last executing test programs: 6m47.252451225s ago: executing program 32 (id=259): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000540)={[{@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@resgid}, {@abort}, {@user_xattr}, {@discard}, {@stripe}]}, 0x9, 0x624, &(0x7f0000001340)="$eJzs3ctvVNUfAPDvvZ0+aH8/W4hB2UgTYyBRWlrAEGMixC0h+Ni5qrQQpFBCa7RIQklwozFuXJi4ciH+F0ri1oVbF25cGEPSGMNCDMqYO71TZjqddvqYmT4+n+S299G553vbfHvOnDnn3gB2rcHsSxpxICKuJRH9FccKkR8cXPi5B3/ePJ8tSRSLb/2RxM1byVzluZL8e1/+4n/7I/kpjdjXUVvu9OyNy2OTkxPX8+3hmSvXhqdnbxy5dGXs4sTFiaujL4+ePHH8xMmRoxu6vkLF+pk7733Q/8nZd7756lEy8u0vZ5M4FY/z2LLrWvra7g2VnP3OBqO44OGTvWnp68kNnnur+Ku/+necSZbuYMu6EBH7I6IzIp6J/uio+Gv2x8dvtDU4oKmKSZTrKGDXSVbP/87aXT3NCQZooXI7oPzefrn3wbXSJrdKgFaYP73QSbaQ+50RUc7/wkLfYPSU+gZ6HyRV/TxJRGysZ25BVsaPP5y9ky1Rpx8OaI652+Ve7qX1f1LKzYHoKW31Pkir8j+tWLL9b66z/MEl2/IfWmfudkQ8m9f/XbHu/H93neXLfwAAAAAAANg8905HxEvLjf9LF8f/dC0z/qcvIk5tQvmrf/6X3s9Xkk0oDqgwfzri1Zrxv/9Ujg4e6Mg/5/9/aTxAZ3rh0uTE0Yh4KiIOR2d3tj1SfdqqAcJHPtv3Zb3yK8f/ZUtWfnksYH6q+4UlE3HHx2bGNufqYXebvx3xsDT+92C+p3r8T1b/JzX1/6evZwl+rcEy9r1w91zVjt+e/HtYPf+BZil+HXFo2fk/T5rbycr35xgutQeGy62CWs999Pl39cqX/9A+Wf3fu3L+dyeV9+uZXtv5uyLi2GyhWO/4etv/XcnbHeXzZz4cm5m5PhLRlZyp3T+6tphhpyrnQzlfsvw//PzK/X+L7f+KPNwTEXMNlrn/cd+v9Y6p/6F9svwfX7n+H6iu/9e60hOjdwe+z28xVuNcQ/X/8VKdfjjfo/8PKtXej6PRBG1LuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwzaUR8b9I0qHF9TQdGoroi4inozednJqeefHC1PtXx7Nj1c//71/YTsrP/x+o2B5dsn0sIvZGxBcde0rbQ+enJsfbffEAAAAAAAAAAAAAAAAAAACwRfSV5vwXu5fO/8/83tHu6ICmK+Tf5TvsPoV1v7LYvamBAC23/vwHtrvG87+zqXEArVc//x8+Kpa0NByghbT/YfdaZ/77uAB2APU/7FYN9un1NDsOoB0arv/nmxsHAAAAAACwKfYevPdzEhFzr+wpLZmu/JjB/rCzpe0OAGgbY3hh9ypMtTsCoF28xweSxbW/l53sX3/0f9KcgAAAAAAAAAAAAACAGocOrH3+/5xJg7AjpBErPMLb2H7YyVaoypdLfjU/7CD1H/3RSN2faCHANmb+P7BaPb7x+f/FW2sKCAAAAAAAAAAAAACo1XPj8tjk5MT16dntt/La1ghjbStzY1sijE1debzaz5QfM7+2M3dGxNa4wFavlG/B0cYw2vg/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqPJfAAAA//8MwS/R") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x3, 0xfffffffffffffdbf}, 0x1082a2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) socket$inet(0x2, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141142, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) (fail_nth: 1) 6m33.346003055s ago: executing program 33 (id=348): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000540)={[{@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@resgid}, {@abort}, {@user_xattr}, {@discard}, {@stripe}]}, 0x9, 0x624, &(0x7f0000001340)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x3, 0xfffffffffffffdbf}, 0x1082a2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) socket$inet(0x2, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141142, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7fffffff) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) (fail_nth: 1) 6m22.767376728s ago: executing program 34 (id=408): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) 6m5.590442718s ago: executing program 35 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 5m44.889459335s ago: executing program 6 (id=796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) readahead(r3, 0x1, 0x5000000000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x360, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000040)}], 0x1) socket$inet6(0xa, 0x80002, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 5m44.839451822s ago: executing program 36 (id=796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) readahead(r3, 0x1, 0x5000000000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x360, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000040)}], 0x1) socket$inet6(0xa, 0x80002, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 5m41.9147139s ago: executing program 37 (id=817): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x50b, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c050) 4m11.796062871s ago: executing program 38 (id=1567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x6, 0x7}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setrlimit(0x1, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x40000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000380)=[{0x2, 0x5, 0x8, 0x7ffc0001}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040840) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) 4m6.034965773s ago: executing program 39 (id=1618): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m4.591471499s ago: executing program 40 (id=1630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r4) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000997000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000713000/0x4000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r5, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3m33.96795944s ago: executing program 41 (id=1827): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x100022, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c046, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x20000, 0x28000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x54}}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) 3m33.858974957s ago: executing program 5 (id=1929): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$nl_audit(0x10, 0x3, 0x9) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x9, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010280)) 3m33.818523353s ago: executing program 5 (id=1930): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={r0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@mblk_io_submit}, {@block_validity}, {@errors_remount}, {@nogrpid}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}]}, 0x1, 0x5be, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 3m33.619532742s ago: executing program 5 (id=1931): syz_open_dev$usbfs(0x0, 0x77, 0x101341) socket$pppl2tp(0x18, 0x1, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x8ac83) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x7fc, {0x2a00, 0x80010000, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xa, 0x19, 0x57636ba87e93edb2, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c3d12406c7f00", [0x80, 0x40000000000000]}}) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x44048894) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000000)=0x7, 0x4) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_emit_ethernet(0x22, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffea, 0x0, 0x6c, 0x0, @remote, @local}}}}}, 0x0) ftruncate(0xffffffffffffffff, 0x8002) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x5c, "f1d11f712f0f8a70101e595ab2da3301ed4bd28ed8058641a041141f9edb6d6faba24a82c0c0a0accb671245a9d44482829f39c3fca0f52ec1eb3e6008b1db60f5c3bfb828c0f2a53748a521240bc3ce620ba93f9ad8bf90f354206b"}, &(0x7f0000000f00)=0x64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x20}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x600}}}}}}}}, 0x0) 3m33.278025324s ago: executing program 5 (id=1935): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x10000, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x10000, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0xf}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000001, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r5, &(0x7f0000000300), 0x6, 0x3b00, 0x0, 0xfffffffffffffdfd) 3m32.319791017s ago: executing program 0 (id=1941): sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x81) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) setns(0xc9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100), 0x28000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) syz_emit_ethernet(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x100000 size=0x100000 type=write-combining\n', 0x31) 3m31.917730567s ago: executing program 0 (id=1944): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x185301, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0280feff040400001400003f54e8db589b7af700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffff31) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) unshare(0x20040400) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r3) 3m31.710722898s ago: executing program 5 (id=1945): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m31.576508318s ago: executing program 5 (id=1946): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="670000001000050700000086d7c0d6c878f0", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="f37c9432443fc9c9f3bc2850927531a5ebc0272ba9dff28df86344a6d9460be3a2fec775f574a301aca82309e2ddd7b5af6b285f02de6d7028b351f9e1c9e71c208f40fa440b830eca58830ab1ed3103c0d29abaae98a01da6f04e8a6d06ffbb4b8f", 0x62, 0xfffffffffffffffb) syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x48000) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xe}, 0x11693d, 0x8, 0x11000, 0x1, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80000, 0xd) 3m31.224738011s ago: executing program 0 (id=1948): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1223, 0x0, 0x0, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) listen(r3, 0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000019c0)={0x0, 0x1b, "9a4c691f63d9affb2cf7786458d38ce2968e72ca9741dd06cc85d6"}, &(0x7f0000001a00)=0x23) sendmsg$inet_sctp(r2, &(0x7f0000001b40)={&(0x7f0000000080)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000240)="2dcd22381b5ca5d3ac85c3dcb6edb7f7727aa53590afd0ab380623a03c9e687c77343980eab917d0d3c7366db49eeb463b95c05df107bbf1e2d23a2e16b9c8595773506bb73a9c36d80c3e51c3a328849bb76477b5b4a7724619c279d63f1fbda92a76cdc29566da0dc4a29f85c745be137a105e9a2739f562cb1b323705aa0c758c7b84c2720b9c1243be6ad0", 0x8d}, {&(0x7f0000000780)="f8fa4851812cd22b6febd6986333b693798d67207d0ccc26db1c461d8fc6690457c825687eb6731f4d425ec91fc99d5f568042f8d15f05e461821fc61b6c6ece1d609b7571bcf5882b20ed44509f157a2fc516166d9ddc483faf84dbddd212611e0aec648fc38a85e85af9108b3ccfdd3308f1c0ab4a7c0d40776a7e8db0023e4ee34e278fcafeab0ae4ea56cb4269b5f1beeab4f8e1e683863e2b0bfe489fa298b5e2e5f7e59cb6d04c7a0307717fe678c3a96d0bcb09ddc5b29a27ac46d08a06b27cedc062d925a2b645000f1c2920f1e16e880e530d5335ee5773ef5c74c6f647c658b11c71b1bfe5e81271a4f11974015549cae7f6cf81609cd3bb8ac21af49e81bf61183ea04899a03a9cd3f679888fb3b2aa7acbc126307d165080d95cd268a4a20e4741ed750916cf57071cfc14f71267256608cd51743f8c2961abb39663c4a8404aea135e94e02049e02c52fe0e53b5d3d475014f4267c0978888c1dda9e1e99ed21a78c49c4dedfffa9cb5ff9c0d1cbddc79a669e6adbac62b9934960df215196b711cc84e8c9b38998bf13fcf9751b8fa3edb97112f154f91e939b8a8322372ef42aab9be04ba95195e6ec6a92a13d7bf72067c6408bb887ca1c7444586abd8f7e0ed84fd43c8f4ce7eece6ab852972843f8f1359aeb87ab452bacfc18ca78e31f449f29e6bcfa728dc5f7f0e18991fe88a2650ab2c23a83202e22030f2371c05160d8949b9f4460bf5795490d559cc9f690243701e3bf2004bab2d3001facb6df3a20145ed2641c64e9bf23942b167b1e6c6b5bbc829496766b6234dec753340983fd2fb80b519a4e66d25a100d7ecfeb5ba30822620f154ed254c475fd4e1a500e5ed26dacaf44d1c024f44ca5ef66af8f6940bb9ddb369fff47d25048cd331fbc6e9c7afcd84638af0b4d906c4741e50d39fe715a808a668a851db44090dad826afb85557fb5640b18ffcebea0c14f3781593e99e28da77b7d78b30dbad661445b60767494f75859d5cf360532f554042065ef7cd179f70ccdcf35d315f371304973fdb079fbe36a4478b975848874b57a881da9691746cb741462f30f7fbb9f5a72cbae349527187ba6c99dfe0326e3dcbf2371653a1795fc2cd17d95bca5c50bb989712d571b203c8d9cb8104ed9c0299059b9dd83b58c44e3b891f4ced863a5ac9dcd3ace3b81dbb77897b75d290f1aa06fce3c3fdbbeda0ca76161ef2b9efd54d0bcc2f4e7ce76b400f90a4ead6727156a3c2a4bceaaef6af3e7d8a537586effaada11e4d06513eb908c29f2dbfe4d3b2854d82e2f1721537982460f5e32ae6880085f8934f967b6a59017dd83afd2ac6246ec083e26e8c2e0b85d73dbc7fc1da72b99dc2a5c7a1986d0cb964f08ae410e313bbf918cf0e2c24b1f9d6671cc6ff18bb46b04e94c9d66868b0f324cc75ba213ff0be41d22ecabdde874cb1f6f398cd83e8276b5921e3f75cacff1c11cbe7b8636b036ef5dc02d7575f5e31367da03ec6533b9037ca7b1faf01afc34d8656742ebe2aad5f0fe194346424322b2c7fb29600560140c52fb52b0dc58feb351d8c1756cd11da20baab0b3bc73379864596315473555136ae1012d01582de26e720caec34093fca6b6fbc578414f686c03917df1996a9d28aca54e8a8bfd0d29c8d424794b868960d805bf6a8b1bd048bbdd6d7d159d3cc354506e45c41963318ea0f9b4765a45ae167972bdde689cf9872d3b3a2540752c8c3faec76bd15c07d784df03db1eda9f1e12a3fc9116f175f0dbb59f4a8141c9e987bf3eed3a11b3849a935bd3ac3b27e16f9338929c484cb122c86316fd1df1ab4b9e38ac4c78add36f65e6fef42d452cf94c2b144c2292330f7e8e0a0bbf93c65f6acaf904785756d5655d4087d3b17bc6ee614a46a8d515e13dcf4cef4ea9749eccbbf7beaad0706541a7d0d5296f460bd26b7bb2717eff0d569d854cc46ca9a8b3d99f50f7bcd5bf9e2ddd3181e5e877bdd2c664e66cdf9f63cae47d20985ec7499e386ae0c226e114337ede4d56b9a07326ed31aaabf602a35ffb263e01f78f62e97aa6bb3f17f81d493bf0a9e324b64099e3c26d34ed5195e182ec0e46a820c72024057e0736b17809e514aa681465e5e620d9d107e2e969af68ee0a6a2c48057ffbdf511acac90ae4b66bd5bb4b30961e719ca291bce323c8543a62e0b8f94d17e86448aa929e2b0689ffbffda908be7a00a96a20d96d4b8f43790eb415f88f9c33c28e30c46ecf0f1bfaee81dee5fdd13cc6736ae20a4069468d24393706d520ae11a14be815ec22ec6fdbf9875d1397da67f737a8afe8b75c62f368e410dac42d9771ec0535be8d8ce30cf1e11f9d97ed072afaa93bf3573059d933dfd891ba079fc94eaecb810e9fd47b3adba5098cc1eb32dbeb86e775488b3149a8697ccb25a182826d6c6f747d9d32e9b2ab4cd620120a15a32d40529f4f5b8be451b899c7c630e0409c14d5747e92c5416e9909708d728299b4a31273823c560d62ef71e32e0399dc0663b436f14fe270ebb2909acb270df738462082f32e290cb9755b38d4cd3032b59899229ae978592bb72b7f845dd0d8cdd85147fe2b4b3d58d02a4b5cb042a4b97026ae1d182cc6b9f521b324387f0c790e19905cc3d8099e23eb0b4d7af7047566141681b406a9cb3f68bdf65e526db178031f0a6087452595bfe35314cba60d95e6ac8aa82061313cef104f2aa4fc83c3c8994c77d2514be9979b665e80d00e9833de040b54facd3adc00af74df30ec9acefdee7ef0d9a860014b6cbca3412c2eb74a71fa77547bd5f87e961f8190c309f5c0410adb916584ec2718cfdfd4415a1d8321344403a2247efdae32107fa466f8529517f18c8a0dd27450509863ade722f0c1d8f6f78089dda38ed9f99b80665edb74f34772d3d52c37560b3f05158282112cd652df4c53581ea509bb82c7961a8631e09199214cdc30fd8c938150d7be65f16740b1223ef1041d64932b0e68d915b8884575cc39f000043e0248175ec48565180f089fbd9488adde36db283dba4f78626dfff6e227cc06a1f1f099b80202de080a90039f96684d73ee38f29cd95fba3ebe19f1cd6fb19f80ee12cb92dec288ce56b74f1d265d0fd0408b1078dfc0023e435ad0eee9eea1fb5df41d0e873ed9e8054dec3f3b6842a4645229e48b1a3edadf872f3f038fef8325b74e5196d8cd33ecfb2ffd71f35113791ac7988b775d54141d955d2c1ec7fce1db01b306cdcecff3969617cebda62c3b1f4a2230ad210a8160744cae7e251047650bf4e3fc0e5da5f2bfaaf63f416baf6d456721d16cb7bba497e51a1f4e854a58979d0b9918f62100322abc6aa37f254725634b40a24874a2a194221f07b6409a8ec29ecb649bf930275dd3bc2812363b8e37e0b7b38f24c87dfbf56956de11ec73c15f5438f1bb98b62262ac2ad679bfc9eaff012e2a4562612eebf2199018a7a9194bf778e705780e138194e91e8d6821e5233b8660d7f4db3a2873d707d5b5f1248e617508e70f9938abe04cf4690e6c202d919e602d2be3ac238f7d0e4b72e80f9015c35e3c10c31e5053ba9480a87b16eae24f9f8438e5c798d752d2e387b3fb778f82b14ee258715ddc93a62dcd76d0b0f54bbea99bf797623b794a6d674d026da2a7995ffc356cca459ea7a10a6f00b52507eaef0b76abd10e0f203ff0c763eb4305b1bb5ec816e3c8515f05eebf90f0a0b00a83ac0d059f0cba3be3d32f47540c199840f52c7e37b0f90052c000ed9e13beac0ecc05539429c868184bbd11480c8e066f701cd6199b721160d8828e489035ca8bdce593535f38be58ca978750f0686edc68a052320857adbb2610822e0380bd5cd1b1ff1485d3ec66a4c6e56a8954956977b270c3d5520ee2fdf3ab7307c3e308def1c104b1813ee502c76f220c99a8f131ca791571026c463d0fc16f4a5482782ede33d0efd3a8a64b3b5ad973b0a557d3550b24a7a8925ef3ff93bc7acdc60c1ed0415fffd7f09a4adbfd0e8add500c95da3300a5e0de9c964cd81dab7c87208e3b39fcbac9c35fef5c05d88258f3e51e08e89e2221883b078952db48981ace51bcf535abc5323b07a2c55dbf70a3a019c4dcc24638f55a2df660f476169af8b441dbfc5cc140665db5e4e9ad71649ecd76fc93d59577d55eb3dee2b5c44aab075636f56821bd69f7768d28608756cabe07a1fdf6df5e067d2de2c8f239dc107dfcc37139bf98474ae9af4d939e79ee832f85bc3d980a28f5dca79d1d18785ee772a8d919b363fa56bf5200acf97f7cbf00546d2f87fbfeafecc6705037df0b525fb66c2f011a14ef565ab9e73159fa87415fc8ba0d6111c7305f965fd4879a330e7d7efcaf7d484f188ef43283b4d5a6567c22acf440ff076a098eadeb0a7bef42fec27eb42b5085a6dceee10ab898e4ad8c8cb64e496cda0647e72822dc2bcae5a1bff0f5050fee0301e25dfae6fc26c219d1c852f200b1d752bba87e193e98b127173c90a55da82f63029c0f75972e200c209b04624bd55d6b09f097606f1578480aa2f6d4689dc19e21e86780a9741d3aff47c726ac2887662ed86a0a03d7c3a6adb731c23136c581eee18b79d13dfc33736a3a1259483787c20b3fac46f4d7c3ae84a5b056e50624b42b2487e97abd8b434c2a143c7ce507e33576845b615254b3a6ede0c595373db7d8be1347aca491bfc3dcbd402472855d39a58e2bac8656e59ba77405d7ad9ae8eaf53dfe4ca3d153d00a927b3bfb8c95b8158b93c7675b2ea3ead942c6778c152856dc3b4668576fc4eafb685f461527426382e676177e7b605ff595a834e0ba98cd7ab080d60a49688353f90f81c07baf230705cd682219a8b9ed3cdbaee6dc98f88aaf19cbb1cdf71b2c3ca9804d0e7e233004d3681dc7ea5e6452a7da36ee62e37c7f78fe176b2c2a32dcf1ef9ce7b90335d1656953e6c47a022d4eeee4259e7c0b24c8b386ece5ad8cef2896baf8057c842d1318f99035aaa16f0e2c21343470de79bdf06a9944fb7b0f09c4e9da7976cf8e40b1b3f46409940cb20a0d686a8c404362024f4a9304f35df377ff2ff0b5cf91436f16cb7f5b23072ad3bf18fcb393115a3142937ea6cf6ae17f4ab80062532471f47cea063404e83a8dfc388e37914b941bd58ab69ee9892f8de7dd4d07612e9bfdd48671dffeebbfb9fffc599c5d0928d6e03889c170bdc607cb3f8e1f68adbefe5507f8e5cba2119e76f2fe64f9ae5c498ace0de9b8f5a7e43d93c8a2747af1188e3081236bb1e2866f2e1837bb14b25ff4d31533cb3e59eec25e103f0f476519bd0760313a20e0f2d2fae2a0ff5c947e3a1b38b77ab405a0a98da3b7bba4d5efcbc37c8b0a341f8b9856077b13b34e1f38949597f576cd7a3611cc94dff3f205fa0c8f186318d1a8e6d241f91f43ac7ab1fbbc8bb5bd931839e6d37590170708af077c553629227566e0bb6a860c8e77e3800691b56b3eb196cb58a9f987e91de0c7392efcb471063476dd874ccee2fc38c9141b7081ce417131ae1393f29ee8cf7c7896647ec06c44c09c614e0dd32cbc98632e20225d451739a1e7c70a907ebc7cdffdc7476b61f0b535cc1eb5508f5126118a60069e9e332f0789f8c016b8772eb9e72b7f6c34fa66e9a4debbe24988531a7c8ccaf8f7adb1919b1e322c30db54320bc9737339a95a2c8bef8f1e7062268bb32a4aa2a06d811eeaa6ccc4b698e3d425f45662eb7d41862e66d57087bcc2dea9c7b4b56d9a177a377fe71b6ce622f3f9ea9d51046898f54814", 0x1000}, {&(0x7f0000001780)="702637c2f555086d90", 0x9}, {&(0x7f00000017c0)="cb84adff607676bfb903ab783ed763de9958cb8df595b408445ec0dd6d6b5d3f989a248707182ba701c4985fe6ca3b3623b77753b724c2b43e06785ae1adecad168c8095f19cd2a927228cdcaadbbeef57f6f4ee3362806cf357f5bf9c35756bf2927de9f83cf486354af61c5e13ec35f9223bd3123a22", 0x77}, {&(0x7f0000001840)="c7b51af01889f18faacd79575a16739b949ad6c26799d58cdbeb432dcda2705b0d5411486d4bd379b8b7d0f93218674b84f8f4064eefa546090c696416a2c88f7b3e79387a9438ad8d73775b0b56563ce819926ce6189803164f84a5cc8d1a9b3ba07e45e4faa857eefeb73ee6495aa93a249bb34e364b3246103ffc56bf37438c146378d804907a71af11d15871e2d548da687341d5d35f03e71b992df173bea45505e18e1e836e", 0xa8}, {&(0x7f0000001900)}], 0x6, &(0x7f0000001a40)=[@init={0x18, 0x84, 0x0, {0x9, 0x6, 0x5, 0x7}}, @init={0x18, 0x84, 0x0, {0x100, 0xfffc, 0x5, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x3ff, 0x0, 0x8, 0xa, r4}}, @authinfo={0x18, 0x84, 0x6, {0x6acc}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @init={0x18, 0x84, 0x0, {0x4, 0x2, 0x3ff}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0xe8, 0x40000}, 0x40041) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x3, 0x6, 0xb}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket(0x10, 0x803, 0x0) 3m30.948934542s ago: executing program 0 (id=1951): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x185301, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0280feff040400001400003f54e8db589b7af700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffff31) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) socket(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") 3m30.298045819s ago: executing program 0 (id=1956): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m29.867812394s ago: executing program 0 (id=1959): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xf, 0x1dfe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r0, 0xec, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getenv(0x4201, r0, 0x5, &(0x7f0000000140)) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x7}, 0x0, 0x0, 0x19, 0x3, 0x800000, 0xffffffd9, 0x20, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000019140)=ANY=[], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)) writev(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x1, @perf_config_ext={0x2, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) 3m29.505142289s ago: executing program 6 (id=1925): syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0xa}, 0x20b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) capset(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) creat(0x0, 0x1) setrlimit(0x40000000000008, &(0x7f0000000000)) sendto$inet(r0, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) 3m29.42762079s ago: executing program 6 (id=1962): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x185301, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0280feff040400001400003f54e8db589b7af700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffff31) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) unshare(0x20040400) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r3) 3m29.165805099s ago: executing program 6 (id=1964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0429bd70000000000000010000", @ANYRES32=r4, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c00028005000100040000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3m28.210995162s ago: executing program 6 (id=1969): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m28.099804528s ago: executing program 6 (id=1970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000997000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000713000/0x4000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3m27.329843004s ago: executing program 2 (id=1978): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000440)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6EyS\xf1:)\x00\xca\xd7Uw\x00\xb4\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@|\vNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3M6\xe3\x90^\xbaW\x9a\xcc\xfa\x99\xf2(\xa1d\xa9\x91U\x11g\xc2\xbb_\x9f\xe4#m\x81\xda\xec\xb9`\x1dh\"\xc1\xa2\xcd:\xd6\xf3\xed\xe4\xda\x88\xcc\x9aU\x8f\xacp\xbc\x8c_\xdf\xe9aw\x7f\xb9\x11r\x15\x90}Wy\"?f!s\xa7\xf9\t\xee\x7fI\xc9Y\xd2\xf9\xfc\xec`\xcdd\x9c\xf7\xb2\xd1\xebT\\vh\xd1\x0f\xfd=M\xe6\xa5\x7f\xc1\aN\x8bIJ\xe6\xddb\x91\x13\xdd\x1d\xc5\xe0\xe3\xd3\xa9\x90\x9cW\x9e\xd4\x812\xd3w\xa1\xe7Al\x93H\x1a\x17K\xcbe\x81y\x95#(\xc6\x9f\xfbN\xd8\x16B\x12\a\x15\xb5+\n\x00\x02\xfc\\\bfV\f\xa9iV\x9eav\xf7\xe0\xb3U\xd7\x1a\xa3|\xee\xe7\x98\x93\xddo\x9e\xde2\xdb\x8aL\x12\xa4\x03j\x18\x98\xa2\xa4\x01+\xda\xe6\x8e\xf0\xf7\xc8\xa0\xbd\xacr\x7f\xd8\x9a\xdb] \x82\xa1\xc0f\x04F\x87r\xe7\x80', 0x0) r2 = dup(r1) write$binfmt_elf64(r2, 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m27.28753871s ago: executing program 2 (id=1979): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={r5, 0x3, 0x20, 0xaefc}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000ac0)={0x0, 0x2, 0x0, 0xf27, 0x5}, &(0x7f0000000b00)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000b40)={0xfffa, 0x41, 0x0, 0x0, 0x0, 0x80000000, 0x12000, 0x80000001, 0x0}, &(0x7f0000000b80)=0x20) sendmsg$inet_sctp(r2, &(0x7f0000000cc0)={&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000440)="1530755856faf7117367b49d60b3de750bbb8efd15ae5b4179aa64164cbac2d1a2cb69362c0bbe793e40e189caebb6c949b149c04c7ce5edd09468be6ecc9416c8733e52c73c905f9e98a3c364bbe943329d421acfa5707e3b8178c86d55033c68a950ada9c0b9e153a0d59a1d", 0x6d}, {&(0x7f0000000600)="d6a9e089e67b0c21a8797bea66c1c1f4d1b1ad1130861b545bc3c4f8f11659f20060f74c3129eb223d2a6c07a7f68e973cb7df3573f1b05266bf1f2b7014de0ae0dbb0fa6d77a84b0777f09db58909c3ece1fca7eb4508aeab698a0b4facffb85bccb35f222baee970ce283909cf990743cc94d1655dd94d58fcaf4154ecee6d02e525a551d05b3bdc12c9da83077fe9394a5ddc56baa03a0166ac847649a4ee89d5006a4058c771453486e8490bc4c0d81d9607845098d6c9613735792f044fec2d43424b47a39d3f02eba8ae1d3dc5c7968e8de05b2f1533", 0xd9}, {&(0x7f0000000700)="352d2e3cbccdebe89e62aee34737ee7a601fb629ee8cbd5c6dae19439ee4a9f998f4238e6114d6de0f6e010f1767194169c506b848f201d85547e11d8461450406b1ae055e60b9caa24917fcaddb774842596bc37d2c696e4aba68d59bf4ba96a015e704309caeaed2ff4c0bb524d578572ebe63c2eb45d44891d5f1efa2443371d5ad13b20a5be53b9f18254da3eeb6d81616eaf5045587d83c84c8509d7ae5ebdb47068f0d16a1b04e4ce0d2703c84b8ee12ed4b671dbdc6e7a56f5e5a9f876b34a4843b69d1dbc42de9c2486e5d4a1f0789c5760f31298afdde4a028ee7f23a69132c305e1667592a9761ea3d8f537d79dd", 0xf3}, {&(0x7f0000000800)="16aa0e4a19fae8b85aaf4cabe51f089a7f9761b10dcdb911617e27fb9a446d312542e29573224bfcd54f2d3e94c2e47c89d30ac8ef93ed03fbf6b35ac6c659ca4b03eacde8404ff9f0e32c1f8f4f6a91b24e553b34b2b2ec1fb3d09ac776799cb3810733a8b695519edc032c9c9d60c0473913ba39a35613bc28eca3514fad8149586e8ce19fab8bbff3b28d07940ca3752b4f54b27e6b6a8daaf432c97fc4601c8c6c57f474e8129ce0cd3209164aec5187b1c45ec2f3bda421dc7a7284bd6f43899360a1b29ff19cad9996f8f3c9fb618b356f33ace74ef7551175f891663711bc21cd", 0xe4}, {&(0x7f0000000900)="d279adf71ec0e492296e545538e74f192ac7f1c2d47156f9c4307bc43277f05e997ee3406be7dfae2e89677b", 0x2c}, {&(0x7f0000000940)="0db193deb6cc941e696577d65201eb0f346596d8c7cbea241a6d9c669aaa07b956d1e51f5bf2fe6ddf7b840e23a29fb8f525387425b8a9b2f39d0d964b8e6b27423ba19e0069e556e6f81f93a98451683ce3e054e1ffd78444658551e3b516f0ed83cbfefbba568b291e1cb4e72cfdd888000d551d0f32b264845f58c6709bf807c5cc28b9b8464f870e7bcb73317237dfb16f935ba33828df7e2abfd58354a14f605adf3938f58643b45a9b421999fab6ae534536c37ea2206c1d1689df6b56d7756af4db58fabbdf0ed0a91d0b61224f2b82692abe88ab9cc21d4d5c39f229381b8952c40d08b5e9e8b14790d90138ec9310b3cd09", 0xf6}], 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="300000000000000084000000010000000a0004000a000000c60100007e000000410500000010000003000000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000070000007f0000010000000018000000000000008400000007000000ac1414bb00000000200000000000000084000000020000000b0000800700000093c90000", @ANYRES32=r5, @ANYBLOB="2000000000000000840000000200000005000180dbf6ffff000100005beca7c867d537b2276b99f83dbcb0829aab55827a983849236dec8860c5cced7a0fdd3642bbce9981caeac7c34a3f07091e67edfdf44b48d889e21964f8ad1602c1c763b937a7322ae4e3b2469424c950537f60548f02dbcecb99f957b5", @ANYRES32=r6, @ANYBLOB="300000000000000084000000010000007f00ff000582000000000100010001000500000007000000d8000000", @ANYRES32=r7], 0xd0, 0x40050}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x658}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x42}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x178f}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4041) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c100000000000224e0000", 0x58}], 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0x6ee}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89fa, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m27.007706302s ago: executing program 2 (id=1980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0429bd70000000000000010000", @ANYRES32=r4, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c00028005000100040000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3m26.860215484s ago: executing program 2 (id=1981): sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x185301, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0280feff040400001400003f54e8db589b7af700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffff31) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) unshare(0x20040400) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r3) 3m26.602144143s ago: executing program 2 (id=1982): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m26.527621163s ago: executing program 2 (id=1983): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xda) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@mblk_io_submit}, {@block_validity}, {@errors_remount}, {@nogrpid}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}]}, 0x1, 0x5be, &(0x7f0000001000)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40200, 0x80) r4 = socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r6 = io_uring_setup(0x409, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1ec}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x6, &(0x7f00000002c0)=[{0x0}], 0x1) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441b0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x3ff, 0xfdfffffe, 0x6, 0x40, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x24, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffe, 0x0, 0x1001, {[@nop, @generic={0x13, 0x9, "c2ed1a3e316074"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m22.343216189s ago: executing program 7 (id=1989): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000440)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6EyS\xf1:)\x00\xca\xd7Uw\x00\xb4\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@|\vNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3M6\xe3\x90^\xbaW\x9a\xcc\xfa\x99\xf2(\xa1d\xa9\x91U\x11g\xc2\xbb_\x9f\xe4#m\x81\xda\xec\xb9`\x1dh\"\xc1\xa2\xcd:\xd6\xf3\xed\xe4\xda\x88\xcc\x9aU\x8f\xacp\xbc\x8c_\xdf\xe9aw\x7f\xb9\x11r\x15\x90}Wy\"?f!s\xa7\xf9\t\xee\x7fI\xc9Y\xd2\xf9\xfc\xec`\xcdd\x9c\xf7\xb2\xd1\xebT\\vh\xd1\x0f\xfd=M\xe6\xa5\x7f\xc1\aN\x8bIJ\xe6\xddb\x91\x13\xdd\x1d\xc5\xe0\xe3\xd3\xa9\x90\x9cW\x9e\xd4\x812\xd3w\xa1\xe7Al\x93H\x1a\x17K\xcbe\x81y\x95#(\xc6\x9f\xfbN\xd8\x16B\x12\a\x15\xb5+\n\x00\x02\xfc\\\bfV\f\xa9iV\x9eav\xf7\xe0\xb3U\xd7\x1a\xa3|\xee\xe7\x98\x93\xddo\x9e\xde2\xdb\x8aL\x12\xa4\x03j\x18\x98\xa2\xa4\x01+\xda\xe6\x8e\xf0\xf7\xc8\xa0\xbd\xacr\x7f\xd8\x9a\xdb] \x82\xa1\xc0f\x04F\x87r\xe7\x80', 0x0) r2 = dup(r1) write$binfmt_elf64(r2, 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m22.268970041s ago: executing program 7 (id=1990): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={r5, 0x3, 0x20, 0xaefc}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000ac0)={0x0, 0x2, 0x0, 0xf27, 0x5}, &(0x7f0000000b00)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000b40)={0xfffa, 0x41, 0x0, 0x0, 0x0, 0x80000000, 0x12000, 0x80000001, 0x0}, &(0x7f0000000b80)=0x20) sendmsg$inet_sctp(r2, &(0x7f0000000cc0)={&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000440)="1530755856faf7117367b49d60b3de750bbb8efd15ae5b4179aa64164cbac2d1a2cb69362c0bbe793e40e189caebb6c949b149c04c7ce5edd09468be6ecc9416c8733e52c73c905f9e98a3c364bbe943329d421acfa5707e3b8178c86d55033c68a950ada9c0b9e153a0d59a1d", 0x6d}, {&(0x7f0000000600)="d6a9e089e67b0c21a8797bea66c1c1f4d1b1ad1130861b545bc3c4f8f11659f20060f74c3129eb223d2a6c07a7f68e973cb7df3573f1b05266bf1f2b7014de0ae0dbb0fa6d77a84b0777f09db58909c3ece1fca7eb4508aeab698a0b4facffb85bccb35f222baee970ce283909cf990743cc94d1655dd94d58fcaf4154ecee6d02e525a551d05b3bdc12c9da83077fe9394a5ddc56baa03a0166ac847649a4ee89d5006a4058c771453486e8490bc4c0d81d9607845098d6c9613735792f044fec2d43424b47a39d3f02eba8ae1d3dc5c7968e8de05b2f1533", 0xd9}, {&(0x7f0000000700)="352d2e3cbccdebe89e62aee34737ee7a601fb629ee8cbd5c6dae19439ee4a9f998f4238e6114d6de0f6e010f1767194169c506b848f201d85547e11d8461450406b1ae055e60b9caa24917fcaddb774842596bc37d2c696e4aba68d59bf4ba96a015e704309caeaed2ff4c0bb524d578572ebe63c2eb45d44891d5f1efa2443371d5ad13b20a5be53b9f18254da3eeb6d81616eaf5045587d83c84c8509d7ae5ebdb47068f0d16a1b04e4ce0d2703c84b8ee12ed4b671dbdc6e7a56f5e5a9f876b34a4843b69d1dbc42de9c2486e5d4a1f0789c5760f31298afdde4a028ee7f23a69132c305e1667592a9761ea3d8f537d79dd", 0xf3}, {&(0x7f0000000800)="16aa0e4a19fae8b85aaf4cabe51f089a7f9761b10dcdb911617e27fb9a446d312542e29573224bfcd54f2d3e94c2e47c89d30ac8ef93ed03fbf6b35ac6c659ca4b03eacde8404ff9f0e32c1f8f4f6a91b24e553b34b2b2ec1fb3d09ac776799cb3810733a8b695519edc032c9c9d60c0473913ba39a35613bc28eca3514fad8149586e8ce19fab8bbff3b28d07940ca3752b4f54b27e6b6a8daaf432c97fc4601c8c6c57f474e8129ce0cd3209164aec5187b1c45ec2f3bda421dc7a7284bd6f43899360a1b29ff19cad9996f8f3c9fb618b356f33ace74ef7551175f891663711bc21cd", 0xe4}, {&(0x7f0000000900)="d279adf71ec0e492296e545538e74f192ac7f1c2d47156f9c4307bc43277f05e997ee3406be7dfae2e89677b", 0x2c}, {&(0x7f0000000940)="0db193deb6cc941e696577d65201eb0f346596d8c7cbea241a6d9c669aaa07b956d1e51f5bf2fe6ddf7b840e23a29fb8f525387425b8a9b2f39d0d964b8e6b27423ba19e0069e556e6f81f93a98451683ce3e054e1ffd78444658551e3b516f0ed83cbfefbba568b291e1cb4e72cfdd888000d551d0f32b264845f58c6709bf807c5cc28b9b8464f870e7bcb73317237dfb16f935ba33828df7e2abfd58354a14f605adf3938f58643b45a9b421999fab6ae534536c37ea2206c1d1689df6b56d7756af4db58fabbdf0ed0a91d0b61224f2b82692abe88ab9cc21d4d5c39f229381b8952c40d08b5e9e8b14790d90138ec9310b3cd09", 0xf6}], 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="300000000000000084000000010000000a0004000a000000c60100007e000000410500000010000003000000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000070000007f0000010000000018000000000000008400000007000000ac1414bb00000000200000000000000084000000020000000b0000800700000093c90000", @ANYRES32=r5, @ANYBLOB="2000000000000000840000000200000005000180dbf6ffff000100005beca7c867d537b2276b99f83dbcb0829aab55827a983849236dec8860c5cced7a0fdd3642bbce9981caeac7c34a3f07091e67edfdf44b48d889e21964f8ad1602c1c763b937a7322ae4e3b2469424c950537f60548f02dbcecb99f957b5", @ANYRES32=r6, @ANYBLOB="300000000000000084000000010000007f00ff000582000000000100010001000500000007000000d8000000", @ANYRES32=r7], 0xd0, 0x40050}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x658}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x42}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x178f}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4041) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c100000000000224e0000", 0x58}], 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0x6ee}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89fa, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m22.082932419s ago: executing program 7 (id=1991): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xda) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@mblk_io_submit}, {@block_validity}, {@errors_remount}, {@nogrpid}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}]}, 0x1, 0x5be, &(0x7f0000001000)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40200, 0x80) r4 = socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r6 = io_uring_setup(0x409, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1ec}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x6, &(0x7f00000002c0)=[{0x0}], 0x1) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441b0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x3ff, 0xfdfffffe, 0x6, 0x40, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x24, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffe, 0x0, 0x1001, {[@nop, @generic={0x13, 0x9, "c2ed1a3e316074"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m21.416002259s ago: executing program 7 (id=1992): sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x185301, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0280feff040400001400003f54e8db589b7af700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffff31) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) unshare(0x20040400) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r3) 3m21.104826155s ago: executing program 7 (id=1993): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m21.050538593s ago: executing program 7 (id=1994): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x185301, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0280feff040400001400003f54e8db589b7af700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffff31) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") 3m14.792854229s ago: executing program 42 (id=1946): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="670000001000050700000086d7c0d6c878f0", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="f37c9432443fc9c9f3bc2850927531a5ebc0272ba9dff28df86344a6d9460be3a2fec775f574a301aca82309e2ddd7b5af6b285f02de6d7028b351f9e1c9e71c208f40fa440b830eca58830ab1ed3103c0d29abaae98a01da6f04e8a6d06ffbb4b8f", 0x62, 0xfffffffffffffffb) syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x48000) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xe}, 0x11693d, 0x8, 0x11000, 0x1, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80000, 0xd) 3m13.291134824s ago: executing program 43 (id=1959): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xf, 0x1dfe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r0, 0xec, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getenv(0x4201, r0, 0x5, &(0x7f0000000140)) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x7}, 0x0, 0x0, 0x19, 0x3, 0x800000, 0xffffffd9, 0x20, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000019140)=ANY=[], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)) writev(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x1, @perf_config_ext={0x2, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) 3m11.759544933s ago: executing program 44 (id=1970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000997000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000713000/0x4000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3m9.993760277s ago: executing program 45 (id=1983): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xda) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@mblk_io_submit}, {@block_validity}, {@errors_remount}, {@nogrpid}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}]}, 0x1, 0x5be, &(0x7f0000001000)="$eJzs3T1sHFUeAPD/zHrtfDjnnHQn3Z1SRHcn5aQoazsfdzmqpEVEipQCQQPWemNFXnsjrw2xsYTTB0QKBChN6KCgBFFQIBpKWhoQNVJELJDiFLBoP8bZ+AvbZL3B+/tJs/vezHj+7+3s/3lnNKMJoGcdr7+kEX+PiMtJxFDbsr5oLTzeXG9lebH4cHmxmEStduWHJJKIeLC8WMzWT1rvhyNiKSL+FhFf5CNOpqub7M8K1fmFybFyuTTTqg/PTl0frs4vnLo2NTZRmihNn/nf/8+dP3tu9PRoe3Mf1tpr+Z319da3t9+89dWzd29/+NGxpeLbY0lciMHWsvZ+PEnNzyQfF9bMP9uJYF2UdLsB7Equlef1VPprDEWulfUbqbUPDgN70jygg2oDEbVVbUWgByQ7Svp+QwTsG9nvgPrxbzbt5e+PexebByD1uCvLi8XXI4vf1zw3EQcaxyaHfkweOzKpH28e3cuGsi8t3YyIkb6+9d//pPX9272RJ9FAOurzi80dtX7/p6vjT2ww/gxm505/p2z8W2mNfysbxM9tMv5d3maMn1/87r1N498ciH9sGD9ZjZ9sED+NiJe3Gf/O85+e32xZ7f2IE7Fx/Eyy9fnh4avXyqWR5uuGMT47ceyZzfsfcejx+ANZ1OY52wONhrT3v7/VprRtO0e26P8nX378z6Ut4v/nX1vv/xdeW//5H4yIt7aI2e7PDz54brNl924m9+u/Ana6/5PIx92tw+aywn8vHP+mVXTWEAAAAAAAAAAAnqC0cS1bkhZWy2laKDTv4f1LHErLlersyauVuenx5jVvRyOfZldaDTXrSb0+2roeN6ufXlM/k10NlDvYqBeKlfJ4l/sOAAAAAAAAAAAAAAAAAAAAT4vDa+7//ynXuP9/7eOqgf1q80d+A/ud/Ife9Xj+J11rB7D3/P+HnlWT/9C75D/0LvkPvUv+Q++S/9C75D/0LvkPAAAAAAAAAAAAAAAAAAAAAAAAAAAdcfnSpfpUe7i8WKzXx/vm5yYrr5waL1UnC1NzxUKxMnO9MFGpTJRLhWJl6re2l1Qq10dieu7G8GypOjtcnV94aaoyN509U7SU73iPAAAAAAAAAAAAAAAAAAAA4I9nsDElaSEi36ynaaEQcSQijiaRXL1WLo1ExJ8i4utcfqBeH+12owEAAAAAAAAAAAAAAAAAAGCfqc4vTI6Vy6WZzhX6WqE6GGL7hb6drBwRSzsPMRARjcIb69epb3HHG8y3PsBN1jm4d7tyHxRyT8f3cLeFA7FXsbo0IAEAAAAAAAAAAAAAAAAAQA97dNPvdv/il842CAAAAAAAAAAAAAAAAAAAAHpS+n0SEfXpxNC/B9cu7U9Wco33iHj1zpV3bozNzs6M1uffX50/+25r/ulutB/YrixP04io5zEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwSHV+YXKsXC7N7LIwsI11ut1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN34NQAA//+sYMcQ") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40200, 0x80) r4 = socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r6 = io_uring_setup(0x409, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1ec}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x6, &(0x7f00000002c0)=[{0x0}], 0x1) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441b0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x3ff, 0xfdfffffe, 0x6, 0x40, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x24, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffe, 0x0, 0x1001, {[@nop, @generic={0x13, 0x9, "c2ed1a3e316074"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m4.402950173s ago: executing program 46 (id=1994): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x185301, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0280feff040400001400003f54e8db589b7af700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffff31) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") 6.232979819s ago: executing program 8 (id=3188): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x40000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={0x0}, 0x18) 5.400670023s ago: executing program 8 (id=3190): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x40000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={0x0}, 0x18) 4.53089827s ago: executing program 3 (id=3191): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x10000, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472", 0x5}, {&(0x7f00000015c0)="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", 0xdf1}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x6, 0x3b00, 0x0, 0xfffffffffffffdfd) 4.360120247s ago: executing program 8 (id=3192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10", 0x16}], 0x2) 4.345125238s ago: executing program 9 (id=3193): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xda) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@mblk_io_submit}, {@block_validity}, {@errors_remount}, {@nogrpid}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}]}, 0x1, 0x5be, &(0x7f0000001000)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40200, 0x80) r4 = socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r6 = io_uring_setup(0x409, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1ec}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x6, &(0x7f00000002c0)=[{0x0}], 0x1) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441b0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x3ff, 