last executing test programs: 5m18.767211254s ago: executing program 32 (id=104): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000280)=0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x1, 0x0, 0xfffff031}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 4m36.456337218s ago: executing program 33 (id=549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xf, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x8090) (fail_nth: 1) 4m7.272284328s ago: executing program 34 (id=857): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m26.28093885s ago: executing program 35 (id=1981): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00400000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x7, 0x4}, 0xa4ca, 0x0, 0x2000008, 0xfe, 0xfffffffe, 0x18, 0xb, 0x2e, 0x2, 0x2000009, {0x2010001, 0x7ffb, 0x2, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40840}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r8, 0x89ea, &(0x7f00000002c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000980)={[{@stripe={'stripe', 0x3d, 0x3}}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@bsdgroups}]}, 0x0, 0x60b, &(0x7f0000000140)="$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") waitid$P_PIDFD(0x3, r7, 0x0, 0x40000004, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r5, 0x29, 0xd, 0x6, 0x7, 0x28, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, 0x80, 0x7800, 0xfff, 0xff}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x40000000000007, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, @perf_bp={0x0, 0xa}, 0x11e9e2, 0x8, 0xfffffffb, 0x8, 0xc, 0x20085, 0xffd, 0x0, 0x0, 0x0, 0x3}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newvlan={0x4c, 0x70, 0x800, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x28}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x24, 0x18, 0x1, 0x1070bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x1f, 0xb6}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4085}, 0x20040844) 2m5.670364179s ago: executing program 36 (id=2249): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x620542, 0x0) unshare(0x20000400) pwrite64(r2, 0x0, 0x0, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)) 2m0.654857753s ago: executing program 37 (id=2115): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bca38be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0xfd, 0x29b, &(0x7f0000000340)="$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") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file1\x00'}) stat(&(0x7f0000000880)='./file3\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, r3) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) setfsgid(r1) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setregid(0x0, r7) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000940)={{}, {0x1, 0x1}, [{0x2, 0x4}, {}, {0x2, 0x4, 0xee00}, {0x2, 0x3}, {0x2, 0x7}], {0x4, 0x3}, [], {0x10, 0x3}, {0x20, 0x2}}, 0x4c, 0x1) rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000140)='./file3\x00') r10 = gettid() r11 = gettid() ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x85f6, 0x0, 0x0, 0x3ffffffffffff, 0xffffffffffbffffe, 0x7f, 0xfffffe06}, 0x0) readv(r12, &(0x7f0000001300)=[{&(0x7f0000002380)=""/4098, 0x1002}], 0x1) write$cgroup_int(r13, &(0x7f0000000140), 0xfffffdef) setpgid(r10, r11) 53.206890347s ago: executing program 38 (id=3308): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) tkill(r4, 0x12) wait4(0x0, 0x0, 0x8, 0xffffffffffffffff) r5 = mq_open(&(0x7f0000000080)='\x00', 0x800, 0x104, &(0x7f00000000c0)={0x0, 0x16a4336c, 0x10, 0x1}) mq_timedreceive(r5, &(0x7f0000000340)=""/209, 0xd1, 0x7, &(0x7f0000000440)={0x0, 0x3938700}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233927534c65872ad16d4f5a4c5", 0x11}], 0x1, 0xe, 0x6) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x400) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000000000a59d47ac7476e189da72ba95e83384e2ac1b6437c1afda9c4fd5c12672fa79d50251a7ff1b6726e29636b98784ca0e441cbd9913d287574265f03513c99cef2c1c3457a6dee00d49e2e293812bbfe6c045cb67eb84fb782f2d44eb023a7236c7a7813876252ddeb2", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2, 0x3}}, 0x20) splice(r0, 0x0, r7, 0x0, 0x4ffe6, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107844e230007000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d26c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020004003200000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000001a00"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 51.797841732s ago: executing program 8 (id=3330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a0007"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xc3ff, {0x0, 0x0, 0x74, r5, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0x3}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, r8, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xf}, {0xffff, 0xa}, {0x3, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x9}, {0x1}, {0x300, 0xc}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e, r7}) r10 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_int(r10, 0x1, 0x9, &(0x7f0000000000)=0x7, 0x4) 51.44704688s ago: executing program 8 (id=3335): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtclass={0x24, 0x28, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xd, 0x2}, {0x6, 0x6}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x50000000) 51.326598623s ago: executing program 8 (id=3339): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0xfe, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x6, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x8000c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000002c0)={0x0, 'dummy0\x00', 0x3}, 0x18) socket$kcm(0x10, 0xf, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./bus\x00', 0x2704c63, 0x0, 0x0, 0x0, &(0x7f0000000080)) getdents(r4, &(0x7f0000000080)=""/237, 0xed) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0xb, "7ff0df0fafce0f0a0f9745"}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r5 = msgget$private(0x0, 0x480) msgsnd(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2000, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f00000006c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x1b, 0x804}, 0x0) 50.24804585s ago: executing program 8 (id=3348): r0 = mq_open(&(0x7f00000002c0)='ext4\x00', 0x40, 0x8, &(0x7f0000000580)={0x9, 0x80000000, 0xeb6, 0x7}) mq_getsetattr(r0, &(0x7f00000005c0)={0x8, 0x6, 0x0, 0x800}, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x402, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x200, 