pid=11737 comm="syz.6.2059" path="/260/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 252.377814][T11749] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 252.379209][T11749] loop1: detected capacity change from 0 to 128 [ 252.465767][T11759] loop8: detected capacity change from 0 to 512 [ 252.485422][T11759] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.485493][T11759] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.495608][T11758] Cannot find del_set index 4 as target [ 252.521242][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 252.521260][ T29] audit: type=1400 audit(1789914772.810:3985): avc: denied { write } for pid=11761 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.597020][T10778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.640968][T11778] syzkaller0: entered promiscuous mode [ 252.641070][T11778] syzkaller0: entered allmulticast mode [ 252.671488][ T8441] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.692454][T11778] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2066'. [ 252.860492][ T29] audit: type=1400 audit(1789914773.150:3986): avc: denied { write } for pid=11775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.970988][ T29] audit: type=1400 audit(1789914773.260:3987): avc: denied { write } for pid=11808 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.077229][T11811] loop9: detected capacity change from 0 to 1024 [ 253.089291][T11811] EXT4-fs (loop9): Couldn't mount because of unsupported optional features (800000) [ 253.166952][ T29] audit: type=1400 audit(1789914773.450:3988): avc: denied { write } for pid=11819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.219352][ T29] audit: type=1400 audit(1789914773.500:3989): avc: denied { write } for pid=11835 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.245178][T11837] loop6: detected capacity change from 0 to 512 [ 253.261924][T11837] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 253.261951][T11837] loop6: lost filesystem error report for type 5 error -117 [ 253.265804][T11837] EXT4-fs (loop6): 2 truncates cleaned up [ 253.266304][T11837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.325110][T11844] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.325128][T11844] block device autoloading is deprecated and will be removed. [ 253.354410][ T29] audit: type=1400 audit(1789914773.640:3990): avc: denied { create } for pid=11841 comm="syz.3.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 253.399582][T11843] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.399673][T11843] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.412525][T11836] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2078'. [ 253.424787][ T313] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.488030][T11860] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 253.488193][T11860] EXT4-fs (loop3): orphan cleanup on readonly fs [ 253.490468][T11860] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 253.490512][T11860] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 253.495639][T11860] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 253.504159][T11860] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.2080: bg 0: block 15: invalid block bitmap [ 253.504297][T11860] loop3: lost filesystem error report for type 5 error -117 [ 253.506331][T11860] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 253.506371][T11860] loop3: lost filesystem error report for type 5 error -117 [ 253.508409][T11860] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #16: comm syz.3.2080: data will be lost [ 253.508572][T11860] EXT4-fs (loop3): 1 truncate cleaned up [ 253.508975][T11860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.538339][ T29] audit: type=1400 audit(1789914773.820:3991): avc: denied { load_policy } for pid=11841 comm="syz.3.2080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 253.556348][T11860] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 253.556415][T11860] SELinux: failed to load policy [ 253.579222][T11844] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #16: comm syz.3.2080: corrupted xattr block 31: invalid header [ 253.579780][T11844] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 253.672506][ T29] audit: type=1400 audit(1789914773.960:3992): avc: denied { write } for pid=11849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.741430][ T29] audit: type=1400 audit(1789914774.020:3993): avc: denied { write } for pid=11865 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.779871][T10153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.820570][T10778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.867705][T11873] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2082'. [ 253.880935][ T6469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.934148][ T5434] IPVS: starting estimator thread 0... [ 254.021133][T11881] IPVS: using max 2640 ests per chain, 132000 per kthread [ 254.041679][T11885] set_capacity_and_notify: 2 callbacks suppressed [ 254.041710][T11885] loop9: detected capacity change from 0 to 512 [ 254.046825][T11885] EXT4-fs warning (device loop9): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 254.191446][T11893] batman_adv: batadv0: Adding interface: syzkaller0 [ 254.191465][T11893] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.191523][T11893] batman_adv: batadv0: Interface activated: syzkaller0 [ 254.287078][T11907] loop9: detected