0xfdfffffe, 0x6, 0x40, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x24, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffe, 0x0, 0x1001, {[@nop, @generic={0x13, 0x9, "c2ed1a3e316074"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn\x00\x00\x00\b\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.795136521s ago: executing program 9 (id=3194): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x40000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={0x0}, 0x18) 3.291703962s ago: executing program 9 (id=3195): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xf, 0x1dfe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r0, 0xec, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getenv(0x4201, r0, 0x5, &(0x7f0000000140)) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x7}, 0x0, 0x0, 0x19, 0x3, 0x800000, 0xffffffd9, 0x20, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x1b7f, &(0x7f00000191c0)={0x0, 0x8000c059, 0xc401, 0x0, 0x20002fb}) bpf$MAP_CREATE(0x0, &(0x7f0000019140)=ANY=[], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000000)) writev(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.428543138s ago: executing program 4 (id=3197): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x400, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x200}}, 0xfff, 0x9}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x64, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x24044804) setrlimit(0x5, &(0x7f0000000040)={0x1, 0x1000}) 2.344984651s ago: executing program 4 (id=3198): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_config_ext={0x8ac, 0xffffffffffff60bb}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x4, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1146b5, 0x0, 0xfffffffe, 0x4, 0x7, 0xfffffff6, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f00000005c0)={0x8, 0x9}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x1, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x5}, 0x8) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000640)={{0xa, 0x7, 0x5, 0x80000001, 0x1}, [{0xfffffffffffffff7, 0x1, 0xe9, 0x1}, {0x9fd, 0x2, 0x5, 0x3}, {0x9, 0xd, 0x8, 0x5}, {0x200, 0x6, 0x5, 0x1}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x8051) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) sendmsg$nl_generic(r0, &(0x7f0000000d00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="cc030000180008002bbd7000fddbdf2500000000f83a5bfe18353000a5d57430281b01fbf731e4e1a912d3b9922f38a6ffc10100017a804801418028000aa10400b8800400bc0008004f00b109a90aa277e9bcd84daba7694698118100f29e357316d4cece8b631e49f5fcb694b42be2ee4275dd9548e1a95c7af74464b4ea26263357d26e1c7856b754dadb1e1fe789adee2030345a6616641924af5028d552dec6dc5bd11ce42791", @ANYRES32=r5, @ANYBLOB="0400d2800e00bd00", @ANYRES32=r4, @ANYBLOB="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"], 0x3cc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.282465324s ago: executing program 4 (id=3199): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xda) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@mblk_io_submit}, {@block_validity}, {@errors_remount}, {@nogrpid}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}]}, 0x1, 0x5be, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40200, 0x80) r3 = socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = io_uring_setup(0x409, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1ec}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x6, &(0x7f00000002c0)=[{0x0}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441b0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x3ff, 0xfdfffffe, 0x6, 0x40, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x24, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffe, 0x0, 0x1001, {[@nop, @generic={0x13, 0x9, "c2ed1a3e316074"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn\x00\x00\x00\b\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.268448535s ago: executing program 8 (id=3200): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = gettid() capget(&(0x7f0000000200)={0x19980330, r2}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000002c0)=0x1, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) 2.263232985s ago: executing program 1 (id=3201): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b6, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.198252637s ago: executing program 9 (id=3202): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x40000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={0x0}, 0x18) 1.332701124s ago: executing program 9 (id=3203): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xda) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@mblk_io_submit}, {@block_validity}, {@errors_remount}, {@nogrpid}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}]}, 0x1, 0x5be, &(0x7f0000001000)="$eJzs3T1sHFUeAPD/zHrtfDjnnHQn3Z1SRHcn5aQoazsfdzmqpEVEipQCQQPWemNFXnsjrw2xsYTTB0QKBChN6KCgBFFQIBpKWhoQNVJELJDiFLBoP8bZ+AvbZL3B+/tJs/vezHj+7+3s/3lnNKMJoGcdr7+kEX+PiMtJxFDbsr5oLTzeXG9lebH4cHmxmEStduWHJJKIeLC8WMzWT1rvhyNiKSL+FhFf5CNOpqub7M8K1fmFybFyuTTTqg/PTl0frs4vnLo2NTZRmihNn/nf/8+dP3tu9PRoe3Mf1tpr+Z319da3t9+89dWzd29/+NGxpeLbY0lciMHWsvZ+PEnNzyQfF9bMP9uJYF2UdLsB7Equlef1VPprDEWulfUbqbUPDgN70jygg2oDEbVVbUWgByQ7Svp+QwTsG9nvgPrxbzbt5e+PexebByD1uCvLi8XXI4vf1zw3EQcaxyaHfkweOzKpH28e3cuGsi8t3YyIkb6+9d//pPX9272RJ9FAOurzi80dtX7/p6vjT2ww/gxm505/p2z8W2mNfysbxM9tMv5d3maMn1/87r1N498ciH9sGD9ZjZ9sED+NiJe3Gf/O85+e32xZ7f2IE7Fx/Eyy9fnh4avXyqWR5uuGMT47ceyZzfsfcejx+ANZ1OY52wONhrT3v7/VprRtO0e26P8nX378z6Ut4v/nX1vv/xdeW//5H4yIt7aI2e7PDz54brNl924m9+u/Ana6/5PIx92tw+aywn8vHP+mVXTWEAAAAAAAAAAAnqC0cS1bkhZWy2laKDTv4f1LHErLlersyauVuenx5jVvRyOfZldaDTXrSb0+2roeN6ufXlM/k10NlDvYqBeKlfJ4l/sOAAAAAAAAAAAAAAAAAAAAT4vDa+7//ynXuP9/7eOqgf1q80d+A/ud/Ife9Xj+J11rB7D3/P+HnlWT/9C75D/0LvkPvUv+Q++S/9C75D/0LvkPAAAAAAAAAAAAAAAAAAAAAAAAAAAdcfnSpfpUe7i8WKzXx/vm5yYrr5waL1UnC1NzxUKxMnO9MFGpTJRLhWJl6re2l1Qq10dieu7G8GypOjtcnV94aaoyN509U7SU73iPAAAAAAAAAAAAAAAAAAAA4I9nsDElaSEi36ynaaEQcSQijiaRXL1WLo1ExJ8i4utcfqBeH+12owEAAAAAAAAAAAAAAAAAAGCfqc4vTI6Vy6WZzhX6WqE6GGL7hb6drBwRSzsPMRARjcIb69epb3HHG8y3PsBN1jm4d7tyHxRyT8f3cLeFA7FXsbo0IAEAAAAAAAAAAAAAAAAAQA97dNPvdv/il842CAAAAAAAAAAAAAAAAAAAAHpS+n0SEfXpxNC/B9cu7U9Wco33iHj1zpV3bozNzs6M1uffX50/+25r/ulutB/YrixP04io5zEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwSHV+YXKsXC7N7LIwsI11ut1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN34NQAA//+sYMcQ") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40200, 0x80) r4 = socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = io_uring_setup(0x409, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1ec}) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441b0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x3ff, 0xfdfffffe, 0x6, 0x40, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x24, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffe, 0x0, 0x1001, {[@nop, @generic={0x13, 0x9, "c2ed1a3e316074"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn\x00\x00\x00\b\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.320070734s ago: executing program 1 (id=3204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0429bd70000000000000010000", @ANYRES32=r4, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c00028005000100040000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r13], 0x54}}, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.156970541s ago: executing program 3 (id=3205): syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0xa}, 0x20b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) capset(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) sendto$inet(r0, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) 1.119729493s ago: executing program 1 (id=3206): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x400, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x200}}, 0xfff, 0x9}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x64, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x24044804) setrlimit(0x5, &(0x7f0000000040)={0x1, 0x1000}) 1.097328304s ago: executing program 4 (id=3207): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, 0x0, 0x0) 1.040291276s ago: executing program 3 (id=3208): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x400, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x200}}, 0xfff, 0x9}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x64, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x24044804) setrlimit(0x5, &(0x7f0000000040)={0x1, 0x1000}) 981.666469ms ago: executing program 8 (id=3209): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b6, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20203, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 956.11003ms ago: executing program 3 (id=3210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10", 0x16}], 0x2) 938.229201ms ago: executing program 1 (id=3211): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1, 0x4d1a}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) (async) tkill(r0, 0x7) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) waitid$P_PIDFD(0x3, r2, &(0x7f0000000140), 0x2, &(0x7f00000003c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x6, 0x6, 0xd, 0x4}]}, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="59bb24bd70000103000000000000080001000800000008000700", @ANYRES32=0x0, @ANYBLOB="0c0099000600000013000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x24048840) 912.065291ms ago: executing program 4 (id=3212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x3c, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8, 0x1, 0x1}}}]}, 0x3c}}, 0x0) 868.133333ms ago: executing program 4 (id=3213): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xda) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@mblk_io_submit}, {@block_validity}, {@errors_remount}, {@nogrpid}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}]}, 0x1, 0x5be, &(0x7f0000001000)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40200, 0x80) r4 = socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = io_uring_setup(0x409, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1ec}) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441b0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x3ff, 0xfdfffffe, 0x6, 0x40, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x24, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffe, 0x0, 0x1001, {[@nop, @generic={0x13, 0x9, "c2ed1a3e316074"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn\x00\x00\x00\b\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 826.358845ms ago: executing program 1 (id=3214): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_config_ext={0x8ac, 0xffffffffffff60bb}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x4, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1146b5, 0x0, 0xfffffffe, 0x4, 0x7, 0xfffffff6, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f00000005c0)={0x8, 0x9}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x1, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x5}, 0x8) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000640)={{0xa, 0x7, 0x5, 0x80000001, 0x1}, [{0xfffffffffffffff7, 0x1, 0xe9, 0x1}, {0x9fd, 0x2, 0x5, 0x3}, {0x9, 0xd, 0x8, 0x5}, {0x200, 0x6, 0x5, 0x1}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000"], 0x7c}}, 0x8051) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) sendmsg$nl_generic(r0, &(0x7f0000000d00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="cc030000180008002bbd7000fddbdf2500000000f83a5bfe18353000a5d57430281b01fbf731e4e1a912d3b9922f38a6ffc10100017a804801418028000aa10400b8800400bc0008004f00b109a90aa277e9bcd84daba7694698118100f29e357316d4cece8b631e49f5fcb694b42be2ee4275dd9548e1a95c7af74464b4ea26263357d26e1c7856b754dadb1e1fe789adee2030345a6616641924af5028d552dec6dc5bd11ce42791", @ANYRES32=r5, @ANYBLOB="0400d2800e00bd00", @ANYRES32=r4, @ANYBLOB="cc2c5b48f8b06838ec75c18c130048e323070ba851c0636749042ef9a060d227f237714fa05f9b49afd947c27be0007fecbe666168f3a3023e16eaa738393812a4b4757f27ce94909f68c4b4b58e46a3f009b959020fb918d5113244a08792770ae2a9d98d1c7c2b688baf60747b8f9658001c35e1252000b8dd94e5c5ab4cd951862a0ffec6137400f248e8cfc78a7020929506c7a46d0ca2cf2b173b5ef17930ab8d638175115683a9d2a27d1f102023e59dc875139ba234bf445049013f4738163d1e832a53c011201a1e0e971d64e5ddc6df48396dec7c634dcc09db3876287dc46c2225956aa21da63c7dede347bdce6c590445cf99dc8f935c597d4bf8e27c110c4bb3f84314000f00fe8000000000000000000000000000aa04003f80080060007f0000010b006b006d616e676c6500008204c6c972363cb5c549b01f047ee9e9f4cb2926c066cde9285b5466aebbe771f74bf43e6788a4bbeed7e6386eb381787fcebf1420c5682286b4ecee254c01fc90d37e91c0b4ff6af4d42f30844783349f870b475a3e121ee90af3e17b445c974e1694321cda36c972d0fb57e92b96a0bd73388ff3f6a1c6cb8400b6176e5db88db9a87b1e6115d9bad30000ff00c4800400cb80e3d2178a6e03f607f0cc4a48927196853ec9bf9dbab9210d1c5225d71f2c0b0d6f4d831b0b461d2b59dc998faad19189246f1bfdf1e8f6e298b4b356910299f9e2ca2b267e127db19aa678d3de51dcf8d47ca58c5bdf5896c04135ee2e456b7cca05437f9e1f782aeafa2c3e3d35ab1e733e236334ae2d0ca86d162fd8c726eb1a8d04009480f1cb5309f3d4f1d321e50a7a25a903e99b600030cd1c51068943b7c042d66f330211007f091657bb6ef5d312859647290ac724b50534a2598e7c0ea73e2adf0707e28f5d406a78d6aa02e29a03c6988d7b83fab4ea9078eb921f69546ec23af2125418b12b0392429e0400f78004003100000400078057aad4cd91629f1229e92800138494fa5d366d8c79b762f692d159a2b2d49c4ee394de3b5cf495f2a347a1aed4e67dc163036e300d856dcdce727767df8634650ad6ad9003510cacdb5b28d3352a9fcb63044121ca03ed61bada5c0a6dfce351fa358defc5a6e4f36b4d2e3e06214a42db08de12df7b8954f310e9c39979203dec72964fd9a8031cbb210dae71b9398ca505a9c99f633c547543dcb3465d99fdbba2b80000"], 0x3cc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 826.039545ms ago: executing program 3 (id=3215): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x40000000) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 111.744045ms ago: executing program 1 (id=3216): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x10000, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472", 0x5}, {&(0x7f00000015c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f117a02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b17ab6b721ce3fa", 0xdf1}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x6, 0x3b00, 0x0, 0xfffffffffffffdfd) 98.283185ms ago: executing program 9 (id=3217): syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0xa}, 0x20b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) capset(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) sendto$inet(r0, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) 47.982088ms ago: executing program 3 (id=3218): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000006c0)={0xa, 0x0, 0x80, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5597bac7}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="8000372409261673", 0x8, 0x20040844, &(0x7f00000001c0)={0xa, 0x4e24, 0x7a4e, @loopback, 0x9}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x2d, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xa}}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x4b72, &(0x7f0000001680)={0x5, 0x1ff, 0x10001, 0x20, 0x17, "16ee0500000000000000c000"}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e080000070000001e0000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB="af76287ac38584e8a693369dcc4d83bfd4edf7f23c0154892ff79bcf7604a7fbdb53bbad831a719e7c5a1a4efdd2304697c00ec30cd3cf76c4c24fe23087e9bff58b2bd35f388696d5a31578327ac7fbf76bfad7f2e8cb7cd78905e9b795741ba5ee8bdcd18fab7f3a1d8158445e9fe463929cb6df805c9fab74d8e0561688a85a8b8f021950ec59820be694a0608ba19e521ce789ccdaee8a", @ANYRES64=0x0], 0x1, 0x39e, &(0x7f0000000700)="$eJzs3T1vW+UXAPBTt3nr/584A0IChHjUjcVKwhdohFoJEQkUalQ6IG6JU6y4cWRbQa4QdEBi5RuwV4xsSIgvkAF2NrYsjB2qGvkttVOnJKTJbcXvJ0X32M85znOv5auzXJ39m9/f3dpsljazVhSupihEROFhxGIv6rswOBZ68XSMuh9vF2/+8eZHn9x6f3Vt7dp6StdXb7yzklJaeOuXL7/68cqvrf99/NPCzzOxt/jp/l8rf+69uvfa/uMbX1SbqdpM2/VWytLter2V3a5V0ka1uVVK6cNaJWtWUnW7WWmMrW/W6js77ZRtb8xf3mlUms2UbbfTVqWdWvXUarRTdierzgXHVH6wvp6t9uPZZ+RdPa8NcQYajdWs+xueeWql/CCXDQEAuTpt/z99rP7/VmGk/5+NI/v/qXgO/f92KpVKaf7yOV/JF8rU8dJG+/9//SG84Lr9//Tg9ztO/w8AAAAAAAAAAAAAAC+Dh51OsdPpFIfHzvAh4cHrnLfHGXvq+z/0l/f+OFsjD+7NRtS+2y3vlvvH/vrqZlSjFpVYimI86t4Whvrx9ffWri2lnsWYv/tNr/7KbxHli+P1y1GMxcn1y/36dFAf3eNUXB6tX4nP4pXJ9SsT66dj6YeR+lIU4/fPox612Ojd3p7Uf72c0rsfrB2qn+nlAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEpDb0R/7v1uOWIudgfz+0tPEhbH5+P36w/m6y9FMR5Nns+/NHE+/6V4/VK+5w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ832va2sVqs0zisYzvzvvTM9DI6uutBPv39oaS7Gk2f+6XNOGRROVDU3OMkJS487nU4vuPPtc9/q7Pl+lacJpiLiGTmdwQU84vKe4H/9PyJG37k4njMTEWd6pgvdoJD/BT9xkMfdCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJ1MPS7++JC3rsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL832va2sVqs0zjDI+xwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeJn8HAAD//8SKCXw=") write$tun(r1, &(0x7f0000000000)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8ed, 0x0, 0x6}}}}}}}}, 0x4e) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) 0s ago: executing program 8 (id=3219): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0xc, [{0xd, 0x8ff, 0x7}]}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f00000005c0)=""/142, 0x35, 0x8e, 0x0, 0x20000000}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)={0x24, 0x0, 0x1, 0x0, 0x3, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x6433}]}, 0x24}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='md0', 0x3) kernel console output (not intermixed with test programs): 0-000000000000. [ 405.077250][T17227] loop9: detected capacity change from 0 to 512 [ 405.121063][T17227] bond1: option mode: unable to set because the bond device has slaves [ 405.127970][T17229] syzkaller1: entered promiscuous mode [ 405.127987][T17229] syzkaller1: entered allmulticast mode [ 405.150391][T17234] tipc: Enabled bearer , priority 0 [ 405.170565][T17234] syzkaller0: entered promiscuous mode [ 405.170643][T17234] syzkaller0: entered allmulticast mode [ 405.171183][T17234] tipc: Resetting bearer [ 405.174245][T17233] tipc: Resetting bearer [ 405.207908][T17233] tipc: Disabling bearer [ 405.275893][T17229] loop1: detected capacity change from 0 to 512 [ 405.276192][T17229] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ' [ 405.283628][T17240] FAULT_INJECTION: forcing a failure. [ 405.283628][T17240] name failslab, interval 1, probability 0, space 0, times 0 [ 405.283657][T17240] CPU: 0 UID: 0 PID: 17240 Comm: syz.8.2777 Not tainted syzkaller #0 PREEMPT(lazy) [ 405.283685][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 405.283714][T17240] Call Trace: [ 405.283722][T17240] [ 405.283767][T17240] __dump_stack+0x1d/0x30 [ 405.283805][T17240] dump_stack_lvl+0x95/0xd0 [ 405.283830][T17240] dump_stack+0x15/0x1b [ 405.283853][T17240] should_fail_ex+0x262/0x280 [ 405.283881][T17240] ? copy_sighand+0x52/0x1a0 [ 405.283910][T17240] should_failslab+0x8c/0xb0 [ 405.283945][T17240] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 405.283976][T17240] ? copy_sighand+0x52/0x1a0 [ 405.284068][T17240] copy_sighand+0x52/0x1a0 [ 405.284095][T17240] copy_process+0x102c/0x2360 [ 405.284203][T17240] kernel_clone+0x1c0/0x5f0 [ 405.284228][T17240] ? do_futex+0x391/0x460 [ 405.284321][T17240] __x64_sys_clone+0x143/0x180 [ 405.284354][T17240] x64_sys_call+0x2479/0x2550 [ 405.284383][T17240] do_syscall_64+0x112/0x360 [ 405.284434][T17240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.284499][T17240] RIP: 0033:0x7f5881c3e159 [ 405.284517][T17240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.284558][T17240] RSP: 002b:00007f5880696fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 405.284581][T17240] RAX: ffffffffffffffda RBX: 00007f5881ec5fa0 RCX: 00007f5881c3e159 [ 405.284595][T17240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.284612][T17240] RBP: 00007f5881cd506b R08: 0000000000000000 R09: 0000000000000000 [ 405.284627][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.284642][T17240] R13: 00007f5881ec6038 R14: 00007f5881ec5fa0 R15: 00007ffee7e49948 [ 405.284744][T17240] [ 405.483195][T17245] tipc: Enabling of bearer rejected, already enabled [ 405.485841][T17245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=17245 comm=syz.4.2780 [ 405.607222][T17248] loop8: detected capacity change from 0 to 1024 [ 405.708641][T17258] loop4: detected capacity change from 0 to 512 [ 406.279411][T17264] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 406.575012][T17248] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 406.575251][T17248] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 406.581158][T17248] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: inode #32: comm syz.8.2779: iget: special inode unallocated [ 406.581524][T17248] loop8: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 406.583187][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 406.583224][ C1] EXT4-fs (loop8): initial error at time 1790977096: ext4_get_journal_inode:5927: inode 32 [ 406.583253][ C1] EXT4-fs (loop8): last error at time 1790977096: ext4_get_journal_inode:5927: inode 32 [ 406.585740][T17248] EXT4-fs (loop8): Remounting filesystem read-only [ 406.585904][T17248] EXT4-fs (loop8): no journal found [ 406.585935][T17248] EXT4-fs (loop8): can't get journal size [ 406.598403][T17248] EXT4-fs (loop8): filesystem is read-only [ 406.613596][T17248] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 406.629110][T17258] bond1: option mode: unable to set because the bond device has slaves [ 406.754776][T17272] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2785'. [ 406.755271][T17272] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2785'. [ 406.839295][T12832] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.895794][T17274] loop1: detected capacity change from 0 to 512 [ 406.948479][T17274] bond1: option mode: unable to set because the bond device has slaves [ 407.105353][T17282] tipc: Enabled bearer , priority 0 [ 407.120837][T17284] random: crng reseeded on system resumption [ 407.162259][T17282] syzkaller0: entered promiscuous mode [ 407.162281][T17282] syzkaller0: entered allmulticast mode [ 407.162812][T17282] tipc: Resetting bearer [ 407.178900][T17281] tipc: Resetting bearer [ 407.188856][T17279] loop4: detected capacity change from 0 to 1024 [ 407.231238][T17279] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.315212][T17281] tipc: Disabling bearer [ 407.348510][T17279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 407.348859][T17279] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.382552][T17279] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.2791: bg 0: block 112: padding at end of block bitmap is not set [ 407.383238][T17279] EXT4-fs (loop4): Remounting filesystem read-only [ 407.449600][T17299] tipc: Enabling of bearer rejected, already enabled [ 407.450451][T17299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=17299 comm=syz.8.2796 [ 407.505228][T17302] random: crng reseeded on system resumption [ 407.599972][T17302] loop8: detected capacity change from 0 to 1024 [ 407.622769][T17302] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 407.628563][T17302] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 407.629368][T17302] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: inode #32: comm syz.8.2797: iget: special inode unallocated [ 407.629420][T17302] loop8: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 407.630080][T17302] EXT4-fs (loop8): Remounting filesystem read-only [ 407.630191][T17302] EXT4-fs (loop8): no journal found [ 407.630223][T17302] EXT4-fs (loop8): can't get journal size [ 407.631480][T17302] EXT4-fs (loop8): filesystem is read-only [ 407.704291][T17302] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 407.732119][T12832] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.988837][T13006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 408.236106][T17319] loop4: detected capacity change from 0 to 512 [ 408.250060][T17319] bond1: option mode: unable to set because the bond device has slaves [ 408.463110][T17317] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.481264][T17328] tipc: Enabled bearer , priority 0 [ 408.501163][T17315] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 408.503417][T17315] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 408.504882][T17315] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.2802: iget: special inode unallocated [ 408.504914][T17315] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 408.505154][T17315] EXT4-fs (loop1): Remounting filesystem read-only [ 408.505235][T17315] EXT4-fs (loop1): no journal found [ 408.505317][T17315] EXT4-fs (loop1): can't get journal size [ 408.509207][T17315] EXT4-fs (loop1): filesystem is read-only [ 408.585408][T17315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 408.605125][T17317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 408.605778][T17328] syzkaller0: entered promiscuous mode [ 408.605798][T17328] syzkaller0: entered allmulticast mode [ 408.606470][T17328] tipc: Resetting bearer [ 408.641808][T17317] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.643660][T17327] tipc: Resetting bearer [ 408.649988][T17327] tipc: Disabling bearer [ 408.696146][ T29] audit: type=1400 audit(1790977098.615:4529): avc: denied { write } for pid=17316 comm="syz.3.2803" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.704535][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.748366][T17317] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.2803: lblock 3 mapped to illegal pblock 3 (length 3) [ 408.770465][T17317] EXT4-fs (loop3): Remounting filesystem read-only [ 408.809318][T17336] random: crng reseeded on system resumption [ 408.821040][T12777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 408.914381][T17339] tipc: Resetting bearer [ 408.945790][T17339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.953659][T17339] FAULT_INJECTION: forcing a failure. [ 408.953659][T17339] name fail_futex, interval 1, probability 0, space 0, times 1 [ 408.953689][T17339] CPU: 1 UID: 0 PID: 17339 Comm: syz.8.2810 Not tainted syzkaller #0 PREEMPT(lazy) [ 408.953736][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 408.953753][T17339] Call Trace: [ 408.953760][T17339] [ 408.953769][T17339] __dump_stack+0x1d/0x30 [ 408.953793][T17339] dump_stack_lvl+0x95/0xd0 [ 408.953890][T17339] dump_stack+0x15/0x1b [ 408.953914][T17339] should_fail_ex+0x262/0x280 [ 408.953943][T17339] should_fail+0xb/0x20 [ 408.954000][T17339] get_futex_key+0x12d/0xb10 [ 408.954031][T17339] futex_wake+0x89/0x400 [ 408.954057][T17339] do_futex+0x3f8/0x460 [ 408.954125][T17339] ? tcp_setsockopt+0x98/0xb0 [ 408.954196][T17339] __se_sys_futex+0x2f6/0x370 [ 408.954229][T17339] ? fput+0x91/0xc0 [ 408.954252][T17339] __x64_sys_futex+0x78/0x90 [ 408.954281][T17339] x64_sys_call+0x22e2/0x2550 [ 408.954363][T17339] do_syscall_64+0x112/0x360 [ 408.954391][T17339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.954474][T17339] RIP: 0033:0x7f5881c3e159 [ 408.954493][T17339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.954512][T17339] RSP: 002b:00007f58806970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 408.954536][T17339] RAX: ffffffffffffffda RBX: 00007f5881ec5fa8 RCX: 00007f5881c3e159 [ 408.954550][T17339] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5881ec5fac [ 408.954592][T17339] RBP: 00007f5881ec5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 408.954608][T17339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.954670][T17339] R13: 00007f5881ec6038 R14: 00007ffee7e49860 R15: 00007ffee7e49948 [ 408.954692][T17339] [ 409.140002][T17311] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.215369][T17311] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 409.215695][T17311] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.259510][ T29] audit: type=1400 audit(1790977099.151:4530): avc: denied { write } for pid=17310 comm="syz.9.2801" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 409.291492][T17347] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.335157][T17311] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: block 3: comm syz.9.2801: lblock 3 mapped to illegal pblock 3 (length 3) [ 409.336334][T17336] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 409.336507][T17336] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 409.337344][T17311] EXT4-fs (loop9): Remounting filesystem read-only [ 409.340395][T17336] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: inode #32: comm syz.4.2808: iget: special inode unallocated [ 409.340449][T17336] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 409.343506][T17336] EXT4-fs (loop4): Remounting filesystem read-only [ 409.343719][T17336] EXT4-fs (loop4): no journal found [ 409.343785][T17336] EXT4-fs (loop4): can't get journal size [ 409.354952][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 409.355008][ C0] EXT4-fs (loop4): initial error at time 1790977099: ext4_get_journal_inode:5927: inode 32 [ 409.355114][ C0] EXT4-fs (loop4): last error at time 1790977099: ext4_get_journal_inode:5927: inode 32 [ 409.383258][T17351] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.402729][T17344] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.422443][T17336] EXT4-fs (loop4): filesystem is read-only [ 409.437953][T17336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 409.447161][T17344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 409.447637][T17344] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.463888][ T29] audit: type=1400 audit(1790977099.335:4531): avc: denied { write } for pid=17342 comm="syz.1.2807" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 409.493120][T17344] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.2807: lblock 3 mapped to illegal pblock 3 (length 3) [ 409.493695][T17344] EXT4-fs (loop1): Remounting filesystem read-only [ 409.554631][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 409.598588][T17362] bond1: option mode: unable to set because the bond device has slaves [ 409.601963][T13006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.638435][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 409.804288][T17373] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 409.804581][T17373] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 409.807208][T17373] EXT4-fs error (device loop3): ext4_get_journal_inode:5927: inode #32: comm syz.3.2820: iget: special inode unallocated [ 409.807261][T17373] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 409.809635][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 409.809659][ C1] EXT4-fs (loop3): initial error at time 1790977099: ext4_get_journal_inode:5927: inode 32 [ 409.809696][ C1] EXT4-fs (loop3): last error at time 1790977099: ext4_get_journal_inode:5927: inode 32 [ 409.875461][T17373] EXT4-fs (loop3): Remounting filesystem read-only [ 409.875634][T17373] EXT4-fs (loop3): no journal found [ 409.875657][T17373] EXT4-fs (loop3): can't get journal size [ 409.899494][T17373] EXT4-fs (loop3): filesystem is read-only [ 409.903860][T17373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 409.970877][T12777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.011040][T17376] EXT4-fs: Ignoring removed mblk_io_submit option [ 410.020883][T17371] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 410.021055][T17371] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 410.021904][T17371] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.2819: iget: special inode unallocated [ 410.022066][T17371] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 410.022265][T17371] EXT4-fs (loop1): Remounting filesystem read-only [ 410.022352][T17371] EXT4-fs (loop1): no journal found [ 410.022372][T17371] EXT4-fs (loop1): can't get journal size [ 410.026175][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 410.026192][ C0] EXT4-fs (loop1): initial error at time 1790977099: ext4_get_journal_inode:5927: inode 32 [ 410.026231][ C0] EXT4-fs (loop1): last error at time 1790977099: ext4_get_journal_inode:5927: inode 32 [ 410.036560][T17371] EXT4-fs (loop1): filesystem is read-only [ 410.037414][T17371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 410.062804][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.149950][T17376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 410.150331][T17376] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.171733][ T29] audit: type=1400 audit(1790977099.982:4532): avc: denied { write } for pid=17375 comm="syz.9.2821" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 410.203047][T17376] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: block 3: comm syz.9.2821: lblock 3 mapped to illegal pblock 3 (length 3) [ 410.281887][T17394] SELinux: failed to load policy [ 410.388626][T17376] EXT4-fs (loop9): Remounting filesystem read-only [ 411.250654][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 411.771109][T17403] set_capacity_and_notify: 9 callbacks suppressed [ 411.771159][T17403] loop9: detected capacity change from 0 to 1024 [ 411.800712][T17403] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 411.800887][T17403] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 411.826137][T17403] EXT4-fs error (device loop9): ext4_get_journal_inode:5927: inode #32: comm syz.9.2828: iget: special inode unallocated [ 411.826176][T17403] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 411.826921][T17403] EXT4-fs (loop9): Remounting filesystem read-only [ 411.827127][T17403] EXT4-fs (loop9): no journal found [ 411.827147][T17403] EXT4-fs (loop9): can't get journal size [ 411.834323][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 411.834345][ C1] EXT4-fs (loop9): initial error at time 1790977101: ext4_get_journal_inode:5927: inode 32 [ 411.834380][ C1] EXT4-fs (loop9): last error at time 1790977101: ext4_get_journal_inode:5927: inode 32 [ 411.891563][T17403] EXT4-fs (loop9): filesystem is read-only [ 411.899244][T17403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 411.948441][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.978590][T17410] loop9: detected capacity change from 0 to 512 [ 411.986336][T17410] bond1: option mode: unable to set because the bond device has slaves [ 412.006812][T17408] loop8: detected capacity change from 0 to 1024 [ 412.027945][T17408] EXT4-fs: Ignoring removed mblk_io_submit option [ 412.082746][T17408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 412.086894][T17408] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.108793][ T29] audit: type=1400 audit(1790977101.783:4533): avc: denied { write } for pid=17407 comm="syz.8.2830" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 412.138192][T17408] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: block 3: comm syz.8.2830: lblock 3 mapped to illegal pblock 3 (length 3) [ 412.139026][T17408] EXT4-fs (loop8): Remounting filesystem read-only [ 412.309249][T12832] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 413.110741][T17430] loop3: detected capacity change from 0 to 512 [ 413.131367][T17430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2835'. [ 413.158742][T17432] tipc: Resetting bearer [ 413.171718][T17432] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 413.175680][T17432] FAULT_INJECTION: forcing a failure. [ 413.175680][T17432] name failslab, interval 1, probability 0, space 0, times 0 [ 413.175710][T17432] CPU: 0 UID: 0 PID: 17432 Comm: syz.3.2836 Not tainted syzkaller #0 PREEMPT(lazy) [ 413.175725][T17432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 413.175733][T17432] Call Trace: [ 413.175737][T17432] [ 413.175742][T17432] __dump_stack+0x1d/0x30 [ 413.175872][T17432] dump_stack_lvl+0x95/0xd0 [ 413.175884][T17432] dump_stack+0x15/0x1b [ 413.175896][T17432] should_fail_ex+0x262/0x280 [ 413.175917][T17432] should_failslab+0x8c/0xb0 [ 413.175935][T17432] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 413.176006][T17432] ? sock_alloc_inode+0x36/0xf0 [ 413.176022][T17432] ? sock_alloc_inode+0x36/0xf0 [ 413.176088][T17432] ? selinux_socket_create+0xfd/0x180 [ 413.176114][T17432] ? __pfx_sock_alloc_inode+0x10/0x10 [ 413.176143][T17432] sock_alloc_inode+0x36/0xf0 [ 413.176169][T17432] alloc_inode+0x40/0x170 [ 413.176214][T17432] __sock_create+0x121/0x580 [ 413.176308][T17432] ? __se_sys_futex+0x2f6/0x370 [ 413.176402][T17432] ? xfd_validate_state+0x45/0xf0 [ 413.176419][T17432] __sys_socket+0xaf/0x180 [ 413.176510][T17432] __x64_sys_socket+0x3f/0x50 [ 413.176526][T17432] x64_sys_call+0x246e/0x2550 [ 413.176541][T17432] do_syscall_64+0x112/0x360 [ 413.176563][T17432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.176577][T17432] RIP: 0033:0x7feaad84e159 [ 413.176587][T17432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.176689][T17432] RSP: 002b:00007feaac2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 413.176702][T17432] RAX: ffffffffffffffda RBX: 00007feaadad5fa0 RCX: 00007feaad84e159 [ 413.176761][T17432] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 413.176768][T17432] RBP: 00007feaad8e506b R08: 0000000000000000 R09: 0000000000000000 [ 413.176776][T17432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.176784][T17432] R13: 00007feaadad6038 R14: 00007feaadad5fa0 R15: 00007ffea9b59e28 [ 413.176795][T17432] [ 413.176838][T17432] socket: no more sockets [ 413.347358][T17434] loop3: detected capacity change from 0 to 1024 [ 413.350874][T17434] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.379312][T17434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 413.379723][T17434] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.393682][T17389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.394272][ T29] audit: type=1400 audit(1790977102.965:4534): avc: denied { write } for pid=17433 comm="syz.3.2837" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 413.438894][T12777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 414.465098][T17439] loop1: detected capacity change from 0 to 1024 [ 414.515739][T17453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 414.529172][T17439] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 414.529489][T17439] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 414.551526][T17448] loop3: detected capacity change from 0 to 1024 [ 414.555605][T17448] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.567622][T17439] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.2839: iget: special inode unallocated [ 414.567664][T17439] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 414.569345][T17439] EXT4-fs (loop1): Remounting filesystem read-only [ 414.569716][T17439] EXT4-fs (loop1): no journal found [ 414.569797][T17439] EXT4-fs (loop1): can't get journal size [ 414.573615][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 414.573634][ C0] EXT4-fs (loop1): initial error at time 1790977104: ext4_get_journal_inode:5927: inode 32 [ 414.573660][ C0] EXT4-fs (loop1): last error at time 1790977104: ext4_get_journal_inode:5927: inode 32 [ 414.626939][T17448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 414.627503][T17448] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.646844][ T29] audit: type=1400 audit(1790977104.120:4535): avc: denied { write } for pid=17444 comm="syz.3.2838" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.651937][T17445] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.2838: lblock 3 mapped to illegal pblock 3 (length 3) [ 414.652129][T17445] EXT4-fs (loop3): Remounting filesystem read-only [ 414.696236][T17439] EXT4-fs (loop1): filesystem is read-only [ 414.712975][T17439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 414.786976][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.873345][T12777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 414.918335][T17465] loop9: detected capacity change from 0 to 512 [ 414.941992][T17465] bond1: option mode: unable to set because the bond device has slaves [ 415.171707][T17474] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 415.676205][T17483] loop4: detected capacity change from 0 to 1024 [ 415.682738][T17483] EXT4-fs: Ignoring removed mblk_io_submit option [ 415.698169][T17479] loop1: detected capacity change from 0 to 1024 [ 415.724893][T17479] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 415.725056][T17479] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 415.725923][T17479] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.2851: iget: special inode unallocated [ 415.726041][T17479] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 415.726468][T17479] EXT4-fs (loop1): Remounting filesystem read-only [ 415.726609][T17479] EXT4-fs (loop1): no journal found [ 415.726718][T17479] EXT4-fs (loop1): can't get journal size [ 415.730039][T17479] EXT4-fs (loop1): filesystem is read-only [ 415.778038][T17479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 415.778674][T17483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 415.779088][T17483] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.788648][ T29] audit: type=1400 audit(1790977105.173:4536): avc: denied { write } for pid=17482 comm="syz.4.2844" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.795365][T17495] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 