0x10314}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40e8662e, &(0x7f0000000040)={0x4, 0x40000000000002, 0x3, 0xfffffffffffffffe, 0x8001, 0x39}) getpgid(0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x3, 0x7ffcfffc}]}) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) (rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) write$binfmt_aout(r3, &(0x7f0000001140)=ANY=[@ANYRES16], 0x20) r4 = syz_clone(0x48000, &(0x7f00000001c0)="b0d2b2c54e043ea5e82283766c8808b465ed1578483da14665db64c32a143b371cfa1649c3f011000000000000e019b0682787a3fafd3bedd3a8fc860cf7bdb4c43ef925d54c2148ad7807585b86444a949521d206e582513655c63c34fe79b0b6e4493c27ca357a14d72f6a7146d2e9b6eb8a2b704f9c7b548919ba2ee01841564aafa3e0ac9adad89e45784dda3d32a0e1c2816b34357f2ff154e7fc1891604b2ee58f181ad112a5d68279d345954ae419b7259b60d60ddf46e5ca420d", 0xbe, &(0x7f00000000c0), &(0x7f00000004c0), &(0x7f0000000500)="f98eafe4cbb89c35285f75b5f8c5ee76d15ff3e9971174f953ca130cc85bf1b1a95d54860940c99e4eca7a2b1ac2357825ee6ecacfcdbe1a1fe6b43e32eb151fa394fd42a2f2cce458") perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0xb, 0xfe, 0x0, 0x3, 0x82, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x13f8, 0x14001, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x3}, r4, 0x6, 0xffffffffffffffff, 0xa) 49.998068016s ago: executing program 8 (id=3352): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1a33d6355871a5dd}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000107bb4284c000000dc00000000750000"], 0x18}, 0x404f444) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) close(r0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x1f62, 0x5, 0x0, [{0x4, 0x9, 0x2, 0x80, 0x7, 0x9, 0x1}, {0x0, 0x58e, 0x1, 0x9, 0x2, 0xf, 0x4, '\x00', 0x3}, {0x3f, 0x3, 0x0, 0xff, 0x4, 0x7f, 0x40, '\x00', 0x5}, {0xc98, 0x6, 0x7c6, 0x1, 0x9, 0x4, 0x8, '\x00', 0x8000}, {0x3, 0x5, 0x6, 0x7, 0x79, 0x8, 0xe, '\x00', 0x6}]}) 49.717989043s ago: executing program 8 (id=3356): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x267) 49.678842184s ago: executing program 39 (id=3356): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x267) 30.39440977s ago: executing program 7 (id=3574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x2100, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25170000006400068014000300322d73352e3a000000000000004363844c0004"], 0x78}, 0x1, 0x0, 0x0, 0x806}, 0x0) 30.282063583s ago: executing program 7 (id=3575): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x51cb}, 0x0, 0x10000, 0x10000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 30.275324933s ago: executing program 7 (id=3577): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x36}], 0x10}, 0x0) 30.198039995s ago: executing program 7 (id=3579): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) epoll_pwait2(r0, &(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x7]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/core_pattern\x00', 0x0, 0x0) read(r1, &(0x7f0000000300), 0x64) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000) mremap(&(0x7f000064b000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f0000000280)="29000000000b51cc", 0x8, 0x1000, 0x0, 0xbd4c3b8bc89fc43d, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x1, r3, 0x0, 0x0, 0x401, 0x0, 0x2, r3}]) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 29.630904559s ago: executing program 7 (id=3587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x51cb}, 0x0, 0x10000, 0x10000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 29.434105443s ago: executing program 7 (id=3588): truncate(&(0x7f0000000300)='./file2\x00', 0x5) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x100200, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x5, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0xd, 0x6be3, 0x4, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="6c0e0203591ef3ea1ef0a899e9e51802000000d78c00000000000400000085000000bc0600001500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b404040200", "bb6710bc8150e4a1a117d7b27caf00", "a376287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x23, 0x0) sendto$inet6(r2, &(0x7f0000000140)="d0672ff1ee9e086ae1e6e842682ca5de509d806e976d282d8c329103c22c85292378822160710d993a5fa4d0dc59eba5a60dc289fc85a0642913036953974741f6b779c73ba212ed5c359f9ed9ec57aca5d68263d57847a505bd88bb17f164b7ca34f9", 0x63, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r0, 0x25, 0x4, @void}, 0x10) 29.433863934s ago: executing program 40 (id=3588): truncate(&(0x7f0000000300)='./file2\x00', 0x5) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x100200, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x5, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0xd, 0x6be3, 0x4, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="6c0e0203591ef3ea1ef0a899e9e51802000000d78c00000000000400000085000000bc0600001500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b404040200", "bb6710bc8150e4a1a117d7b27caf00", "a376287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x23, 0x0) sendto$inet6(r2, &(0x7f0000000140)="d0672ff1ee9e086ae1e6e842682ca5de509d806e976d282d8c329103c22c85292378822160710d993a5fa4d0dc59eba5a60dc289fc85a0642913036953974741f6b779c73ba212ed5c359f9ed9ec57aca5d68263d57847a505bd88bb17f164b7ca34f9", 0x63, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r0, 0x25, 0x4, @void}, 0x10) 16.373874786s ago: executing program 4 (id=3776): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = fsopen(0x0, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") syz_open_dev$loop(0x0, 0x5ca, 0xc000) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001280)={0x2, 0x4, 0xfffffffefffffffc, 0x0, 0x5, 0x7ffffffffffffffe, 0xfffffffffffffffc, 0x87, 0xe934}) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000680)={0xc80a4000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x1, &(0x7f0000003380)={{}, {0x77359400}}, &(0x7f00000033c0)) 16.144023451s ago: executing program 4 (id=3778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x804818, &(0x7f0000000440)={[{@nojoliet}, {@check_strict}, {@hide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {}, {@nocompress}, {@check_strict}, {}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r4 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x100000, 0x1}}, 0x40) lseek(r3, 0x7, 0x4) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semctl$IPC_SET(0x0, 0x0, 0x13, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000004000000000000001b000000001f"], 