capacity change from 0 to 512 [ 254.305524][T11907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.305675][T11907] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.385043][T10153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.572699][T11921] loop9: detected capacity change from 0 to 2048 [ 254.578940][T11927] 9p: Bad value for 'rfdno' [ 254.603339][T11921] loop9: p2 p3 < > p4 < p5 > [ 254.603388][T11921] loop9: partition table partially beyond EOD, truncated [ 254.603964][T11921] loop9: p3 start 4284289 is beyond EOD, truncated [ 254.609070][ T2982] loop9: p2 p3 < > p4 < p5 > [ 254.609082][ T2982] loop9: partition table partially beyond EOD, truncated [ 254.609754][ T2982] loop9: p3 start 4284289 is beyond EOD, truncated [ 254.685964][T11921] vcan0: tx address claim with dlc 0 [ 254.806559][T11890] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 254.808986][T11890] batman_adv: batadv0: Removing interface: syzkaller0 [ 254.841834][T11939] loop3: detected capacity change from 0 to 1024 [ 254.842947][T11939] EXT4-fs: Ignoring removed nobh option [ 254.843067][T11939] EXT4-fs: Ignoring removed oldalloc option [ 254.843103][T11939] EXT4-fs: Ignoring removed oldalloc option [ 254.845668][T11939] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 254.858075][T11941] FAULT_INJECTION: forcing a failure. [ 254.858075][T11941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.858111][T11941] CPU: 0 UID: 0 PID: 11941 Comm: syz.9.2102 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.858137][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.858149][T11941] Call Trace: [ 254.858157][T11941] [ 254.858218][T11941] __dump_stack+0x1d/0x30 [ 254.858242][T11941] dump_stack_lvl+0x95/0xd0 [ 254.858315][T11941] dump_stack+0x15/0x1b [ 254.858336][T11941] should_fail_ex+0x262/0x280 [ 254.858377][T11941] should_fail+0xb/0x20 [ 254.858461][T11941] should_fail_usercopy+0x1a/0x20 [ 254.858487][T11941] _copy_from_user+0x1c/0xb0 [ 254.858514][T11941] ___sys_sendmsg+0xc1/0x1e0 [ 254.858614][T11941] __x64_sys_sendmsg+0xd4/0x160 [ 254.858647][T11941] x64_sys_call+0x22ab/0x2550 [ 254.858748][T11941] do_syscall_64+0x112/0x360 [ 254.858782][T11941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.858806][T11941] RIP: 0033:0x7f3cbb7fe159 [ 254.858823][T11941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.858914][T11941] RSP: 002b:00007f3cba257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.858937][T11941] RAX: ffffffffffffffda RBX: 00007f3cbba85fa0 RCX: 00007f3cbb7fe159 [ 254.858952][T11941] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000003 [ 254.859004][T11941] RBP: 00007f3cba257090 R08: 0000000000000000 R09: 0000000000000000 [ 254.859025][T11941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.859038][T11941] R13: 00007f3cbba86038 R14: 00007f3cbba85fa0 R15: 00007ffc4a416fc8 [ 254.859058][T11941] [ 254.861668][T11939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.070763][T11951] loop6: detected capacity change from 0 to 512 [ 255.097245][T11951] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.097369][T11951] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.195729][ T6469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.481295][T11970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=11970 comm=syz.6.2112 [ 255.481330][T11970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=11970 comm=syz.6.2112 [ 255.481354][T11970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=11970 comm=syz.6.2112 [ 255.481379][T11970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11970 comm=syz.6.2112 [ 255.692547][T11986] loop8: detected capacity change from 0 to 128 [ 255.710554][T11986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 255.710593][T11986] System zones: 1-3, 19-19, 35-36 [ 255.711440][T11986] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 255.719997][T11986] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.859514][T11993] loop6: detected capacity change from 0 to 2048 [ 255.878122][T11993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.920279][ T6469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.920706][ T8441] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.980597][T10778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.157512][T12019] loop9: detected capacity change from 0 to 128 [ 256.172164][T12019] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.174240][T12019] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.189698][T12019] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2125'. [ 256.218903][T12022] syzkaller0: entered promiscuous mode [ 256.218927][T12022] syzkaller0: entered allmulticast mode [ 256.278870][T10153] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.711891][T12089] bridge_slave_0: default FDB implementation only supports local addresses [ 256.754485][T12089] bridge_slave_0: default FDB implementation only supports local addresses [ 256.921574][T12105] syzkaller0: entered promiscuous mode [ 256.921645][T12105] syzkaller0: entered allmulticast mode [ 257.124629][T12113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.124815][T12113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.189124][T12147] syzkaller0: entered promiscuous mode [ 258.189148][T12147] syzkaller0: entered allmulticast mode [ 258.320936][T12158] ip_tables: iptables: counters copy to user failed while replacing table [ 