415.806073][T17479] EXT4-fs (loop1): shut down requested (2) [ 415.854193][T17497] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.2844: bg 0: block 112: padding at end of block bitmap is not set [ 415.881435][T17483] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.2844: lblock 3 mapped to illegal pblock 3 (length 3) [ 415.882050][T17483] EXT4-fs (loop4): Remounting filesystem read-only [ 415.884212][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.006054][T17505] bond1: option mode: unable to set because the bond device is up [ 416.041237][T17503] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 416.041360][T17503] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 416.043013][T17503] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.2858: iget: special inode unallocated [ 416.043079][T17503] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 416.043450][T17503] EXT4-fs (loop1): Remounting filesystem read-only [ 416.043606][T17503] EXT4-fs (loop1): no journal found [ 416.043669][T17503] EXT4-fs (loop1): can't get journal size [ 416.045025][T17503] EXT4-fs (loop1): filesystem is read-only [ 416.048081][T13006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 416.075216][T17503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 416.157318][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.218324][T17518] syzkaller1: entered promiscuous mode [ 416.218346][T17518] syzkaller1: entered allmulticast mode [ 416.237802][T17516] tipc: Enabling of bearer rejected, already enabled [ 416.245170][T17516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=17516 comm=syz.1.2862 [ 416.307450][T17518] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2863'. [ 416.509581][T17518] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ' [ 416.713894][T17526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.756503][T17529] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.240224][T17531] set_capacity_and_notify: 3 callbacks suppressed [ 417.240240][T17531] loop9: detected capacity change from 0 to 512 [ 417.262531][T17531] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.262615][T17531] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.299426][ T29] audit: type=1400 audit(1790977106.567:4537): avc: denied { write } for pid=17530 comm="syz.9.2868" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.380675][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.428608][T17541] loop9: detected capacity change from 0 to 512 [ 417.439660][T17541] bond1: option mode: unable to set because the bond device has slaves [ 417.555464][T17546] loop9: detected capacity change from 0 to 512 [ 417.592794][T17546] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.592858][T17546] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.657446][ T29] audit: type=1400 audit(1790977106.900:4538): avc: denied { write } for pid=17545 comm="syz.9.2872" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.730281][ T29] audit: type=1400 audit(1790977106.974:4539): avc: denied { write } for pid=13264 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.730318][ T29] audit: type=1400 audit(1790977106.974:4540): avc: denied { write } for pid=13264 comm="syz-executor" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.730356][ T29] audit: type=1400 audit(1790977106.974:4541): avc: denied { write } for pid=13264 comm="syz-executor" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.730381][ T29] audit: type=1400 audit(1790977106.974:4542): avc: denied { write } for pid=13264 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.731074][ T29] audit: type=1400 audit(1790977106.974:4543): avc: denied { write } for pid=13264 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.731366][ T29] audit: type=1400 audit(1790977106.974:4544): avc: denied { write } for pid=13264 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.731770][ T29] audit: type=1400 audit(1790977106.974:4545): avc: denied { write } for pid=13264 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.732788][T17539] loop3: detected capacity change from 0 to 1024 [ 417.793550][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.898135][T17557] syzkaller1: entered promiscuous mode [ 417.898165][T17557] syzkaller1: entered allmulticast mode [ 417.911785][T17539] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.949258][T17539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 417.949540][T17539] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.011896][T17557] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2876'. [ 418.054555][T17563] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.2870: bg 0: block 112: padding at end of block bitmap is not set [ 418.055339][T17539] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.2870: lblock 3 mapped to illegal pblock 3 (length 3) [ 418.056192][T17563] EXT4-fs (loop3): Remounting filesystem read-only [ 418.210143][T17557] loop9: detected capacity change from 0 to 512 [ 418.228135][T17557] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ' [ 418.272818][T12777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 418.333117][T17566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 418.410893][T17579] loop3: detected capacity change from 0 to 512 [ 418.428706][T17579] bond1: option mode: unable to set because the bond device has slaves [ 418.460299][T17575] syzkaller0: entered promiscuous mode [ 418.460320][T17575] syzkaller0: entered allmulticast mode [ 418.621098][T17586] loop3: detected capacity change from 0 to 1024 [ 418.638668][T17586] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.782830][T17586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 418.783779][T17586] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.899934][T17596] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.2884: bg 0: block 112: padding at end of block bitmap is not set [ 418.900409][T17596] EXT4-fs (loop3): Remounting filesystem read-only [ 419.084502][T12777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 419.418321][T17599] loop8: detected capacity change from 0 to 1024 [ 419.455720][T17599] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 419.455882][T17599] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 419.459726][T17599] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: inode #32: comm syz.8.2887: iget: special inode unallocated [ 419.459877][T17599] loop8: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 419.460235][T17599] EXT4-fs (loop8): Remounting filesystem read-only [ 419.460420][T17599] EXT4-fs (loop8): no journal found [ 419.460442][T17599] EXT4-fs (loop8): can't get journal size [ 419.471060][T17599] EXT4-fs (loop8): filesystem is read-only [ 419.473874][T17599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 419.491948][T17601] loop3: detected capacity change from 0 to 1024 [ 419.493183][T17599] EXT4-fs (loop8): shut down requested (2) [ 419.536366][T17601] EXT4-fs: Ignoring removed mblk_io_submit option [ 419.546702][T17605] syzkaller1: entered promiscuous mode [ 419.546722][T17605] syzkaller1: entered allmulticast mode [ 419.566667][T12832] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.610990][T17601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 419.611305][T17601] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.669064][T17612] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2890'. [ 419.688171][T17612] loop9: detected capacity change from 0 to 512 [ 419.688487][T17612] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ' [ 419.689771][T17613] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.2888: bg 0: block 112: padding at end of block bitmap is not set [ 419.691309][T17613] EXT4-fs (loop3): Remounting filesystem read-only [ 419.893496][T12777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 419.905586][T17618] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 419.945449][T17620] bond1: option mode: unable to set because the bond device has slaves [ 419.974460][T17603] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 419.974655][T17603] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 419.997892][T17603] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #32: comm syz.1.2889: iget: special inode unallocated [ 419.998263][T17603] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 420.005703][T17603] EXT4-fs (loop1): Remounting filesystem read-only [ 420.005957][T17603] EXT4-fs (loop1): no journal found [ 420.005981][T17603] EXT4-fs (loop1): can't get journal size [ 420.007515][T17603] EXT4-fs (loop1): filesystem is read-only [ 420.074930][T17603] EXT4-fs (loop1): shut down requested (2) [ 420.090507][T17629] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.161285][T17633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2897'. [ 420.240123][T17622] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 420.240382][T17622] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 420.241865][T17622] EXT4-fs error (device loop9): ext4_get_journal_inode:5927: inode #32: comm syz.9.2895: iget: special inode unallocated [ 420.241985][T17622] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 420.242951][T17622] EXT4-fs (loop9): Remounting filesystem read-only [ 420.243333][T17622] EXT4-fs (loop9): no journal found [ 420.243398][T17622] EXT4-fs (loop9): can't get journal size [ 420.247213][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 420.247299][ C0] EXT4-fs (loop9): initial error at time 1790977109: ext4_get_journal_inode:5927: inode 32 [ 420.247462][ C0] EXT4-fs (loop9): last error at time 1790977109: ext4_get_journal_inode:5927: inode 32 [ 420.285153][T17622] EXT4-fs (loop9): filesystem is read-only [ 420.305333][T17639] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 420.320203][T17622] EXT4-fs (loop9): shut down requested (2) [ 421.196331][T17641] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.300076][T17655] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.303519][T17641] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.354786][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 421.354803][ T29] audit: type=1400 audit(1790977110.317:4561): avc: denied { write } for pid=17640 comm="syz.3.2898" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.410339][T17655] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.412318][T17641] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.2898: lblock 3 mapped to illegal pblock 3 (length 3) [ 421.412989][T17641] EXT4-fs (loop3): Remounting filesystem read-only [ 421.443821][ T29] audit: type=1400 audit(1790977110.391:4562): avc: denied { write } for pid=17654 comm="syz.1.2905" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.510687][T17655] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.2905: lblock 3 mapped to illegal pblock 3 (length 3) [ 421.511205][T17655] EXT4-fs (loop1): Remounting filesystem read-only [ 421.749637][T17673] syzkaller1: entered promiscuous mode [ 421.749775][T17673] syzkaller1: entered allmulticast mode [ 421.768688][T17673] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2910'. [ 421.900410][T17673] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ' [ 422.007707][T17676] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.053331][T17676] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.065298][ T29] audit: type=1400 audit(1790977110.973:4563): avc: denied { write } for pid=17675 comm="syz.1.2911" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.106692][T17676] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.2911: lblock 3 mapped to illegal pblock 3 (length 3) [ 422.112948][T17676] EXT4-fs (loop1): Remounting filesystem read-only [ 422.234118][T17692] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.240906][T17692] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.244918][ T29] audit: type=1400 audit(1790977111.139:4564): avc: denied { write } for pid=17691 comm="syz.9.2917" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.251735][T17692] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: block 3: comm syz.9.2917: lblock 3 mapped to illegal pblock 3 (length 3) [ 422.251951][T17692] EXT4-fs (loop9): Remounting filesystem read-only [ 422.418333][T17697] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 422.504558][T17687] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 422.504859][T17687] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 422.511141][T17701] bond1: option mode: unable to set because the bond device has slaves [ 422.540368][T17687] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: inode #32: comm syz.8.2915: iget: special inode unallocated [ 422.540538][T17687] loop8: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 422.541009][T17687] EXT4-fs (loop8): Remounting filesystem read-only [ 422.541185][T17687] EXT4-fs (loop8): no journal found [ 422.541215][T17687] EXT4-fs (loop8): can't get journal size [ 422.542446][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 422.542464][ C1] EXT4-fs (loop8): initial error at time 1790977111: ext4_get_journal_inode:5927: inode 32 [ 422.542504][ C1] EXT4-fs (loop8): last error at time 1790977111: ext4_get_journal_inode:5927: inode 32 [ 422.569452][T17687] EXT4-fs (loop8): filesystem is read-only [ 422.604545][T17687] EXT4-fs (loop8): shut down requested (2) [ 422.736612][T17709] set_capacity_and_notify: 12 callbacks suppressed [ 422.736705][T17709] loop8: detected capacity change from 0 to 512 [ 422.770526][T17709] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2922'. [ 422.926911][T17716] loop1: detected capacity change from 0 to 512 [ 422.947811][T17716] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.975759][ T29] audit: type=1400 audit(1790977111.813:4565): avc: denied { write } for pid=17715 comm="syz.1.2925" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.059718][ T29] audit: type=1400 audit(1790977111.887:4566): avc: denied { write } for pid=12895 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.060462][ T29] audit: type=1400 audit(1790977111.887:4567): avc: denied { write } for pid=12895 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.060786][ T29] audit: type=1400 audit(1790977111.887:4568): avc: denied { write } for pid=12895 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.061948][ T29] audit: type=1400 audit(1790977111.887:4569): avc: denied { write } for pid=12895 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.062012][ T29] audit: type=1400 audit(1790977111.887:4570): avc: denied { write } for pid=12895 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.494725][T17722] loop1: detected capacity change from 0 to 1024 [ 423.520596][T17722] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.546865][T17722] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.574747][T17722] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2926: bg 0: block 112: padding at end of block bitmap is not set [ 423.576667][T17722] EXT4-fs (loop1): Remounting filesystem read-only [ 423.667566][T17727] loop9: detected capacity change from 0 to 1024 [ 423.681965][T17727] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.712660][T17727] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.776100][T17735] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.2928: bg 0: block 112: padding at end of block bitmap is not set [ 423.776342][T17735] EXT4-fs (loop9): Remounting filesystem read-only [ 423.796665][T17736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 423.973346][T17741] loop3: detected capacity change from 0 to 512 [ 423.983684][T17741] bond1: option mode: unable to set because the bond device has slaves [ 424.022753][T17744] loop9: detected capacity change from 0 to 512 [ 424.113596][T17744] bond1: option mode: unable to set because the bond device has slaves [ 424.204331][T17749] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2932'. [ 424.355782][T17752] loop3: detected capacity change from 0 to 512 [ 424.418984][T17752] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 424.519122][T17756] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.893967][T17768] syzkaller1: entered promiscuous mode [ 424.894006][T17768] syzkaller1: entered allmulticast mode [ 424.906654][T17768] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2939'. [ 425.014258][T17768] loop1: detected capacity change from 0 to 512 [ 425.019228][T17768] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ' [ 425.199510][T17770] loop9: detected capacity change from 0 to 1024 [ 425.213368][T17770] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.271394][T17770] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.404071][T17779] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.2940: bg 0: block 112: padding at end of block bitmap is not set [ 425.404453][T17779] EXT4-fs (loop9): Remounting filesystem read-only [ 425.821791][T17787] loop8: detected capacity change from 0 to 512 [ 425.825727][T17787] bond1: option mode: unable to set because the bond device is up [ 426.366817][T17803] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 426.367825][T17802] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 426.775105][T17813] tipc: Enabling of bearer rejected, already enabled [ 426.835606][T17815] syzkaller1: entered promiscuous mode [ 426.835625][T17815] syzkaller1: entered allmulticast mode [ 426.894134][T17815] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2953'. [ 426.973943][T17819] EXT4-fs: Ignoring removed mblk_io_submit option [ 426.975196][T17820] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ' [ 427.976551][T17819] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.003251][T17819] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.2955: bg 0: block 112: padding at end of block bitmap is not set [ 428.003585][T17819] EXT4-fs (loop9): Remounting filesystem read-only [ 428.017920][T17833] bond1: option mode: unable to set because the bond device has slaves [ 428.298339][T17845] set_capacity_and_notify: 5 callbacks suppressed [ 428.298392][T17845] loop9: detected capacity change from 0 to 1024 [ 428.317635][T17845] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.320840][T17849] syzkaller1: entered promiscuous mode [ 428.320859][T17849] syzkaller1: entered allmulticast mode [ 428.338647][T17845] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.355867][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 428.355932][ T29] audit: type=1400 audit(1790977116.791:4607): avc: denied { write } for pid=17844 comm="syz.9.2961" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.376774][T17849] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2963'. [ 428.428977][T17849] loop4: detected capacity change from 0 to 512 [ 428.434350][T17849] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ' [ 428.518216][T17854] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.2961: bg 0: block 112: padding at end of block bitmap is not set [ 428.518369][T17854] EXT4-fs (loop9): Remounting filesystem read-only [ 429.466090][T17864] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 429.541485][T17866] loop3: detected capacity change from 0 to 512 [ 429.682235][T17866] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 429.707987][ T29] audit: type=1400 audit(1790977118.029:4608): avc: denied { write } for pid=17865 comm="syz.3.2967" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 429.827270][T17876] random: crng reseeded on system resumption [ 430.198466][T17881] syzkaller1: entered promiscuous mode [ 430.198541][T17881] syzkaller1: entered allmulticast mode [ 430.291955][T17881] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2970'. [ 430.504737][T17881] loop4: detected capacity change from 0 to 512 [ 430.515930][T17881] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ' [ 431.556706][T17902] tipc: Enabling of bearer rejected, already enabled [ 431.557746][T17902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=17902 comm=syz.3.2976 [ 431.772098][T17904] loop9: detected capacity change from 0 to 1024 [ 431.777530][T17904] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.851097][T17910] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 432.506586][T17904] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.525401][ T29] audit: type=1400 audit(1790977120.624:4609): avc: denied { write } for pid=17903 comm="syz.9.2977" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 432.570482][T17920] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.2977: bg 0: block 112: padding at end of block bitmap is not set [ 432.572045][T17920] EXT4-fs (loop9): Remounting filesystem