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c80f9ffd3ee02a1f46033be7227e371734f4bcf0874f2c357991066feb314c1c80ac1a508ae9a0bf7f891f44deb950b42bf", @ANYRES16=r9, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000000008000400ac1414bb08000700", @ANYRES32=r10, @ANYBLOB="08000400ac1414bb"], 0x3c}}, 0x0) 16.132338672s ago: executing program 3 (id=3779): r0 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x7, 0x9}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000002", @ANYRES32=r0], 0x20, 0x4c004}], 0x1, 0xd5) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) io_uring_enter(r2, 0x2219, 0x35a5, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) (fail_nth: 2) 15.81338911s ago: executing program 3 (id=3782): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e24, @local}, 0x10, 0x0}, 0x20004010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffddb, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) pidfd_getfd(r3, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) membarrier(0x10, 0x0) io_setup(0x8, &(0x7f0000000600)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 15.81233647s ago: executing program 4 (id=3783): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2100001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x5, 0x520, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x2}, 0x10ecc8, 0x1223, 0x0, 0x5, 0x8, 0x4020005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 15.686259543s ago: executing program 3 (id=3789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0, 0x2) 15.676938173s ago: executing program 2 (id=3790): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x0, 0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000440)={0x0, {{0xa, 0x4e24, 0x0, @empty}}}, 0x88) 15.547050297s ago: executing program 3 (id=3791): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xc42f8000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x10, 0x3, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/45, 0x2d}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001280)={0x30000010}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000000), 0x1, 0x0, 0x27}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x40404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08f, 0x2, @perf_bp={0x0, 0x4}, 0x1004, 0x0, 0x10000, 0x3, 0x10001, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xd, 0xffffffffffffffff, 0x1) close(r5) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x40841) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab23bdf000fdffffff3200", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x2000c800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x34, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xcf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r7 = socket(0x10, 0x3, 0x0) r8 = getpid() r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r9, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x1}, 0x10) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="74657374e902faf80c0c65710a010400006861b517e2d6ab32", 0x19) 15.532277717s ago: executing program 4 (id=3792): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540), 0x84) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xa986a060e43cf6be, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) fchdir(r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000940)="5c9531ad27d9850000", 0x9}, {&(0x7f0000000240)='\x00\x00\x00\x00\x00', 0x5}], 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe"], 0x40}}], 0x1, 0xff00) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000140)=0x8) 15.334137722s ago: executing program 3 (id=3793): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x268cc, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000140)) socketpair(0x22, 0x6, 0x541, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e21, 0xffffffff, @mcast1, 0x1ff}}, {{0xa, 0x4e21, 0x104a3, @local, 0x6}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e23, 0xa, @mcast1, 0xffffffff}}, {{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffe01}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000001000000180100002020702500000000002020207b1af8ff0000007cdca100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000040)="f8", 0x1}, {&(0x7f0000000500)="36d0c30e1e330e1ab4dec2bf7f20e437fac6ae19b0fb7275194a8b0fa5d8b54da1c3045dbefdd301f723b42d8f3e07714fb9d8ae5e24469491", 0x39}], 0x2}}], 0x1, 0x2000c094) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) bind$can_j1939(r1, &(0x7f0000000540)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000600)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)=0x5) close(r3) sendmsg$can_j1939(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x1}, 0xff}, 0x18, &(0x7f0000000140)={0x0, 0xfffffffffffffcd2}, 0x1, 0x0, 0x0, 0x4000895}, 0x20048015) socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6014d71800140600fe8000000000000000000000000000aafe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50ff07fe907810019cb9"], 0x0) 15.333879311s ago: executing program 4 (id=3794): r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006b000000760000000000000027050000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) read(r2, 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./config/file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x116075, 0x3, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x28, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01') sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000000200)=@in6={0xa, 0x4e20, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x80, 0x0}, 0x50) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) close(0x3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x4c, 0x0, 0x4) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.176270966s ago: executing program 3 (id=3796): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) futimesat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{}, {0x0, 0x2710}}) 15.175269575s ago: executing program 41 (id=3796): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) futimesat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{}, {0x0, 0x2710}}) 14.764812776s ago: executing program 2 (id=3798): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x40002001}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x3}}, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x35, 0x0, 0x2800) 14.741507896s ago: executing program 4 (id=3799): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e24, @local}, 0x10, 0x0}, 