258.322150][T12158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2153'. [ 258.399726][T12163] loop6: detected capacity change from 0 to 128 [ 258.612708][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 258.612727][ T29] audit: type=1400 audit(1789914778.897:4068): avc: denied { ioctl } for pid=12174 comm="syz.6.2160" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 258.832848][T12182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.832936][T12182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.470295][T12199] loop1: detected capacity change from 0 to 256 [ 259.605982][ T29] audit: type=1326 audit(1789914779.887:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12218 comm="syz.3.2173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 259.606090][ T29] audit: type=1326 audit(1789914779.887:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12218 comm="syz.3.2173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 259.606122][ T29] audit: type=1326 audit(1789914779.887:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12218 comm="syz.3.2173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 259.606181][T12220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2173'. [ 259.606153][ T29] audit: type=1326 audit(1789914779.887:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12218 comm="syz.3.2173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 259.606264][ T29] audit: type=1326 audit(1789914779.887:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12218 comm="syz.3.2173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 259.606290][ T29] audit: type=1326 audit(1789914779.887:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12218 comm="syz.3.2173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 259.606319][ T29] audit: type=1326 audit(1789914779.887:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12218 comm="syz.3.2173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 259.606454][ T29] audit: type=1326 audit(1789914779.887:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12218 comm="syz.3.2173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 259.606529][ T29] audit: type=1326 audit(1789914779.887:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12218 comm="syz.3.2173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff723cae159 code=0x7ffc0000 [ 260.092668][T12199] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.196382][T12238] loop9: detected capacity change from 0 to 256 [ 260.212989][T12199] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 260.216959][T12199] FAT-fs (loop1): Filesystem has been set read-only [ 260.296440][T12245] netlink: 'syz.6.2179': attribute type 63 has an invalid length. [ 260.296546][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2179'. [ 260.685122][T12264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.695986][T12264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.716066][T12269] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2187'. [ 261.101508][T12275] usb usb8: check_ctrlrecip: process 12275 (syz.8.2189) requesting ep 01 but needs 81 [ 261.121041][T12275] usb usb8: usbfs: process 12275 (syz.8.2189) did not claim interface 0 before use [ 262.090197][T12297] loop1: detected capacity change from 0 to 764 [ 262.119557][T12297] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 262.188288][T12305] ip_tables: iptables: counters copy to user failed while replacing table [ 262.303961][T12305] syzkaller1: entered promiscuous mode [ 262.303986][T12305] syzkaller1: entered allmulticast mode [ 262.458170][T12314] loop9: detected capacity change from 0 to 1024 [ 262.463037][T12314] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 262.464074][T12314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 262.464110][T12314] System zones: 0-1, 3-36 [ 262.497131][T12314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.510775][T12305] loop8: detected capacity change from 0 to 512 [ 262.512967][T12305] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 262.541837][T12305] EXT4-fs (loop8): 1 truncate cleaned up [ 262.542264][T12305] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.648513][T10153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.863343][T12330] loop1: detected capacity change from 0 to 164 [ 262.957498][ T8441] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.961197][T12330] syzkaller0: entered promiscuous mode [ 262.961220][T12330] syzkaller0: entered allmulticast mode [ 263.093188][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.093320][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.603421][T12340] hub 1-0:1.0: USB hub found [ 263.617986][T12340] hub 1-0:1.0: 8 ports detected [ 263.754583][T12345] loop1: detected capacity change from 0 to 512 [ 264.210376][T12366] loop6: detected capacity change from 0 to 4096 [ 264.324252][ T29] kauditd_printk_skb: 1606 callbacks suppressed [ 264.324272][ T29] audit: type=1400 audit(1789914784.604:5684): avc: denied { read write } for pid=12368 comm="syz.6.2219" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.324301][ T29] audit: type=1400 audit(1789914784.604:5685): avc: denied { open } for pid=12368 comm="syz.6.2219" path="/302/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.391218][ T29] audit: type=1400 audit(1789914784.674:5686): avc: denied { ioctl } for pid=12368 comm="syz.6.2219" path="/302/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.521239][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2220'. [ 