read-only [ 432.659786][T17919] loop4: detected capacity change from 0 to 512 [ 432.774076][T17919] bond1: option mode: unable to set because the bond device has slaves [ 432.814984][T17923] random: crng reseeded on system resumption [ 433.036923][T17933] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 433.044926][T17935] tipc: Resetting bearer [ 433.056853][T17935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 433.098965][T17936] FAULT_INJECTION: forcing a failure. [ 433.098965][T17936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.099018][T17936] CPU: 1 UID: 0 PID: 17936 Comm: syz.4.2987 Not tainted syzkaller #0 PREEMPT(lazy) [ 433.099048][T17936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 433.099064][T17936] Call Trace: [ 433.099072][T17936] [ 433.099081][T17936] __dump_stack+0x1d/0x30 [ 433.099109][T17936] dump_stack_lvl+0x95/0xd0 [ 433.099188][T17936] dump_stack+0x15/0x1b [ 433.099233][T17936] should_fail_ex+0x262/0x280 [ 433.099261][T17936] should_fail+0xb/0x20 [ 433.099285][T17936] should_fail_usercopy+0x1a/0x20 [ 433.099314][T17936] _copy_from_user+0x1c/0xb0 [ 433.099387][T17936] do_ip_vs_set_ctl+0x1cd/0xab0 [ 433.099413][T17936] ? __futex_wait+0x1fd/0x260 [ 433.099443][T17936] nf_setsockopt+0x199/0x1b0 [ 433.099473][T17936] ip_setsockopt+0x102/0x110 [ 433.099575][T17936] tcp_setsockopt+0x98/0xb0 [ 433.099606][T17936] sock_common_setsockopt+0x69/0x80 [ 433.099640][T17936] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 433.099696][T17936] __sys_setsockopt+0x184/0x200 [ 433.099722][T17936] __x64_sys_setsockopt+0x64/0x80 [ 433.099746][T17936] x64_sys_call+0x248f/0x2550 [ 433.099796][T17936] do_syscall_64+0x112/0x360 [ 433.099841][T17936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.099867][T17936] RIP: 0033:0x7f25b2d8e159 [ 433.099885][T17936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.099906][T17936] RSP: 002b:00007f25b17c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 433.099980][T17936] RAX: ffffffffffffffda RBX: 00007f25b3016090 RCX: 00007f25b2d8e159 [ 433.099997][T17936] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000009 [ 433.100012][T17936] RBP: 00007f25b2e2506b R08: 0000000000000000 R09: 0000000000000000 [ 433.100027][T17936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.100041][T17936] R13: 00007f25b3016128 R14: 00007f25b3016090 R15: 00007ffc875141b8 [ 433.100127][T17936] [ 433.404961][T17942] random: crng reseeded on system resumption [ 433.484731][T17945] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 433.577566][T17949] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 434.449763][T17953] loop8: detected capacity change from 0 to 1024 [ 434.465719][T17953] EXT4-fs: Ignoring removed mblk_io_submit option [ 434.513573][T17953] EXT4-fs mount: 38 callbacks suppressed [ 434.513633][T17953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 434.514271][T17953] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.615450][ T29] audit: type=1400 audit(1790977122.573:4610): avc: denied { write } for pid=17952 comm="syz.8.2993" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.625317][T17953] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.2993: bg 0: block 112: padding at end of block bitmap is not set [ 434.627794][T17953] EXT4-fs (loop8): Remounting filesystem read-only [ 434.694494][T17963] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 434.740557][T17966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 435.338303][T17972] loop1: detected capacity change from 0 to 1024 [ 435.348609][T17972] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.398678][T17972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 435.399013][T17972] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.459436][ T29] audit: type=1400 audit(1790977123.331:4611): avc: denied { write } for pid=17971 comm="syz.1.2999" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.494106][T17972] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.2999: lblock 3 mapped to illegal pblock 3 (length 3) [ 435.496143][T17976] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2999: bg 0: block 112: padding at end of block bitmap is not set [ 435.496317][T17976] EXT4-fs (loop1): Remounting filesystem read-only [ 435.653258][T12832] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 435.719879][T17980] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 435.791879][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 435.897257][T17988] tipc: Enabled bearer , priority 0 [ 436.083427][T17988] syzkaller0: entered promiscuous mode [ 436.083451][T17988] syzkaller0: entered allmulticast mode [ 436.084057][T17988] tipc: Resetting bearer [ 436.166227][T17987] tipc: Resetting bearer [ 436.192220][T17987] tipc: Disabling bearer [ 436.275512][T17995] tipc: Resetting bearer [ 436.293934][T17995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.496337][T18001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.571446][T17999] loop8: detected capacity change from 0 to 1024 [ 436.584518][T17999] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.627070][T17999] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 436.627449][T17999] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.650706][ T29] audit: type=1400 audit(1790977124.430:4612): avc: denied { write } for pid=17998 comm="syz.8.3007" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.714296][T18009] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.3007: bg 0: block 112: padding at end of block bitmap is not set [ 436.717213][T18009] EXT4-fs (loop8): Remounting filesystem read-only [ 436.806416][T12832] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 436.813299][T18010] SELinux: failed to load policy [ 436.816507][ T29] audit: type=1400 audit(1790977124.596:4613): avc: denied { write } for pid=18002 comm="syz.4.3009" name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 437.320862][T18016] SELinux: failed to load policy [ 437.321275][ T29] audit: type=1400 audit(1790977125.058:4614): avc: denied { write } for pid=18011 comm="syz.8.3011" name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 438.379473][T18025] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 438.675755][T18031] syzkaller1: entered promiscuous mode [ 438.676006][T18031] syzkaller1: entered allmulticast mode [ 438.758757][T18031] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3016'. [ 438.921573][T18031] loop9: detected capacity change from 0 to 512 [ 438.945409][T18031] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ' [ 439.036707][T18034] tipc: Resetting bearer [ 439.077910][T18034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 439.198048][T18036] loop9: detected capacity change from 0 to 1024 [ 439.217723][T18036] EXT4-fs: Ignoring removed mblk_io_submit option [ 439.256667][T18036] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 439.257069][T18036] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.267919][ T29] audit: type=1400 audit(1790977126.859:4615): avc: denied { write } for pid=18035 comm="syz.9.3018" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.305464][T18036] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: block 3: comm syz.9.3018: lblock 3 mapped to illegal pblock 3 (length 3) [ 439.309083][T18036] EXT4-fs (loop9): Remounting filesystem read-only [ 439.447895][T18044] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 439.468823][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 439.853790][T18046] loop9: detected capacity change from 0 to 1024 [ 439.866089][T18046] EXT4-fs: Ignoring removed mblk_io_submit option [ 439.896792][T18046] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 439.897288][T18046] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.925680][ T29] audit: type=1400 audit(1790977127.468:4616): avc: denied { write } for pid=18045 comm="syz.9.3021" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.982480][T18046] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: block 3: comm syz.9.3021: lblock 3 mapped to illegal pblock 3 (length 3) [ 439.982536][T18054] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.3021: bg 0: block 112: padding at end of block bitmap is not set [ 439.982711][T18054] EXT4-fs (loop9): Remounting filesystem read-only [ 440.123088][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 440.734827][T18061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.271984][T18066] tipc: Enabled bearer , priority 0 [ 441.299647][T18066] syzkaller0: entered promiscuous mode [ 441.299671][T18066] syzkaller0: entered allmulticast mode [ 441.300400][T18066] tipc: Resetting bearer [ 441.362772][T18065] tipc: Resetting bearer [ 441.382410][T18065] tipc: Disabling bearer [ 442.207960][T18079] random: crng reseeded on system resumption [ 442.235185][T18082] tipc: Resetting bearer [ 442.262766][T18084] random: crng reseeded on system resumption [ 442.264515][T18082] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 442.745885][T18095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 442.869633][T18091] loop1: detected capacity change from 0 to 1024 [ 442.875780][T18091] EXT4-fs: Ignoring removed mblk_io_submit option [ 442.933220][T18091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 442.934357][T18091] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.020054][T18101] SELinux: failed to load policy [ 443.038432][ T29] audit: type=1400 audit(1790977130.331:4617): avc: denied { write } for pid=18096 comm="syz.3.3038" name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 444.041565][T18107] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.3035: bg 0: block 112: padding at end of block bitmap is not set [ 444.086665][T18107] EXT4-fs (loop1): Remounting filesystem read-only [ 444.110273][ T29] audit: type=1400 audit(1790977131.310:4618): avc: denied { write } for pid=18089 comm="syz.1.3035" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 444.996427][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 445.076543][T18122] FAULT_INJECTION: forcing a failure. [ 445.076543][T18122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.076584][T18122] CPU: 1 UID: 0 PID: 18122 Comm: syz.8.3043 Not tainted syzkaller #0 PREEMPT(lazy) [ 445.076613][T18122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 445.076691][T18122] Call Trace: [ 445.076699][T18122] [ 445.076708][T18122] __dump_stack+0x1d/0x30 [ 445.076734][T18122] dump_stack_lvl+0x95/0xd0 [ 445.076824][T18122] dump_stack+0x15/0x1b [ 445.076843][T18122] should_fail_ex+0x262/0x280 [ 445.076866][T18122] should_fail+0xb/0x20 [ 445.076894][T18122] should_fail_usercopy+0x1a/0x20 [ 445.076925][T18122] _copy_from_user+0x1c/0xb0 [ 445.077001][T18122] get_timespec64+0x4c/0x100 [ 445.077042][T18122] __x64_sys_recvmmsg+0xa3/0x170 [ 445.077072][T18122] x64_sys_call+0x77f/0x2550 [ 445.077100][T18122] do_syscall_64+0x112/0x360 [ 445.077178][T18122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.077204][T18122] RIP: 0033:0x7f5881c3e159 [ 445.077218][T18122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.077235][T18122] RSP: 002b:00007f5880676028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 445.077253][T18122] RAX: ffffffffffffffda RBX: 00007f5881ec6090 RCX: 00007f5881c3e159 [ 445.077344][T18122] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 445.077357][T18122] RBP: 00007f5880676090 R08: 0000200000003700 R09: 0000000000000000 [ 445.077369][T18122] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 445.077381][T18122] R13: 00007f5881ec6128 R14: 00007f5881ec6090 R15: 00007ffee7e49948 [ 445.077398][T18122] [ 445.479027][T18128] tipc: Resetting bearer [ 445.483745][T18126] loop8: detected capacity change from 0 to 1024 [ 445.504946][T18128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.506237][T18126] EXT4-fs: Ignoring removed mblk_io_submit option [ 445.515232][T18128] FAULT_INJECTION: forcing a failure. [ 445.515232][T18128] name failslab, interval 1, probability 0, space 0, times 0 [ 445.515265][T18128] CPU: 0 UID: 0 PID: 18128 Comm: syz.9.3046 Not tainted syzkaller #0 PREEMPT(lazy) [ 445.515292][T18128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 445.515305][T18128] Call Trace: [ 445.515313][T18128] [ 445.515322][T18128] __dump_stack+0x1d/0x30 [ 445.515349][T18128] dump_stack_lvl+0x95/0xd0 [ 445.515430][T18128] dump_stack+0x15/0x1b [ 445.515484][T18128] should_fail_ex+0x262/0x280 [ 445.515512][T18128] should_failslab+0x8c/0xb0 [ 445.515545][T18128] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 445.515579][T18128] ? sock_alloc_inode+0x36/0xf0 [ 445.515649][T18128] ? sock_alloc_inode+0x36/0xf0 [ 445.515678][T18128] ? selinux_socket_create+0xfd/0x180 [ 445.515788][T18128] ? __pfx_sock_alloc_inode+0x10/0x10 [ 445.515884][T18128] sock_alloc_inode+0x36/0xf0 [ 445.515913][T18128] alloc_inode+0x40/0x170 [ 445.515933][T18128] __sock_create+0x121/0x580 [ 445.516019][T18128] ? xfd_validate_state+0x45/0xf0 [ 445.516066][T18128] __sys_socket+0xaf/0x180 [ 445.516098][T18128] __x64_sys_socket+0x3f/0x50 [ 445.516218][T18128] x64_sys_call+0x246e/0x2550 [ 445.516245][T18128] do_syscall_64+0x112/0x360 [ 445.516270][T18128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.516295][T18128] RIP: 0033:0x7ff41feae159 [ 445.516312][T18128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.516337][T18128] RSP: 002b:00007ff41e907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 445.516358][T18128] RAX: ffffffffffffffda RBX: 00007ff420135fa0 RCX: 00007ff41feae159 [ 445.516384][T18128] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 445.516398][T18128] RBP: 00007ff41ff4506b R08: 0000000000000000 R09: 0000000000000000 [ 445.516413][T18128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.516427][T18128] R13: 00007ff420136038 R14: 00007ff420135fa0 R15: 00007ffd3d39ac28 [ 445.516447][T18128] [ 445.518546][T18128] socket: no more sockets [ 445.763312][T18126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 445.764279][T18126] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.811685][ T29] audit: type=1400 audit(1790977132.899:4619): avc: denied { write } for pid=18125 comm="syz.8.3045" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.852522][T18126] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: block 3: comm syz.8.3045: lblock 3 mapped to illegal pblock 3 (length 3) [ 445.868940][T18126] EXT4-fs (loop8): Remounting filesystem read-only [ 446.443237][T18144] SELinux: failed to load policy [ 446.443702][ T29] audit: type=1400 audit(1790977133.490:4620): avc: denied { write } for pid=18141 comm="syz.9.3050" name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.703985][T18147] random: crng reseeded on system resumption [ 446.853567][T12832] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 447.097152][ T29] audit: type=1400 audit(1790977134.090:4621): avc: denied { name_bind } for pid=18153 comm="syz.3.3055" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 448.984220][T18179] loop9: detected capacity change from 0 to 256 [ 449.024664][T18179] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.026418][T18178] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 449.092450][T18183] FAULT_INJECTION: forcing a failure. [ 449.092450][T18183] name failslab, interval 1, probability 0, space 0, times 0 [ 449.092481][T18183] CPU: 1 UID: 0 PID: 18183 Comm: syz.9.3062 Not tainted syzkaller #0 PREEMPT(lazy) [ 449.092508][T18183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.092522][T18183] Call Trace: [ 449.092528][T18183] [ 449.092535][T18183] __dump_stack+0x1d/0x30 [ 449.092558][T18183] dump_stack_lvl+0x95/0xd0 [ 449.092599][T18183] dump_stack+0x15/0x1b [ 449.092619][T18183] should_fail_ex+0x262/0x280 [ 449.092646][T18183] ? ioctx_alloc+0xe3/0x480 [ 449.092709][T18183] should_failslab+0x8c/0xb0 [ 449.092743][T18183] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 449.092776][T18183] ? ioctx_alloc+0xe3/0x480 [ 449.092863][T18183] ioctx_alloc+0xe3/0x480 [ 449.092969][T18183] __se_sys_io_setup+0x6b/0x1b0 [ 449.093025][T18183] __x64_sys_io_setup+0x31/0x40 [ 449.093053][T18183] x64_sys_call+0x1a9f/0x2550 [ 449.093185][T18183] do_syscall_64+0x112/0x360 [ 449.093210][T18183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.093284][T18183] RIP: 0033:0x7ff41feae159 [ 449.093300][T18183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.093319][T18183] RSP: 002b:00007ff41e8e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 449.093342][T18183] RAX: ffffffffffffffda RBX: 00007ff420136090 RCX: 00007ff41feae159 [ 449.093406][T18183] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 449.093418][T18183] RBP: 00007ff41e8e6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.093430][T18183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.093442][T18183] R13: 00007ff420136128 R14: 00007ff420136090 R15: 00007ffd3d39ac28 [ 449.093461][T18183] [ 449.140786][ T29] audit: type=1400 audit(1790977135.984:4622): avc: denied { shutdown } for pid=18185 comm="syz.8.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 449.142475][T18186] loop8: detected capacity change from 0 to 256 [ 449.166070][T18186] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.278059][T18187] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 449.724219][T18186] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 449.724784][T18186] FAT-fs (loop8): Filesystem has been set read-only [ 449.724914][T18186] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 450.147942][T18206] tipc: Enabled bearer , priority 0 [ 450.150821][T18205] tipc: Disabling bearer [ 450.214834][T18207] SELinux: failed to load policy [ 450.215425][ T29] audit: type=1400 audit(1790977136.972:4623): avc: denied { write } for pid=18202 comm="syz.8.3069" name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 452.074516][T18222] loop9: detected capacity change from 0 to 256 [ 452.074898][T18222] vfat: Bad value for 'shortname' [ 452.101551][T18226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 452.104510][T18227] loop1: detected capacity change from 0 to 1024 [ 452.114015][T18227] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 452.127294][T18227] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 452.147611][T18227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.149154][ T29] audit: type=1400 audit(1790977138.764:4624): avc: denied { remount } for pid=18225 comm="syz.1.3077" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 452.207130][ T29] audit: type=1400 audit(1790977138.810:4625): avc: denied { write } for pid=18225 comm="syz.1.3077" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.305535][T18227] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 452.387915][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.433690][T18248] tipc: Enabled bearer , priority 0 [ 452.448109][T18246] tipc: Disabling bearer [ 452.726933][T18253] loop1: detected capacity change from 0 to 1024 [ 452.735031][T18253] EXT4-fs: Ignoring removed mblk_io_submit option [ 452.762539][T18253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 452.762788][T18253] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.784078][ T29] audit: type=1400 audit(1790977139.337:4626): avc: denied { write } for pid=18251 comm="syz.1.3083" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.865250][T18253] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.3083: lblock 3 mapped to illegal pblock 3 (length 3) [ 452.885841][T18253] EXT4-fs (loop1): Remounting filesystem read-only [ 452.976579][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 453.096886][ T29] audit: type=1400 audit(1790977139.614:4627): avc: denied { read write } for pid=18268 comm="syz.1.3087" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 453.096920][ T29] audit: type=1400 audit(1790977139.614:4628): avc: denied { open } for pid=18268 comm="syz.1.3087" path="/223/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 453.096957][ T29] audit: type=1400 audit(1790977139.614:4629): avc: denied { ioctl } for pid=18268 comm="syz.1.3087" path="/223/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0x240b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 453.139187][T18273] FAULT_INJECTION: forcing a failure. [ 453.139187][T18273] name failslab, interval 1, probability 0, space 0, times 0 [ 453.139716][T18273] CPU: 0 UID: 0 PID: 18273 Comm: syz.1.3087 Not tainted syzkaller #0 PREEMPT(lazy) [ 453.139782][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 453.139796][T18273] Call Trace: [ 453.139804][T18273] [ 453.139814][T18273] __dump_stack+0x1d/0x30 [ 453.139837][T18273] dump_stack_lvl+0x95/0xd0 [ 453.139877][T18273] dump_stack+0x15/0x1b [ 453.139963][T18273] should_fail_ex+0x262/0x280 [ 453.140051][T18273] ? rand_initialize_disk+0x31/0x80 [ 453.140078][T18273] should_failslab+0x8c/0xb0 [ 453.140152][T18273] __kmalloc_cache_noprof+0x7a/0x400 [ 453.140231][T18273] ? blkcg_init_disk+0x1de/0x230 [ 453.140259][T18273] ? rand_initialize_disk+0x31/0x80 [ 453.140356][T18273] rand_initialize_disk+0x31/0x80 [ 453.140389][T18273] __alloc_disk_node+0x257/0x340 [ 453.140411][T18273] __blk_alloc_disk+0x68/0xd0 [ 453.140436][T18273] dm_create+0x36d/0x850 [ 453.140516][T18273] dev_create+0x141/0x290 [ 453.140546][T18273] dm_ctl_ioctl+0x80b/0xad0 [ 453.140568][T18273] ? __pfx_dev_create+0x10/0x10 [ 453.140597][T18273] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 453.140624][T18273] __se_sys_ioctl+0xce/0x140 [ 453.140705][T18273] __x64_sys_ioctl+0x43/0x50 [ 453.140733][T18273] x64_sys_call+0x239d/0x2550 [ 453.140761][T18273] do_syscall_64+0x112/0x360 [ 453.140789][T18273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.140857][T18273] RIP: 0033:0x7f6f5693e159 [ 453.140872][T18273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.140935][T18273] RSP: 002b:00007f6f55376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.140959][T18273] RAX: ffffffffffffffda RBX: 00007f6f56bc6090 RCX: 00007f6f5693e159 [ 453.140975][T18273] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 453.140988][T18273] RBP: 00007f6f569d506b R08: 0000000000000000 R09: 0000000000000000 [ 453.141001][T18273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.141013][T18273] R13: 00007f6f56bc6128 R14: 00007f6f56bc6090 R15: 00007ffc5c8b0c38 [ 453.141058][T18273] [ 453.514785][T18279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 453.968112][T18277] loop1: detected capacity change from 0 to 1024 [ 453.993914][T18277] EXT4-fs: Ignoring removed mblk_io_submit option [ 454.073986][T18277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 454.077462][T18277] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.130073][T18285] ip_tables: iptables: counters copy to user failed while replacing table [ 454.179630][ T29] audit: type=1400 audit(1790977140.593:4630): avc: denied { write } for pid=18276 comm="syz.1.3088" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.217422][T18277] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.3088: lblock 3 mapped to illegal pblock 3 (length 3) [ 454.240217][T18277] EXT4-fs (loop1): Remounting filesystem read-only [ 454.537338][T18292] syzkaller0: entered promiscuous mode [ 454.537382][T18292] syzkaller0: entered allmulticast mode [ 454.633171][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 454.957131][T18311] FAULT_INJECTION: forcing a failure. [ 454.957131][T18311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.957161][T18311] CPU: 1 UID: 0 PID: 18311 Comm: syz.4.3099 Not tainted syzkaller #0 PREEMPT(lazy) [ 454.957282][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 454.957297][T18311] Call Trace: [ 454.957305][T18311] [ 454.957351][T18311] __dump_stack+0x1d/0x30 [ 454.957377][T18311] dump_stack_lvl+0x95/0xd0 [ 454.957398][T18311] dump_stack+0x15/0x1b [ 454.957436][T18311] should_fail_ex+0x262/0x280 [ 454.957513][T18311] should_fail+0xb/0x20 [ 454.957537][T18311] should_fail_usercopy+0x1a/0x20 [ 454.957562][T18311] _copy_from_user+0x1c/0xb0 [ 454.957619][T18311] ___sys_sendmsg+0xc1/0x1e0 [ 454.957651][T18311] __x64_sys_sendmsg+0xd4/0x160 [ 454.957705][T18311] x64_sys_call+0x22ab/0x2550 [ 454.957772][T18311] do_syscall_64+0x112/0x360 [ 454.957799][T18311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.957820][T18311] RIP: 0033:0x7f25b2d8e159 [ 454.957835][T18311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.957897][T18311] RSP: 002b:00007f25b17e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.957915][T18311] RAX: ffffffffffffffda RBX: 00007f25b3015fa0 RCX: 00007f25b2d8e159 [ 454.957929][T18311] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 454.957980][T18311] RBP: 00007f25b17e7090 R08: 0000000000000000 R09: 0000000000000000 [ 454.957994][T18311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.958019][T18311] R13: 00007f25b3016038 R14: 00007f25b3015fa0 R15: 00007ffc875141b8 [ 454.958051][T18311] [ 455.349002][T18301] loop8: detected capacity change from 0 to 32768 [ 455.419858][T18301] loop8: p1 p3 < > [ 455.466804][T18317] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.496600][T12807] udevd[12807]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 456.504555][T15778] udevd[15778]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 456.633591][ T29] audit: type=1400 audit(1790977142.902:4631): avc: denied { ioctl } for pid=18326 comm="syz.8.3104" path="socket:[54735]" dev="sockfs" ino=54735 ioctlcmd=0x5866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 457.243200][T18341] loop1: detected capacity change from 0 to 8192 [ 457.268089][T18341] loop1: p2 p3 p4 [ 457.268899][T18341] loop1: p3 start 263168 is beyond EOD, truncated [ 457.268960][T18341] loop1: p4 start 83886080 is beyond EOD, truncated [ 457.318492][T18347] loop8: detected capacity change from 0 to 16384 [ 457.383664][T12807] udevd[12807]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 457.439368][T18350] loop8: detected capacity change from 16384 to 16383 [ 457.453453][T18350] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.453484][T18350] buffer_io_error: 12 callbacks suppressed [ 457.453554][T18350] Buffer I/O error on dev loop8, logical block 0, async page read [ 457.453587][T18350] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.453613][T18350] Buffer I/O error on dev loop8, logical block 0, async page read [ 457.453631][T18350] loop8: unable to read partition table [ 457.453654][T18350] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 457.461452][T18347] I/O error, dev loop8, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 21 prio class 2 [ 457.461526][T18347] I/O error, dev loop8, sector 4864 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 457.461549][T18347] Buffer I/O error on dev loop8, logical block 608, async page read [ 457.466007][T18346] I/O error, dev loop8, sector 4736 op 0x1:(WRITE) flags 0x800800 phys_seg 16 prio class 2 [ 457.466095][T18346] Buffer I/O error on dev loop8, logical block 592, lost async page write [ 457.466125][T18346] Buffer I/O error on dev loop8, logical block 593, lost async page write [ 457.466143][T18346] Buffer I/O error on dev loop8, logical block 594, lost async page write [ 457.467635][T18346] Buffer I/O error on dev loop8, logical block 595, lost async page write [ 457.467658][T18346] Buffer I/O error on dev loop8, logical block 596, lost async page write [ 457.467675][T18346] Buffer I/O error on dev loop8, logical block 597, lost async page write [ 457.467694][T18346] Buffer I/O error on dev loop8, logical block 598, lost async page write [ 457.790846][T18358] tipc: Enabled bearer , priority 0 [ 457.811082][T18358] syzkaller0: entered promiscuous mode [ 457.811103][T18358] syzkaller0: entered allmulticast mode [ 457.811721][T18358] tipc: Resetting bearer [ 457.816983][T18357] tipc: Resetting bearer [ 457.856101][T18357] tipc: Disabling bearer [ 457.888792][T18368] tipc: Enabling of bearer rejected, already enabled [ 457.942379][T18375] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3118'. [ 457.944414][ T29] audit: type=1400 audit(1790977144.112:4632): avc: denied { setopt } for pid=18374 comm="syz.8.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 458.177613][T18381] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 458.226257][T18389] syzkaller0: entered promiscuous mode [ 458.226372][T18389] syzkaller0: entered allmulticast mode [ 459.111001][T18395] FAULT_INJECTION: forcing a failure. [ 459.111001][T18395] name failslab, interval 1, probability 0, space 0, times 0 [ 459.111033][T18395] CPU: 1 UID: 0 PID: 18395 Comm: syz.1.3125 Not tainted syzkaller #0 PREEMPT(lazy) [ 459.111095][T18395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 459.111110][T18395] Call Trace: [ 459.111117][T18395] [ 459.111126][T18395] __dump_stack+0x1d/0x30 [ 459.111154][T18395] dump_stack_lvl+0x95/0xd0 [ 459.111177][T18395] dump_stack+0x15/0x1b [ 459.111203][T18395] should_fail_ex+0x262/0x280 [ 459.111232][T18395] ? iovec_from_user+0x84/0x200 [ 459.111323][T18395] should_failslab+0x8c/0xb0 [ 459.111362][T18395] __kmalloc_noprof+0xd0/0x4d0 [ 459.111393][T18395] ? iovec_from_user+0x84/0x200 [ 459.111494][T18395] iovec_from_user+0x84/0x200 [ 459.111668][T18395] __import_iovec+0xf3/0x530 [ 459.111703][T18395] import_iovec+0x60/0x80 [ 459.111736][T18395] vfs_readv+0xec/0x6d0 [ 459.111760][T18395] ? get_pid_task+0x92/0xc0 [ 459.111900][T18395] do_readv+0xe9/0x210 [ 459.111924][T18395] __x64_sys_readv+0x45/0x50 [ 459.111978][T18395] x64_sys_call+0x1b4b/0x2550 [ 459.112069][T18395] do_syscall_64+0x112/0x360 [ 459.112096][T18395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.112135][T18395] RIP: 0033:0x7f6f5693e159 [ 459.112153][T18395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.112174][T18395] RSP: 002b:00007f6f55397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 459.112195][T18395] RAX: ffffffffffffffda RBX: 00007f6f56bc5fa0 RCX: 00007f6f5693e159 [ 459.112258][T18395] RDX: 10000000000000b7 RSI: 00002000000005c0 RDI: 0000000000000003 [ 459.112280][T18395] RBP: 00007f6f55397090 R08: 0000000000000000 R09: 0000000000000000 [ 459.112296][T18395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.112311][T18395] R13: 00007f6f56bc6038 R14: 00007f6f56bc5fa0 R15: 00007ffc5c8b0c38 [ 459.112332][T18395] [ 459.267257][T18399] syzkaller0: entered promiscuous mode [ 459.267320][T18399] syzkaller0: entered allmulticast mode [ 459.377090][T18404] tipc: Enabling of bearer rejected, already enabled [ 459.421487][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3131'. [ 459.421576][T18411] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3131'. [ 459.522042][T18420] loop1: detected capacity change from 0 to 1024 [ 459.524222][T18420] EXT4-fs: inline encryption not supported [ 459.546201][T18420] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 459.546231][T18420] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 459.546281][T18420] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3134: Failed to acquire dquot type 0 [ 459.546353][T18420] loop1: lost filesystem error report for type 5 error -117 [ 459.546677][T18420] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 459.547089][T18420] EXT4-fs (loop1): 1 truncate cleaned up [ 459.547453][T18420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.630465][T18420] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 459.630588][T18420] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 459.630603][T18420] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3134: Failed to acquire dquot type 0 [ 459.630724][ T29] audit: type=1400 audit(1790977145.672:4633): avc: denied { write } for pid=18419 comm="syz.1.3134" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 459.630761][ T29] audit: type=1400 audit(1790977145.672:4634): avc: denied { create } for pid=18419 comm="syz.1.3134" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 459.772054][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.814998][T18425] loop1: detected capacity change from 0 to 256 [ 459.834218][T18425] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.917894][ T29] audit: type=1400 audit(1790977145.931:4635): avc: denied { cpu } for pid=18424 comm="syz.1.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 460.368027][T18436] syzkaller0: entered promiscuous mode [ 460.368289][T18436] syzkaller0: entered allmulticast mode [ 460.452100][ T29] audit: type=1400 audit(1790977146.402:4636): avc: denied { write } for pid=18424 comm="syz.1.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.594203][T18442] tipc: Enabling of bearer rejected, already enabled [ 461.031593][T18456] bond0: (slave ip6gretap3): Enslaving as an active interface with an up link [ 461.036540][T18457] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 461.039953][T18457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3147'. [ 461.040926][T18457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.068584][T18456] FAULT_INJECTION: forcing a failure. [ 461.068584][T18456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.068613][T18456] CPU: 0 UID: 0 PID: 18456 Comm: syz.8.3148 Not tainted syzkaller #0 PREEMPT(lazy) [ 461.068636][T18456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 461.068648][T18456] Call Trace: [ 461.068654][T18456] [ 461.068674][T18456] __dump_stack+0x1d/0x30 [ 461.068700][T18456] dump_stack_lvl+0x95/0xd0 [ 461.068725][T18456] dump_stack+0x15/0x1b [ 461.068745][T18456] should_fail_ex+0x262/0x280 [ 461.068774][T18456] should_fail+0xb/0x20 [ 461.068825][T18456] should_fail_usercopy+0x1a/0x20 [ 461.068852][T18456] _copy_from_user+0x1c/0xb0 [ 461.068878][T18456] ___sys_sendmsg+0xc1/0x1e0 [ 461.068921][T18456] __x64_sys_sendmsg+0xd4/0x160 [ 461.068950][T18456] x64_sys_call+0x22ab/0x2550 [ 461.068997][T18456] do_syscall_64+0x112/0x360 [ 461.069021][T18456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.069044][T18456] RIP: 0033:0x7f5881c3e159 [ 461.069062][T18456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.069103][T18456] RSP: 002b:00007f5880697028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.069123][T18456] RAX: ffffffffffffffda RBX: 00007f5881ec5fa0 RCX: 00007f5881c3e159 [ 461.069140][T18456] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 461.069155][T18456] RBP: 00007f5880697090 R08: 0000000000000000 R09: 0000000000000000 [ 461.069170][T18456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.069233][T18456] R13: 00007f5881ec6038 R14: 00007f5881ec5fa0 R15: 00007ffee7e49948 [ 461.069252][T18456] [ 461.508935][T18467] FAULT_INJECTION: forcing a failure. [ 461.508935][T18467] name failslab, interval 1, probability 0, space 0, times 0 [ 461.508962][T18467] CPU: 0 UID: 0 PID: 18467 Comm: syz.8.3152 Not tainted syzkaller #0 PREEMPT(lazy) [ 461.508989][T18467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 461.509004][T18467] Call Trace: [ 461.509012][T18467] [ 461.509021][T18467] __dump_stack+0x1d/0x30 [ 461.509063][T18467] dump_stack_lvl+0x95/0xd0 [ 461.509085][T18467] dump_stack+0x15/0x1b [ 461.509103][T18467] should_fail_ex+0x262/0x280 [ 461.509170][T18467] ? security_inode_alloc+0x37/0x100 [ 461.509196][T18467] should_failslab+0x8c/0xb0 [ 461.509228][T18467] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 461.509310][T18467] ? security_inode_alloc+0x37/0x100 [ 461.509342][T18467] security_inode_alloc+0x37/0x100 [ 461.509367][T18467] inode_init_always_gfp+0x495/0x4e0 [ 461.509389][T18467] ? __pfx_proc_alloc_inode+0x10/0x10 [ 461.509435][T18467] alloc_inode+0x58/0x170 [ 461.509467][T18467] new_inode+0x1d/0xe0 [ 461.509491][T18467] proc_pid_make_inode+0x24/0x200 [ 461.509519][T18467] proc_pident_instantiate+0x44/0x180 [ 461.509598][T18467] proc_pident_lookup+0x115/0x1a0 [ 461.509631][T18467] proc_tgid_base_lookup+0x2b/0x40 [ 461.509666][T18467] __lookup_slow+0x155/0x200 [ 461.509704][T18467] lookup_slow+0x3c/0x60 [ 461.509729][T18467] link_path_walk+0x919/0xdd0 [ 461.509758][T18467] path_openat+0xe7/0x10d0 [ 461.509791][T18467] do_file_open+0x16c/0x290 [ 461.509867][T18467] ? __pfx_kfree_link+0x10/0x10 [ 461.509895][T18467] do_sys_openat2+0xa0/0x130 [ 461.510045][T18467] __x64_sys_openat+0xf2/0x120 [ 461.510157][T18467] x64_sys_call+0x1f72/0x2550 [ 461.510180][T18467] do_syscall_64+0x112/0x360 [ 461.510205][T18467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.510230][T18467] RIP: 0033:0x7f5881bfe98e [ 461.510244][T18467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 461.510402][T18467] RSP: 002b:00007f5880696f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 461.510422][T18467] RAX: ffffffffffffffda RBX: 00007f58806976c0 RCX: 00007f5881bfe98e [ 461.510436][T18467] RDX: 0000000000000002 RSI: 00007f5881cd4972 RDI: ffffffffffffff9c [ 461.510449][T18467] RBP: 00007f5881cd506b R08: 0000000000000000 R09: 0000000000000000 [ 461.510461][T18467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.510567][T18467] R13: 00007f5881ec6038 R14: 00007f5881ec5fa0 R15: 00007ffee7e49948 [ 461.510588][T18467] [ 461.547092][T18475] lo speed is unknown, defaulting to 1000 [ 461.547123][T18475] lo speed is unknown, defaulting to 1000 [ 461.547328][T18475] lo speed is unknown, defaulting to 1000 [ 461.547767][T18475] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 461.548137][T18475] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 461.567656][T18475] lo speed is unknown, defaulting to 1000 [ 461.570625][T18475] lo speed is unknown, defaulting to 1000 [ 461.570998][T18475] lo speed is unknown, defaulting to 1000 [ 461.571385][T18475] lo speed is unknown, defaulting to 1000 [ 461.571716][T18475] lo speed is unknown, defaulting to 1000 [ 461.717915][T18487] FAULT_INJECTION: forcing a failure. [ 461.717915][T18487] name failslab, interval 1, probability 0, space 0, times 0 [ 461.717966][T18487] CPU: 0 UID: 0 PID: 18487 Comm: syz.9.3155 Not tainted syzkaller #0 PREEMPT(lazy) [ 461.717993][T18487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 461.718007][T18487] Call Trace: [ 461.718015][T18487] [ 461.718074][T18487] __dump_stack+0x1d/0x30 [ 461.718102][T18487] dump_stack_lvl+0x95/0xd0 [ 461.718126][T18487] dump_stack+0x15/0x1b [ 461.718148][T18487] should_fail_ex+0x262/0x280 [ 461.718176][T18487] ? security_sb_alloc+0x48/0x100 [ 461.718236][T18487] should_failslab+0x8c/0xb0 [ 461.718411][T18487] __kmalloc_noprof+0xd0/0x4d0 [ 461.718444][T18487] ? should_failslab+0x8c/0xb0 [ 461.718534][T18487] ? security_sb_alloc+0x48/0x100 [ 461.718562][T18487] security_sb_alloc+0x48/0x100 [ 461.718589][T18487] sget_fc+0x5c4/0xfa0 [ 461.718624][T18487] ? __pfx_kernfs_set_super+0x10/0x10 [ 461.718668][T18487] ? __pfx_kernfs_test_super+0x10/0x10 [ 461.718703][T18487] ? __kmalloc_cache_noprof+0x19b/0x400 [ 461.718829][T18487] ? kernfs_get_tree+0x56/0x4a0 [ 461.718863][T18487] kernfs_get_tree+0xdf/0x4a0 [ 461.718945][T18487] ? security_capable+0x7b/0x90 [ 461.719051][T18487] vfs_get_tree+0x57/0x1d0 [ 461.719130][T18487] do_new_mount+0x288/0x8d0 [ 461.719151][T18487] ? security_capable+0x7b/0x90 [ 461.719178][T18487] path_mount+0x4ad/0xb90 [ 461.719200][T18487] __se_sys_mount+0x28c/0x2e0 [ 461.719225][T18487] __x64_sys_mount+0x67/0x80 [ 461.719302][T18487] x64_sys_call+0xc3b/0x2550 [ 461.719329][T18487] do_syscall_64+0x112/0x360 [ 461.719355][T18487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.719379][T18487] RIP: 0033:0x7ff41feae159 [ 461.719397][T18487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.719473][T18487] RSP: 002b:00007ff41e907028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 461.719496][T18487] RAX: ffffffffffffffda RBX: 00007ff420135fa0 RCX: 00007ff41feae159 [ 461.719512][T18487] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 461.719527][T18487] RBP: 00007ff41ff4506b R08: 0000000000000000 R09: 0000000000000000 [ 461.719542][T18487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.719610][T18487] R13: 00007ff420136038 R14: 00007ff420135fa0 R15: 00007ffd3d39ac28 [ 461.719699][T18487] [ 462.141410][T18473] loop1: detected capacity change from 0 to 1024 [ 462.145573][T18473] EXT4-fs: Ignoring removed mblk_io_submit option [ 462.164176][T18493] tipc: Resetting bearer [ 462.187041][T18493] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 462.211433][T18493] FAULT_INJECTION: forcing a failure. [ 462.211433][T18493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.211466][T18493] CPU: 0 UID: 0 PID: 18493 Comm: syz.4.3160 Not tainted syzkaller #0 PREEMPT(lazy) [ 462.211495][T18493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 462.211510][T18493] Call Trace: [ 462.211518][T18493] [ 462.211527][T18493] __dump_stack+0x1d/0x30 [ 462.211596][T18493] dump_stack_lvl+0x95/0xd0 [ 462.211621][T18493] dump_stack+0x15/0x1b [ 462.211708][T18493] should_fail_ex+0x262/0x280 [ 462.211739][T18493] should_fail+0xb/0x20 [ 462.211765][T18493] should_fail_usercopy+0x1a/0x20 [ 462.211797][T18493] _copy_from_user+0x1c/0xb0 [ 462.211851][T18493] do_ip_vs_set_ctl+0x1cd/0xab0 [ 462.211905][T18493] ? __futex_wait+0x1fd/0x260 [ 462.212003][T18493] nf_setsockopt+0x199/0x1b0 [ 462.212036][T18493] ip_setsockopt+0x102/0x110 [ 462.212065][T18493] tcp_setsockopt+0x98/0xb0 [ 462.212097][T18493] sock_common_setsockopt+0x69/0x80 [ 462.212156][T18493] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 462.212192][T18493] __sys_setsockopt+0x184/0x200 [ 462.212218][T18493] __x64_sys_setsockopt+0x64/0x80 [ 462.212244][T18493] x64_sys_call+0x248f/0x2550 [ 462.212335][T18493] do_syscall_64+0x112/0x360 [ 462.212363][T18493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.212389][T18493] RIP: 0033:0x7f25b2d8e159 [ 462.212406][T18493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.212427][T18493] RSP: 002b:00007f25b17e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 462.212502][T18493] RAX: ffffffffffffffda RBX: 00007f25b3015fa0 RCX: 00007f25b2d8e159 [ 462.212519][T18493] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000008 [ 462.212608][T18493] RBP: 00007f25b2e2506b R08: 0000000000000000 R09: 0000000000000000 [ 462.212623][T18493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.212638][T18493] R13: 00007f25b3016038 R14: 00007f25b3015fa0 R15: 00007ffc875141b8 [ 462.212722][T18493] [ 462.704589][T18500] loop4: detected capacity change from 0 to 1024 [ 462.756981][T18500] EXT4-fs: Ignoring removed mblk_io_submit option [ 462.811807][T18500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 462.814812][T18500] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.819121][T18473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 462.820031][T18473] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.834848][ T29] audit: type=1400 audit(1790977148.628:4637): avc: denied { write } for pid=18472 comm="syz.1.3151" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.870619][T18507] loop3: detected capacity change from 0 to 256 [ 462.877296][T18473] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.3151: lblock 3 mapped to illegal pblock 3 (length 3) [ 462.881599][T18473] EXT4-fs (loop1): Remounting filesystem read-only [ 462.884222][T18507] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 462.908419][T18508] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.3162: bg 0: block 112: padding at end of block bitmap is not set [ 462.910402][T18508] EXT4-fs (loop4): Remounting filesystem read-only [ 462.916125][ T29] audit: type=1400 audit(1790977148.702:4638): avc: denied { write } for pid=18499 comm="syz.4.3162" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.184862][T13006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 463.246138][T12895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 463.512305][T18523] FAULT_INJECTION: forcing a failure. [ 463.512305][T18523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.512471][T18523] CPU: 1 UID: 0 PID: 18523 Comm: syz.4.3168 Not tainted syzkaller #0 PREEMPT(lazy) [ 463.512496][T18523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 463.512522][T18523] Call Trace: [ 463.512528][T18523] [ 463.512554][T18523] __dump_stack+0x1d/0x30 [ 463.512578][T18523] dump_stack_lvl+0x95/0xd0 [ 463.512600][T18523] dump_stack+0x15/0x1b [ 463.512623][T18523] should_fail_ex+0x262/0x280 [ 463.512696][T18523] should_fail+0xb/0x20 [ 463.512912][T18523] should_fail_usercopy+0x1a/0x20 [ 463.512938][T18523] _copy_from_user+0x1c/0xb0 [ 463.512963][T18523] do_ipv6_setsockopt+0x127/0x2040 [ 463.513016][T18523] ? kstrtoull+0x119/0x150 [ 463.513034][T18523] ? avc_has_perm_noaudit+0xac/0x160 [ 463.513131][T18523] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 463.513178][T18523] ipv6_setsockopt+0x59/0x130 [ 463.513226][T18523] udpv6_setsockopt+0x89/0xa0 [ 463.513332][T18523] sock_common_setsockopt+0x69/0x80 [ 463.513359][T18523] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 463.513397][T18523] __sys_setsockopt+0x184/0x200 [ 463.513419][T18523] __x64_sys_setsockopt+0x64/0x80 [ 463.513448][T18523] x64_sys_call+0x248f/0x2550 [ 463.513472][T18523] do_syscall_64+0x112/0x360 [ 463.513492][T18523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.513596][T18523] RIP: 0033:0x7f25b2d8e159 [ 463.513611][T18523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.513627][T18523] RSP: 002b:00007f25b17a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 463.513694][T18523] RAX: ffffffffffffffda RBX: 00007f25b3016180 RCX: 00007f25b2d8e159 [ 463.513720][T18523] RDX: 0000000000000031 RSI: 0000000000000029 RDI: 0000000000000005 [ 463.513732][T18523] RBP: 00007f25b17a5090 R08: 0000000000000004 R09: 0000000000000000 [ 463.513757][T18523] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.513768][T18523] R13: 00007f25b3016218 R14: 00007f25b3016180 R15: 00007ffc875141b8 [ 463.513785][T18523] [ 463.672327][ T29] audit: type=1400 audit(1790977149.404:4639): avc: denied { getopt } for pid=18525 comm="syz.8.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 464.574845][T18532] loop3: detected capacity change from 0 to 1024 [ 464.577004][T18532] EXT4-fs: Ignoring removed mblk_io_submit option [ 464.801037][T18532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 464.806941][T18532] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.883754][ T29] audit: type=1400 audit(1790977150.521:4640): avc: denied { write } for pid=18531 comm="syz.3.3170" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.940048][T18550] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.3170: bg 0: block 112: padding at end of block bitmap is not set [ 464.940216][T18550] EXT4-fs (loop3): Remounting filesystem read-only [ 465.541363][T18545] syzkaller0: entered promiscuous mode [ 465.541500][T18545] syzkaller0: entered allmulticast mode [ 465.804712][T12777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 465.872427][T18560] ip_tables: iptables: counters copy to user failed while replacing table [ 465.923291][T18566] random: crng reseeded on system resumption [ 465.959353][T18558] loop9: detected capacity change from 0 to 512 [ 466.009598][T18558] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.010308][T18558] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.145992][T18568] loop3: detected capacity change from 0 to 1024 [ 466.154682][T18568] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.190457][T18568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 466.191007][T18568] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.212369][ T29] audit: type=1400 audit(1790977151.750:4641): avc: denied { write } for pid=18567 comm="syz.3.3181" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.238317][T18568] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.3181: lblock 3 mapped to illegal pblock 3 (length 3) [ 466.243192][T18568] EXT4-fs (loop3): Remounting filesystem read-only [ 466.433471][T12777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 466.451038][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 466.466601][T18577] futex_wake_op: syz.8.3179 tries to shift op by 144; fix this program [ 466.467089][T18577] futex_wake_op: syz.8.3179 tries to shift op by 144; fix this program [ 466.945823][ T29] audit: type=1400 audit(1790977152.433:4642): avc: denied { mounton } for pid=18574 comm="syz.3.3182" path="/proc/676/task" dev="proc" ino=56241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 466.948215][ T29] audit: type=1400 audit(1790977152.433:4643): avc: denied { append } for pid=18574 comm="syz.3.3182" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 466.948935][T18586] program syz.3.3182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.130980][T18588] tipc: Enabling of bearer rejected, already enabled [ 467.409161][T18583] loop3: detected capacity change from 0 to 32768 [ 467.432672][T18583] loop3: p1 p3 < > [ 469.464363][T14441] udevd[14441]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 469.466600][T12807] udevd[12807]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 469.507211][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.820990][T18613] loop9: detected capacity change from 0 to 1024 [ 469.841295][T18613] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.874278][T18613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 469.876468][T18613] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.891128][ T29] audit: type=1400 audit(1790977155.139:4644): avc: denied { write } for pid=18612 comm="syz.9.3193" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.915728][T18613] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: block 3: comm syz.9.3193: lblock 3 mapped to illegal pblock 3 (length 3) [ 469.916198][T18613] EXT4-fs (loop9): Remounting filesystem read-only [ 470.045985][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 471.101910][T18627] loop4: detected capacity change from 0 to 512 [ 471.123528][T18627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.123601][T18627] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 471.188281][T18627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3196'. [ 471.410425][T13006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.452766][T18637] FAULT_INJECTION: forcing a failure. [ 471.452766][T18637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.452800][T18637] CPU: 0 UID: 0 PID: 18637 Comm: syz.4.3197 Not tainted syzkaller #0 PREEMPT(lazy) [ 471.452881][T18637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 471.452972][T18637] Call Trace: [ 471.452979][T18637] [ 471.452986][T18637] __dump_stack+0x1d/0x30 [ 471.453012][T18637] dump_stack_lvl+0x95/0xd0 [ 471.453037][T18637] dump_stack+0x15/0x1b [ 471.453124][T18637] should_fail_ex+0x262/0x280 [ 471.453148][T18637] should_fail+0xb/0x20 [ 471.453171][T18637] should_fail_usercopy+0x1a/0x20 [ 471.453223][T18637] _copy_from_user+0x1c/0xb0 [ 471.453358][T18637] do_ip_vs_set_ctl+0x1cd/0xab0 [ 471.453380][T18637] ? __futex_wait+0x1fd/0x260 [ 471.453413][T18637] nf_setsockopt+0x199/0x1b0 [ 471.453441][T18637] ip_setsockopt+0x102/0x110 [ 471.453602][T18637] tcp_setsockopt+0x98/0xb0 [ 471.453633][T18637] sock_common_setsockopt+0x69/0x80 [ 471.453662][T18637] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 471.453720][T18637] __sys_setsockopt+0x184/0x200 [ 471.453744][T18637] __x64_sys_setsockopt+0x64/0x80 [ 471.453766][T18637] x64_sys_call+0x248f/0x2550 [ 471.453842][T18637] do_syscall_64+0x112/0x360 [ 471.453868][T18637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.453949][T18637] RIP: 0033:0x7f25b2d8e159 [ 471.453965][T18637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.453985][T18637] RSP: 002b:00007f25b17e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 471.454038][T18637] RAX: ffffffffffffffda RBX: 00007f25b3015fa0 RCX: 00007f25b2d8e159 [ 471.454055][T18637] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000009 [ 471.454121][T18637] RBP: 00007f25b2e2506b R08: 0000000000000000 R09: 0000000000000000 [ 471.454137][T18637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.454152][T18637] R13: 00007f25b3016038 R14: 00007f25b3015fa0 R15: 00007ffc875141b8 [ 471.454174][T18637] [ 471.525530][T18641] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 471.591642][ T29] audit: type=1326 audit(1790977156.709:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.8.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881c3e159 code=0x7ffc0000 [ 471.591672][ T29] audit: type=1326 audit(1790977156.709:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.8.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881c3e159 code=0x7ffc0000 [ 471.600618][ T29] audit: type=1326 audit(1790977156.709:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.8.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881c3e159 code=0x7ffc0000 [ 471.600651][ T29] audit: type=1326 audit(1790977156.709:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.8.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881c3e159 code=0x7ffc0000 [ 471.600687][ T29] audit: type=1326 audit(1790977156.709:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.8.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881c3e159 code=0x7ffc0000 [ 471.600733][ T29] audit: type=1326 audit(1790977156.719:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.8.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5881c3e159 code=0x7ffc0000 [ 471.600809][ T29] audit: type=1326 audit(1790977156.719:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.8.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881c3e159 code=0x7ffc0000 [ 471.600840][ T29] audit: type=1326 audit(1790977156.719:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.8.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881c3e159 code=0x7ffc0000 [ 471.600943][ T29] audit: type=1326 audit(1790977156.719:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18644 comm="syz.8.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881c3e159 code=0x7ffc0000 [ 472.076618][T18643] loop4: detected capacity change from 0 to 1024 [ 472.090264][T18643] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.123338][T18643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 472.124098][T18643] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.292143][T18656] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.3199: bg 0: block 112: padding at end of block bitmap is not set [ 472.315174][T18656] EXT4-fs (loop4): Remounting filesystem read-only [ 472.540652][T18661] loop1: detected capacity change from 0 to 512 [ 472.579215][T18661] bond1: option mode: unable to set because the bond device has slaves [ 472.643104][T18664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3204'. [ 472.643323][T18664] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3204'. [ 472.727682][T18659] loop9: detected capacity change from 0 to 1024 [ 472.729511][T18659] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.753966][T13006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 472.759397][T18668] tipc: Resetting bearer [ 472.764779][T18659] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 472.765115][T18659] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.819283][T18668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.841986][T18675] FAULT_INJECTION: forcing a failure. [ 472.841986][T18675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.842017][T18675] CPU: 0 UID: 0 PID: 18675 Comm: syz.3.3208 Not tainted syzkaller #0 PREEMPT(lazy) [ 472.842046][T18675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 472.842067][T18675] Call Trace: [ 472.842075][T18675] [ 472.842084][T18675] __dump_stack+0x1d/0x30 [ 472.842167][T18675] dump_stack_lvl+0x95/0xd0 [ 472.842356][T18675] dump_stack+0x15/0x1b [ 472.842380][T18675] should_fail_ex+0x262/0x280 [ 472.842451][T18675] should_fail+0xb/0x20 [ 472.842472][T18675] should_fail_usercopy+0x1a/0x20 [ 472.842575][T18675] _copy_from_user+0x1c/0xb0 [ 472.842635][T18675] do_ip_vs_set_ctl+0x1cd/0xab0 [ 472.842662][T18675] ? __futex_wait+0x1fd/0x260 [ 472.842693][T18675] nf_setsockopt+0x199/0x1b0 [ 472.842738][T18675] ip_setsockopt+0x102/0x110 [ 472.842766][T18675] tcp_setsockopt+0x98/0xb0 [ 472.842795][T18675] sock_common_setsockopt+0x69/0x80 [ 472.842910][T18675] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 472.843038][T18675] __sys_setsockopt+0x184/0x200 [ 472.843063][T18675] __x64_sys_setsockopt+0x64/0x80 [ 472.843203][T18675] x64_sys_call+0x248f/0x2550 [ 472.843233][T18675] do_syscall_64+0x112/0x360 [ 472.843260][T18675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.843285][T18675] RIP: 0033:0x7feaad84e159 [ 472.843349][T18675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.843370][T18675] RSP: 002b:00007feaac2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 472.843393][T18675] RAX: ffffffffffffffda RBX: 00007feaadad5fa0 RCX: 00007feaad84e159 [ 472.843407][T18675] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000009 [ 472.843422][T18675] RBP: 00007feaad8e506b R08: 0000000000000000 R09: 0000000000000000 [ 472.843436][T18675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.843501][T18675] R13: 00007feaadad6038 R14: 00007feaadad5fa0 R15: 00007ffea9b59e28 [ 472.843523][T18675] [ 472.844050][T18659] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: block 3: comm syz.9.3203: lblock 3 mapped to illegal pblock 3 (length 3) [ 472.859199][T18659] EXT4-fs (loop9): Remounting filesystem read-only [ 472.879794][T18668] FAULT_INJECTION: forcing a failure. [ 472.879794][T18668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.879825][T18668] CPU: 0 UID: 0 PID: 18668 Comm: syz.1.3206 Not tainted syzkaller #0 PREEMPT(lazy) [ 472.879850][T18668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 472.879879][T18668] Call Trace: [ 472.879886][T18668] [ 472.879895][T18668] __dump_stack+0x1d/0x30 [ 472.879922][T18668] dump_stack_lvl+0x95/0xd0 [ 472.879946][T18668] dump_stack+0x15/0x1b [ 472.879968][T18668] should_fail_ex+0x262/0x280 [ 472.880057][T18668] should_fail+0xb/0x20 [ 472.880081][T18668] should_fail_usercopy+0x1a/0x20 [ 472.880120][T18668] _copy_from_user+0x1c/0xb0 [ 472.880261][T18668] do_ip_vs_set_ctl+0x1cd/0xab0 [ 472.880288][T18668] ? __futex_wait+0x1fd/0x260 [ 472.880317][T18668] nf_setsockopt+0x199/0x1b0 [ 472.880419][T18668] ip_setsockopt+0x102/0x110 [ 472.880445][T18668] tcp_setsockopt+0x98/0xb0 [ 472.880477][T18668] sock_common_setsockopt+0x69/0x80 [ 472.880525][T18668] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 472.880603][T18668] __sys_setsockopt+0x184/0x200 [ 472.880688][T18668] __x64_sys_setsockopt+0x64/0x80 [ 472.880770][T18668] x64_sys_call+0x248f/0x2550 [ 472.880798][T18668] do_syscall_64+0x112/0x360 [ 472.880824][T18668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.880847][T18668] RIP: 0033:0x7f6f5693e159 [ 472.880864][T18668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.880955][T18668] RSP: 002b:00007f6f55397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 472.880973][T18668] RAX: ffffffffffffffda RBX: 00007f6f56bc5fa0 RCX: 00007f6f5693e159 [ 472.880987][T18668] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000008 [ 472.880999][T18668] RBP: 00007f6f569d506b R08: 0000000000000000 R09: 0000000000000000 [ 472.881012][T18668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.881026][T18668] R13: 00007f6f56bc6038 R14: 00007f6f56bc5fa0 R15: 00007ffc5c8b0c38 [ 472.881054][T18668] [ 472.884716][T18677] random: crng reseeded on system resumption [ 473.463575][T18695] loop4: detected capacity change from 0 to 1024 [ 473.501597][T18695] EXT4-fs: Ignoring removed mblk_io_submit option [ 473.550565][T18695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 473.551314][T18695] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.621096][T18695] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.3213: lblock 3 mapped to illegal pblock 3 (length 3) [ 473.622194][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 473.686152][T18688] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.742803][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 473.789115][ T2] ================================================================== [ 473.789144][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 473.789169][ T2] [ 473.789175][ T2] read-write to 0xffffffff86e5c368 of 4 bytes by task 12777 on cpu 0: [ 473.789191][ T2] free_pid+0xb3/0x1b0 [ 473.789209][ T2] free_pids+0x54/0xb0 [ 473.789227][ T2] release_task+0xa28/0xb90 [ 473.789256][ T2] wait_consider_task+0x10ef/0x15f0 [ 473.789287][ T2] __do_wait+0xf1/0x500 [ 473.789312][ T2] do_wait+0xb6/0x230 [ 473.789342][ T2] kernel_wait4+0x19f/0x210 [ 473.789370][ T2] __x64_sys_wait4+0x91/0x120 [ 473.789397][ T2] x64_sys_call+0x108f/0x2550 [ 473.789425][ T2] do_syscall_64+0x112/0x360 [ 473.789445][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.789464][ T2] [ 473.789470][ T2] read to 0xffffffff86e5c368 of 4 bytes by task 2 on cpu 1: [ 473.789485][ T2] copy_process+0x1ae8/0x2360 [ 473.789504][ T2] kernel_clone+0x1c0/0x5f0 [ 473.789524][ T2] kernel_thread+0xe5/0x120 [ 473.789547][ T2] kthreadd+0x25b/0x320 [ 473.789565][ T2] ret_from_fork+0x146/0x330 [ 473.789591][ T2] ret_from_fork_asm+0x1a/0x30 [ 473.789619][ T2] [ 473.789623][ T2] value changed: 0x80000112 -> 0x80000111 [ 473.789633][ T2] [ 473.789637][ T2] Reported by Kernel Concurrency Sanitizer on: [ 473.789650][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(lazy) [ 473.789678][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 473.789692][ T2] ================================================================== [ 473.857478][T13006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 473.884926][T18705] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 474.214877][T18708] syzkaller1: entered promiscuous mode [ 474.214900][T18708] syzkaller1: entered allmulticast mode [ 474.244702][T18708] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3218'. [ 474.276079][T18708] loop3: detected capacity change from 0 to 512 [ 474.302861][T18708] vfat: Unknown parameter '¯v(zÃ…„覓6ÌMƒ¿Ôí÷ò<T‰/÷›Ïv§ûÛS»­ƒqž|ZNýÒ0F—Àà ÓÏvÄÂOâ0‡é¿õ‹+Ó_8†–Õ£x2zÇû÷kú×òèË|׉é·•t¥î‹ÜÑ«:XD^Ÿäc’œ¶ß€\Ÿ«tØàVˆ¨Z‹PìY‚ æ” `‹¡žRç‰ÌÚîŠ'