0x20004010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffddb, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) pidfd_getfd(r3, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) membarrier(0x10, 0x0) io_setup(0x8, &(0x7f0000000600)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 14.730056997s ago: executing program 42 (id=3799): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e24, @local}, 0x10, 0x0}, 0x20004010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffddb, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) pidfd_getfd(r3, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) membarrier(0x10, 0x0) io_setup(0x8, &(0x7f0000000600)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 14.290952507s ago: executing program 2 (id=3801): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0, 0x2) 14.210158019s ago: executing program 2 (id=3802): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8114, 0x200000, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x0, 0x8) lseek(r0, 0x0, 0x4) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1f) ptrace(0x10, r1) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000e140004293c7000fddbdf25080001000100000008000300020000000800010000000400080001cc1443c8973c7dad000500000008003c0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4) 14.015563354s ago: executing program 2 (id=3803): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1a33d6355871a5dd}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x404f444) connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x1f62, 0x5, 0x0, [{0x4, 0x9, 0x2, 0x80, 0x7, 0x9, 0x1}, {0x0, 0x58e, 0x1, 0x9, 0x2, 0xf, 0x4, '\x00', 0x3}, {0x3f, 0x3, 0x0, 0xff, 0x4, 0x7f, 0x40, '\x00', 0x5}, {0xc98, 0x6, 0x7c6, 0x1, 0x9, 0x4, 0x8, '\x00', 0x8000}, {0x3, 0x5, 0x6, 0x7, 0x79, 0x8, 0xe, '\x00', 0x6}]}) 13.007416709s ago: executing program 2 (id=3808): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r1, 0x7, 0x0, 0x7) flock(0xffffffffffffffff, 0x8) connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001700)={r1, 0x20, &(0x7f00000016c0)={&(0x7f0000000600)=""/4096, 0x1000, 0x0, &(0x7f0000001600)=""/191, 0xbf}}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000180)=0x1, &(0x7f0000000240)=0x101) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r5, 0x0, 0x30, 0x11, @val=@uprobe_multi={&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x1000, 0x4a, 0x1, r6}}, 0x40) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r7, 0x0, 0x5004) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0), 0x109102, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000003c0)) writev(r8, &(0x7f0000000300)=[{&(0x7f00000005c0)='5A', 0x2}], 0x1) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000004c0)={0xa, 0x3, 0x1c, 0x8}, 0x8) unlinkat(r8, &(0x7f0000000140)='./file0\x00', 0x200) ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000100)) syz_clone3(&(0x7f0000000340)={0x10002000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x14}, &(0x7f0000000180)=""/134, 0x86, &(0x7f0000000240)=""/51, &(0x7f0000000300)=[r2, r6, r7], 0x3, {r8}}, 0x58) 13.007267439s ago: executing program 43 (id=3808): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r1, 0x7, 0x0, 0x7) flock(0xffffffffffffffff, 0x8) connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001700)={r1, 0x20, &(0x7f00000016c0)={&(0x7f0000000600)=""/4096, 0x1000, 0x0, &(0x7f0000001600)=""/191, 0xbf}}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000180)=0x1, &(0x7f0000000240)=0x101) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r5, 0x0, 0x30, 0x11, @val=@uprobe_multi={&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x1000, 0x4a, 0x1, r6}}, 0x40) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r7, 0x0, 0x5004) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0), 0x109102, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000003c0)) writev(r8, &(0x7f0000000300)=[{&(0x7f00000005c0)='5A', 0x2}], 0x1) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000004c0)={0xa, 0x3, 0x1c, 0x8}, 0x8) unlinkat(r8, &(0x7f0000000140)='./file0\x00', 0x200) ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000100)) syz_clone3(&(0x7f0000000340)={0x10002000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x14}, &(0x7f0000000180)=""/134, 0x86, &(0x7f0000000240)=""/51, &(0x7f0000000300)=[r2, r6, r7], 0x3, {r8}}, 0x58) 7.090456915s ago: executing program 1 (id=3873): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='prev_state.function ~', 0x15) 6.982402377s ago: executing program 1 (id=3877): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) r4 = socket(0x15, 0x5, 0x0) connect$unix(r4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @alu={0x7, 0x1, 0xa, 0xb, 0x9, 0x10, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000004c0)='GPL\x00', 0x80, 0x0, &(0x7f0000000580), 0x40f00, 0x16, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x10, 0x6, 0x3}, 0x10, r7}, 0x94) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x13, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xed}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x101}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0x6, 0x4, 0x6, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], &(0x7f0000000240)='syzkaller\x00', 0xb, 0x6b, &(0x7f0000000280)=""/107, 0x41000, 0x19, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x1, 0x8, 0x9}, 0x10, r7, r1, 0x9, &(0x7f0000000500)=[r8, r9], &(0x7f0000000540)=[{0x4, 0x2, 0xc, 0x1}, {0x2, 0x3, 0xc, 0x8}, {0x5, 0x1, 0xe}, {0x0, 0x5, 0xb, 0x3}, {0x1, 0x2, 0x2, 0x3}, {0x8005, 0x5, 0xc, 0x6}, {0x3, 0x4, 0xc}, {0x3, 0x4, 0x4, 0x1}, {0x1, 0x4, 0x3, 0xc}], 0x10, 0xf20}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r11 = accept4(r2, 0x0, 0x0, 0x0) write(r11, 0x0, 0x0) close(r11) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r12) sendmsg$NLBL_MGMT_C_ADD(r12, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0xf, 0x35, 0x17, 0x8, 0x9, 0xfb, 0x2, 0x11, 0xffffffffffffffff}}) 6.760744313s ago: executing program 1 (id=3879): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900), 0x0, 0x4044805) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000024000000241100000200000000000000000000100400000000000000000000090100000000000000000000040700000000005bfffe06945f2e716115742e3dc7a9f5a4e0a3952aa803191f44f2907a7c8f5616ed91de144ac70f132749f317e2a35cf88d8bb6b85026a354cb232c3f49ef6b657b6b164aaa302a33e4fcfa4eb4c5e7cb11d455be6037e3ee0a6ff6003adda5c81390253dddb18da418bfd011a3afb7737f9b41036491ee399d60d3ad9f8d5cf900295c0df727d0588663ec780c406e101db9040900fac357e8be"], 0x0, 0x3e}, 