264.690558][ T29] audit: type=1400 audit(1789914784.974:5687): avc: denied { execute_no_trans } for pid=12381 comm="syz.6.2224" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A92506202864656C6574656429 dev="hugetlbfs" ino=37535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 264.720884][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2225'. [ 264.974629][T12390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.974711][T12390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.998809][T12395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.999029][T12395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.102555][T12405] loop8: detected capacity change from 0 to 512 [ 265.114288][T12405] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.114359][T12405] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.114989][ T29] audit: type=1326 audit(1789914785.384:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.8.2232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6c9de159 code=0x7ffc0000 [ 265.115136][ T29] audit: type=1326 audit(1789914785.384:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.8.2232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6c9de159 code=0x7ffc0000 [ 265.115166][ T29] audit: type=1326 audit(1789914785.384:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.8.2232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6c9de159 code=0x7ffc0000 [ 265.115194][ T29] audit: type=1326 audit(1789914785.384:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.8.2232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5c6c9de159 code=0x7ffc0000 [ 265.115250][ T29] audit: type=1326 audit(1789914785.384:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.8.2232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c6c9ddec2 code=0x7ffc0000 [ 265.115281][ T29] audit: type=1326 audit(1789914785.384:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.8.2232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c6c99e98e code=0x7ffc0000 [ 265.458346][T12405] 9p: Bad value for 'wfdno' [ 265.582752][T12419] can0: slcan on ptm0. [ 265.606144][T12417] can0 (unregistered): slcan off ptm0. [ 265.651043][ T8441] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.786850][T12430] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2239'. [ 265.932794][T12438] loop9: detected capacity change from 0 to 512 [ 265.949261][T12437] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2241'. [ 265.953061][T12438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.991449][T12448] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 265.991449][T12448] program syz.8.2241 not setting count and/or reply_len properly [ 266.017690][T10153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.022153][T12448] loop8: detected capacity change from 0 to 164 [ 266.022616][T12448] iso9660: Unknown parameter '6' [ 266.125465][T12437] netlink: 'syz.8.2241': attribute type 8 has an invalid length. [ 266.142839][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2241'. [ 266.167401][T12448] 9p: Bad value for 'rq' [ 266.193343][T12455] loop9: detected capacity change from 0 to 512 [ 266.196045][T12455] EXT4-fs: Ignoring removed i_version option [ 266.215065][T12455] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 266.218537][T12455] EXT4-fs (loop9): 1 truncate cleaned up [ 266.219417][T12455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.411989][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2248'. [ 266.479422][T12464] syz_tun: entered promiscuous mode [ 266.479480][T12464] macvlan2: entered allmulticast mode [ 266.523074][T10153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.549318][T12468] ================================================================== [ 266.549358][T12468] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 266.549399][T12468] [ 266.549407][T12468] write to 0xffff88811b963308 of 8 bytes by task 12465 on cpu 0: [ 266.549424][T12468] mas_wr_store_entry+0x3370/0x5ac0 [ 266.549467][T12468] mas_store_prealloc+0x421/0x670 [ 266.549500][T12468] commit_merge+0x7b4/0x840 [ 266.549521][T12468] vma_expand+0x2d4/0x440 [ 266.549542][T12468] vma_merge_new_range+0x285/0x2f0 [ 266.549560][T12468] mmap_region+0x10f4/0x21e0 [ 266.549582][T12468] do_mmap+0xa20/0xc70 [ 266.549607][T12468] vm_mmap_pgoff+0x183/0x2d0 [ 266.549630][T12468] ksys_mmap_pgoff+0xc1/0x310 [ 266.549662][T12468] x64_sys_call+0x23b3/0x2550 [ 266.549688][T12468] do_syscall_64+0x112/0x360 [ 266.549721][T12468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.549745][T12468] [ 266.549752][T12468] read to 0xffff88811b963308 of 8 bytes by task 12468 on cpu 1: [ 266.549771][T12468] mtree_range_walk+0x1aa/0x480 [ 266.549793][T12468] mas_walk+0x1ac/0x340 [ 266.549819][T12468] lock_vma_under_rcu+0xc9/0x210 [ 266.549842][T12468] do_user_addr_fault+0x239/0x1060 [ 266.549874][T12468] exc_page_fault+0x62/0xa0 [ 266.549903][T12468] asm_exc_page_fault+0x26/0x30 [ 266.549945][T12468] [ 266.549950][T12468] value changed: 0x00007f3cba1f4fff -> 0x00007f3cba1d3fff [ 266.549965][T12468] [ 266.549969][T12468] Reported by Kernel Concurrency Sanitizer on: [ 266.549981][T12468] CPU: 1 UID: 0 PID: 12468 Comm: syz.9.2249 Not tainted syzkaller #0 PREEMPT(lazy) [ 266.550008][T12468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.550021][T12468] ==================================================================