0x28) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/vm/nr_hugepages\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="110000000000000000000000010000000300000000000000480000000000000000000000070000004410c850000000090000000c4898508c44049a610723c264010101ac1414aae000000264010101ffffffffac1414bbffffffffe000000100140000fe"], 0x228}, 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000000)='10', 0x2, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x2964b000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001600000000a3badd47000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x99, 0xffffffffffffffff, 0x0, 0xb, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd2d, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfffffffffffffe95}, 0x3f) 5.23937419s ago: executing program 1 (id=3885): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='prev_state.function ~', 0x15) 4.486099479s ago: executing program 1 (id=3895): r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setregid(0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x10b0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setresuid(0x0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7ffffffe, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xc000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10480, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) getsockopt(r0, 0x3, 0x75932c0f, &(0x7f0000000ac0)=""/172, &(0x7f0000000b80)=0xac) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) getresuid(&(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x2d, 0x81, 0x7, 0x0, 0x800, 0x588b, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x1ff, 0x4}, 0x8584, 0x4, 0x1000, 0x8, 0x9, 0xf0aa, 0x7, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x2a8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x210, 0x1f0, 0x1f0, 0x210, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e24, 0x4e24, 0x4e24, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0xf, 0x26, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb1}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0xb4e4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(r6) socket$inet6_udp(0xa, 0x2, 0x0) close(r7) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.163007637s ago: executing program 1 (id=3896): openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fsopen(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) syz_usb_connect$printer(0x1, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffe]}, 0x0, 0x0, 0x8) tkill(0x0, 0x15) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) fsopen(0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x3b}}], 0x18}, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000a40)={0x2, 'virt_wifi0\x00', {0x8}, 0x7f}) close(r0) 2.953753817s ago: executing program 5 (id=3911): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x804818, &(0x7f0000000440)={[{@nojoliet}, {@check_strict}, {@hide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {}, {@nocompress}, {@check_strict}, {}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r3 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x100000, 0x1}}, 0x40) lseek(r2, 0x7, 0x4) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semctl$IPC_SET(0x0, 0x0, 0x13, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000004000000000000001b000000001f"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r7) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c80f9ffd3ee02a1f46033be7227e371734f4bcf0874f2c357991066feb314c1c80ac1a508ae9a0bf7f891f44deb950b42bf", @ANYRES16=r8, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000000008000400ac1414bb08000700", @ANYRES32=r9, @ANYBLOB="08000400ac1414bb"], 0x3c}}, 0x0) 2.731734833s ago: executing program 6 (id=3915): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='prev_state.function ~', 0x15) 2.550017417s ago: executing program 5 (id=3917): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x920, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x8}, 0x10fcc8, 0x1224, 0x0, 0x1, 0x6, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_DISALLOCATE(r0, 0x5608) dup(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[], 0xfe44, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x3ff, 0x5, 0x7, 0xffff}, {0x6, 0x9, 0xf}, {0x3688, 0xc, 0x1, 0x80000001}]}) 2.330183892s ago: executing program 6 (id=3919): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000008000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) unshare(0x42000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a300000000009000300730f003100000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c"], 0xe0}}, 0x0) r5 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) poll(&(0x7f0000009b00)=[{r5}], 0x20, 0x72) 1.907383853s ago: executing program 0 (id=3922): r0 = socket$nl_generic(0x10, 0x3, 0x10) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x2, 0x6, 0x8) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000200)=0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x8519}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x3000000, 0x40001000}) 1.816597135s ago: executing program 0 (id=3923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c00028008000004240001800a000100726564697200000014000280080001400000001708000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a00000000"], 0x94}}, 0x0) 1.783203606s ago: executing program 5 (id=3924): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mkdir(0x0, 0x190) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") syz_open_dev$loop(0x0, 0x5ca, 0xc000) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001280)={0x2, 0x4, 0xfffffffefffffffc, 0x0, 0x5, 0x7ffffffffffffffe, 0xfffffffffffffffc, 0x87, 0xe934}) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000680)={0xc80a4000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x1, &(0x7f0000003380)={{}, {0x77359400}}, &(0x7f00000033c0)) 1.571528351s ago: executing program 6 (id=3925): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x180c, 0x0, 0x0, 0x5, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000380)={0x6, 0x3, 0x7, 0x0, 0x5bc7, 0x1, 0x0, &(0x7f0000000300)=[{0x4, 0x101, 0x10}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/instances/foo/events/mygroup/myevent/enable\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) unlinkat(0xffffffffffffff9c, 0x0, 0x200) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fsopen(&(0x7f0000000100)='sockfs\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0100000000000000010000000000000000", @ANYRES32=0x0, @ANYRESDEC], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) mincore(&(0x7f000068f000/0x1000)=nil, 0x1000, &(0x7f0000000440)=""/224) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0xfbb9, 0xa2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002fc0)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.571196471s ago: executing program 0 (id=3926): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000001000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@quota}, {@resgid}]}, 0xfe, 0x49a, &(0x7f0000000d40)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001600)=ANY=[@ANYBLOB=':\x00\x00\x00', @ANYRESHEX=r4], 0x38}, 0x1, 0x0, 0x0, 0x2080098}, 0x54) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, 0x0, 0x84) pread64(r2, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0xa007, 0x20, 0x2000003, 0x3ce}, &(0x7f00000002c0), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0xf, &(0x7f00000003c0)={0x1003, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r7, r9, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x459, &(0x7f00000008c0)="$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") bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 1.561417151s ago: executing program 6 (id=3927): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x804818, &(0x7f0000000440)={[{@nojoliet}, {@check_strict}, {@hide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {}, {@nocompress}, {@check_strict}, {}]}, 0x2, 0x553, &(0x7f0000000b00)="$eJzs3dtuE0kawPGvQ7JYXim7WlYIRQGKsCsFKZi2DUYWV73tslNgd1vdbZRcoYg4KMKBFWGlTW7Y3LAz0sxDMJfzEPNGaB5hRn1wjj4AOU70/1lQ5e5y1deO1Z8qcVcLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63ZdtGSpvE6S2o4txb4rb2n2auPbJB7B4oR44pY8T/J5eRGuunG3/d2X4//m5PZ9Nms5OIiJ9t/vv7XJ9cmJ/qvHxHwV/npG3va3Np+vdLrdd+dVCAX0M2rw/c1tGdC37SchlYm9FW1UrEfLNZDVTdNHS6HkW4pN9BO5Adq3r2nitVqWenCst/xGjWnqfsbH98v2XZFPS20tROEvvfgaSF0F02zabxG0ibeHbd5HH8Qn5lIRdppKbW23uuWxx1A3Kj4JY1K4xqV7FKpWCyVipVH1UePbXvyyAb7EDnS4uQ+tPhjOsGzN3A8E1n+l6YY8aQjS6IGPlypSSC+tIbsz/Tz/z8f6JHj7s///Sx/Y2/3jCT5/1b67Naw/D8klrN7bMqWbMtrWZGe9KQr7849orN9NESLJ0ZC8cVIS5xki8q2KKlKRSpiywtZlPpU/EOsi5GmaAllWUKJRCefKFcC0eJIJL4EomReXLknSopSlaqURYmWgiyLLx3xpCE1cZJe1mQ9ed/LoqxhMe42Kg49jHz/c9eV0oijJf/j+E7y9A0cy2/9/A8AAAAAAC4tK/ntezz/n5KbSa1umto+77AAAAAAAMAJSv7yPxsXybezborF/B8AAAAAgMvGSq6xs0QkL7fT2ppYyeVS/BIAAAAAAIBLIvn7/624SNZAuS3W7nIpzP8BAAAAALgkvhu7xn7Yvmr98qsEwZS10176h7WRrM3rbFxJX3flcI9RfcaazjpJikpaTE66etbKpY12F8H8nBVr4+Kw9gJwdgP439cEcG1SfpA7aZs7q2m5mu35SzpKvm6auuD6zSdFcZzpiUgvRf95s/5fSQ7/e681beVkvdctvHzbW01i2Yl72dnIFlA8so7iiFjeJ+stJNdcDDziqeRCjGzcvCVr672u3V66mvXsbEyklYmDI36YHjHmR5lLW81lK97m+3vSMXPxmMXCsKPPoige88g/yt20zd35u2kxIIrSuChK+6MY/F4cP4ryuCjKx4wCAM7L2pgsZMmRvPsNZ7lvy+7yldn9o8ynbeZnkhPr5MyAM7o97oxuHzO7/XzkHkjDcmw87o+Hsuqn+AWfho4bNktW/BZeeb/xb7m+ubV9f31j5VX3VfdNqVSu2A9t+1FJppLDyApyDwBggP332LEG5v+xd+GxHmaz6p3Ds+os4/1t9ysFBXkpb6Unq7KQXG2QfONgYK/5fV9DWBgza80naTK9w8vCiFndn5KrHPr9lka2PRhD+Sx+FAAAnJm5MXn4S/L/wph598FcPnp2nN93tzYAAHA6dPDZykf/t4LAtF8Uq9WiEy1qFfjuMxWYWkMr40U6cBcdr6FVO/Aj3/WbceW5qelQhZ122w8iVfcD1fZDs5QsH6iyW7+HuuV4kXHDdlM7oVau70WOG6maCV3V7vyracJFHSQvDtvaNXXjOpHxPRX6ncDVBaVCrfc1NDXtRaZu4qqn2oFpOUFOPfebnZZWNR26gWlHftphfyzj1f2glXRbOO83GwCAC2Jza/v1Sq/XfXeKlYED5878UAEAQGZMlgYAAAAAAAAAAAAAAAAAAAAAABfAWVz/R+WSV/pLQV+UeKicQGXsqePDqZ+cAJyq3wMAAP//5sZO5Q==") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r3 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x100000, 0x1}}, 0x40) lseek(r2, 0x7, 0x4) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semctl$IPC_SET(0x0, 0x0, 0x13, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000004000000000000001b000000001f"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r7) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c80f9ffd3ee02a1f46033be7227e371734f4bcf0874f2c357991066feb314c1c80ac1a508ae9a0bf7f891f44deb950b42bf", @ANYRES16=r8, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000000008000400ac1414bb08000700", @ANYRES32=r9, @ANYBLOB="08000400ac1414bb"], 0x3c}}, 0x0) 1.288965768s ago: executing program 0 (id=3931): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) lsm_set_self_attr(0x5a0535ba9f17c80, 0x0, 0x1001, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x0, 0x8a, 0x0, 0x40000001, 0x6}, 0x28) r1 = socket$kcm(0x11, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLN~\x96\x1bZ\xfe\nTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x92\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x82\x95\xc9\xf3uw\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec\x00\x00\x00\x00\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q\x92\xb1\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03', 0x42, 0x148, 0x0) read(r5, &(0x7f00000002c0)=""/135, 0x87) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x111b40, 0x0) setsockopt$MRT6_TABLE(r6, 0x29, 0xcf, &(0x7f0000000300)=0xff, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002840)={{r2, 0xfc7, 0x2, 0xffff, 0x0, 0xffff, 0x5, 0xfffffff2, 0x8, 0x4, 0x579a3a2b, 0x536, 0x7, 0x7fffffffffffffff}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0xffffffffffffff91, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@random="b10d13d9eb32", @link_local={0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x10, 0x4, 0x1, 0x10, 0x40, 0x64, 0x0, 0x1, 0x91, 0x0, @remote, @remote, {[@ssrr={0x89, 0x13, 0x18, [@loopback, @multicast1, @broadcast, @multicast2]}, @cipso={0x86, 0x16, 0x3, [{0x1, 0x2}, {0x6, 0xe, "0fb1d901320e3ce418532346"}]}]}}}}}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a280000000b0a01040000000000000000020000010900010073797a3000000000080005400000002a8c000000050a010100000000000000000a0000070c0002400000000000000001080007006e617400640008800c00014000040000000000000c00024000000000000000060c000240fffffffffffffeff0c00024000000000000000080c00024000000000000000000c00014000000000000000070c00014000000000000000040c000240000000000000007f8c020000090a010200000000000000000300000308000a40000000035c02098060000280040001802c000180080001400000000808000140000000050800014000000001080001400000000008000140000000002c000180080001400000000508000140000000030800014000000954080001400000000408000140000010000800014000000009240102802c0001800800014000000fff0800014000000033080001400000010808000140000000000800014000007fff0c00018008000140000000040c000180080001400000008a440001800800014000000278080001400000000308000140000008cf080001400000000508000140000009670800014000000005080001400000004008000140000084064c000180080001400000000208000140000000030800014000000007080001400000c9e9080001400000fff9080001400000000008000140000007ff080001400000009908000140000001011400018008000140000000080800014000000000240001800800014000000800080001400000b9b5080001400000000608000140000000081400018008000140000000030800014000000008cc0002801c000180080001400000000408000140000000020800014000000003040001802c000180080001400000000d0800014000000400080001400000000408000140000000030800014000000206a3739d80fd75385ceee8ff320800014000000002080001400000000b0800014000000002080001400000000808000140ffffffff1400018008000140000000010800014000000401340001800800014000000010080001400000000408000140ffff588f0800014000000c450800014000000001080001400001000008000740000000200c00104000000000000000051c0000000e0a01030000000000000000150000050800044000000001140000001100010000000000000000000000000aed96de17e6bd6219cc0bf2d7f39d432e57ec04fa9804cbe5cb7a480c2a239d4e8936fbab078aca247bb8ffe9226a3ad09758add6083fd062a9ad51a52583bc00bbd7653949d3370c6eb8795e"], 0x384}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0xc, 0x4, {0x3ff, @usage=0x8000, 0x0, 0x7, 0x0, 0x7, 0x2, 0xfffffffffffffffb, 0x88, @struct={0x400, 0x80000001}, 0x3, 0x0, [0xffffffff, 0x9, 0x5, 0xfffffffffffffffc, 0xfffffffffffffff9, 0x1ff]}, {0x0, @usage=0x5fed5bb2, 0x0, 0x9, 0x7, 0x100, 0x6, 0x4, 0x410, @usage=0x3, 0x6, 0x80000000, [0x78, 0x4, 0x3, 0x10001, 0xd0d3, 0x401]}, {0x5, @usage=0xa, 0x0, 0xd81, 0x9, 0x400, 0xe4ed, 0xfff, 0x11, @usage=0x5, 0x9, 0x4952c918, [0x1000, 0xfff, 0x8, 0xb3, 0x4e, 0x1]}, {0xa0, 0xfffffffffffffc01, 0x8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001840)={{r1}, r3, 0xc, @unused=[0x6, 0xfffffffffffffbff, 0x2, 0x9], @devid=r9}) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x4028015}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='selinuxfs\x00', 0x14044, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, 0x0) socket$rds(0x15, 0x5, 0x0) 1.277930828s ago: executing program 5 (id=3932): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xffffffffffffffbb, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1f}, 0x2412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 1.19407816s ago: executing program 9 (id=3933): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000500)={0x9, 0x108, 0xfa00, {r3, 0x4, "b53dbc", "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"}}, 0x110) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) (async) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x101400) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000003c0)={r5, 0x7, {0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x6, 0x1f, 0x10, "dc8b32710ab27bb8ad680cb5f80e306bdc21971ce6b7e0c5989c910c14bba306a775b95867d0043ffbeaec7d40f48089da50c5d635273188452891727b5c943c", "42b6b3b4b6376ac4d6514e8df7fd53750bb15c4a4aef014284d531466426d7403e16990db0ebb6db92305e38d77143d205188b2d85f460d6de131bd59a57155e", "1edc18d5d3b0f94437333617b3cfd2708fe3723399554370688632c0c3e0b26c", [0x5, 0x6]}}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x402, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x123d, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xf9, 0x0, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000000000000000", 0x0, 0xfe, 0x60000000, 0x98, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", 0x0, 0x0, 0x700}, 0x50) (async) mlockall(0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(r6, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) (async) getresuid(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$rfkill(0xffffffffffffff9c, 0x0, 0x200, 0x0) 1.193357991s ago: executing program 0 (id=3934): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000001c0)={0x186, 0x5}) r1 = perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x10, 0x47, 0xa, 0x7, 0x0, 0x9, 0x42400, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf59}, 0x4200, 0x4, 0x2, 0x0, 0xc94, 0x85, 0x8, 0x0, 0x1, 0x0, 0x100000000}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x9, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, r1, 0x0) r3 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=0x0, @ANYRESOCT=r4, @ANYRES16=r2, @ANYRESDEC=r3, @ANYRES64=r2, @ANYBLOB="35482dc380d0864a75fb046c07496a4ff751fe7f041759eea75fff91775883b1cceeae4b91b7be372246f567c9edf2f2deb5f6bde710ce7706cce04b94f3dd3696c9b4d62dfed5840124b64495df3c2e3deeb6a574ed449c6427dce66430f954f513300792bd4233977d27a4ac48c23b131c404e19e913a67c6fd7453b341b7c2a9063dc3e7bf7c5e61b8817e035e46dcb162273ed91dbd9148bea4f08a4fb70d729", @ANYRESHEX=r5], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendto$inet6(r6, &(0x7f0000000040)="cb", 0x1, 0x24004090, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, r5, 0x300, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5f9}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x81}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xffff}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="15060000f2ff01000000030000003000018014000400ff010000000000000000000000000001060005004e220000060001000a"], 0x44}, 0x5}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, &(0x7f00000000c0)={0x2, 0xe26, @broadcast}, 0x10) listen(r9, 0xb) setxattr$system_posix_acl(&(0x7f0000000200)='./bus\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0x5}, [{0x2, 0x6}, {0x2, 0x4}, {0x2, 0x1, 0xffffffffffffffff}], {}, [{0x8, 0x4}, {0x8, 0x6}, {}, {}], {0x10, 0x4}}, 0x5c, 0x3) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x3e, 0x6, 0xd}, 0x8, 0x4, 0x107f, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f00002e1000/0x2000)=nil, 0x2000, 0x2, 0xc3072, 0xffffffffffffffff, 0x202000) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r10, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r10, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(r10, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.19311706s ago: executing program 5 (id=3935): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000440)={0x0, {{0xa, 0x4e24, 0x0, @empty}}}, 0x88) 1.090692273s ago: executing program 9 (id=3936): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xffffffffffffffbb, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1f}, 0x2412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 1.089460343s ago: executing program 6 (id=3937): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x40084) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x10) r2 = accept(r1, &(0x7f00000003c0)=@can, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, {0xa, 0x4e22, 0xe0000000, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7}, 0x1, {[0x200, 0x7, 0x200, 0x7, 0x401, 0x1, 0xa7, 0xbe]}}, 0x5c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2025}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009f227bd7080fdffffff02180000", @ANYRES32=r5, @ANYBLOB="08000100ac1414bb08000200e0000002080002007f00"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) socket$inet_tcp(0x2, 0x1, 0x0) 1.002088495s ago: executing program 0 (id=3938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x74, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002600)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)='\"', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000003c0)={0x0, 0x23e, 0x2, "3e99"}, 0xa) 1.001946165s ago: executing program 6 (id=3939): r0 = socket$nl_generic(0x10, 0x3, 0x10) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x2, 0x6, 0x8) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000200)=0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x8519}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x3000000, 0x40001000}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$kcm(0x21, 0x2, 0xa) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) 990.072856ms ago: executing program 9 (id=3940): r0 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x2f0, 0x100, 0xffffffff, 0x100, 0x100, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, &(0x7f0000000100), {[{{@ip={@remote, @empty, 0xff, 0xffffffff, 'veth0_to_team\x00', 'vlan1\x00', {}, {}, 0x62, 0x2, 0x22}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x2}}, @common=@ah={{0x30}, {[0x5, 0x1], 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x14, @empty, @multicast2, @port=0x4e22, @port=0x4e22}}}}, {{@ip={@empty, @rand_addr=0x64010102, 0xff000000, 0x0, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {}, 0x8, 0x0, 0x20}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x1}}, @common=@icmp={{0x28}, {0xd, "9719"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @gre_key=0x1, @gre_key=0xfffc}}}}, {{@ip={@broadcast, @private=0xa010101, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'ip6tnl0\x00', {0xff}, {}, 0x2, 0x2, 0xc2}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @private=0xa010101, @port=0x4e24, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @icmp_id=0x65, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) close(r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='encrypted\x00', &(0x7f0000000340)=@secondary) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400100000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 973.689776ms ago: executing program 9 (id=3941): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x9, 0xc, 0x2, 0x4, 0x0, 0x8020, 0x80, 0xc54e62a572349613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x2, @perf_bp={0x0, 0x7}, 0x8244, 0x3, 0xfffffffc, 0x7, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x908002, &(0x7f0000000480)={[{@usrjquota}, {@nomblk_io_submit}, {@commit={'commit', 0x3d, 0x3}}], [{@uid_gt}, {@obj_role={'obj_role', 0x3d, 'task\x00'}}, {@appraise}]}, 0x0, 0x4c3, &(0x7f0000000800)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xe}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3f7, 0x3, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000340)={0x200, 0x8, 0x4, 0xfffffffc, 0x2, 0x0, [{0x8000000000c39f, 0x11, 0x80b, '\x00', 0x1}, {0x100, 0x7ff, 0x0, '\x00', 0x4}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDMKTONE(r2, 0x4b30, 0x81) ioctl$TCFLSH(r3, 0x400455cb, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) r7 = syz_open_procfs(r5, &(0x7f0000000040)='wchan\x00') fchdir(r7) epoll_create1(0x0) 698.112213ms ago: executing program 9 (id=3942): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2020600) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000010000000000000000000000000000fcffffff00"]}, 0x105) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000240)={0x9919, 0x339, 0x8, 0x1f, 0xa, "7874c791f92c00d2abac28f5d70dee3336a61d"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000004c0)=0xa) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x11e, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={0x0, r3}, 0x18) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bind$packet(r4, &(0x7f0000000180), 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) socket(0x26, 0x800, 0x200) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x0, 0x1}, @generic={0x4, 0x0, 0x9, 0xcdc1, 0x9}], &(0x7f0000000240)='syzkaller\x00', 0x80, 0xc8, &(0x7f0000000300)=""/200, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x2, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0xffffffffffffffff, r6], &(0x7f0000000540)=[{0x3, 0x4, 0xe}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x5, 0x0, 0x5}, {0x5, 0x3, 0xc, 0xb}, {0x2, 0x5, 0x5, 0x6}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) 335.947971ms ago: executing program 5 (id=3943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0216ef050a0000002dbd7000ffdbdf250800120002000100b86b6e"], 0x50}}, 0x840) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xb, 0x8, 0x6, 0x1, 0xffff8001}, 0x9, 0x2}, [{0x40, 0x7, 0x400, 0xf2, 0xe8f, 0x8}, {0xea00, 0xfffffc01, 0x2000004a, 0xfffff000, 0xd, 0x80007ff}, {0xffffa6a2, 0x29, 0x1ac, 0x0, 0x81, 0x7}, {0x2, 0xa, 0xf, 0x7, 0x9, 0x9}, {0x1, 0x3, 0x80000000, 0x2, 0x0, 0x7fffffff}, {0x0, 0xffffff01, 0x4, 0x4, 0xd, 0x9}, {0x2, 0x9, 0x5, 0x8, 0x5, 0x9}, {0x1e, 0x8000, 0x4, 0x10000, 0x10, 0x5a52}, {0x1, 0x4, 0x8, 0x4, 0x8, 0x1}, {0x6, 0x6, 0x800, 0x10000, 0x6, 0x300000}, {0x9, 0x1, 0x200, 0xf0, 0x3, 0xa00000}, {0x100, 0x2, 0x8, 0xc, 0x400, 0x2}, {0x800, 0x6, 0x6, 0xfffffff9, 0x8, 0x6428}, {0x8001, 0x8000, 0xf51, 0x400, 0x8000, 0xa}, {0x3, 0x5, 0x4, 0x1, 0xffffffff, 0x81}, {0x9, 0x0, 0x2, 0x90000, 0x6, 0xbeac}, {0x7f, 0x7, 0x10001, 0x7, 0x8000, 0xc6d0}, {0x7, 0x4, 0x200, 0xa, 0x1, 0x10000}, {0x0, 0x9, 0x7, 0x9, 0x7, 0x3}, {0x6, 0x800, 0x3, 0x401, 0xfffffbf5, 0x3}, {0x6, 0x3, 0x7f96, 0x8, 0x551, 0xbc}, {0x5, 0x7ff, 0x3ea, 0xe, 0xaf, 0xdec}, {0x6, 0xfffffff2, 0x7, 0x3}, {0x6, 0x1, 0x8, 0x2, 0x3, 0x80}, {0x116, 0x7, 0x101, 0x7fff, 0x401, 0x8}, {0x1, 0x7, 0x800, 0x3, 0x80000001, 0xffffffff}, {0x80, 0x2, 0x3, 0xffff, 0x79314002, 0xe}, {0x8, 0xffff7fff, 0x800, 0x32e, 0x3, 0x7}, {0xffff, 0xe, 0x7a, 0x4080000, 0x1, 0x7}, {0x3, 0x7, 0x80, 0x3, 0x1, 0x734b916e}, {0xfffffff8, 0x5, 0x5, 0xffffffff, 0xe, 0x50d}, {0x3, 0x400, 0x4, 0x1, 0x3316, 0x8}, {0x0, 0x140, 0x9, 0x7ff, 0x80000001, 0x1}, {0xffff0000, 0x1, 0x7fff, 0x7, 0xfff, 0xfff00000}, {0x81, 0x101, 0x2, 0x7, 0x2, 0x1acaa3e9}, {0x80, 0x5, 0xd0b, 0xd, 0x0, 0x3}, {0xc62, 0x80000001, 0x1, 0x8ae, 0xc, 0x100}, {0x3, 0xf9, 0x7, 0xec0, 0x200, 0xc80}, {0x2, 0x0, 0x7ff, 0x8c, 0x1000, 0xd}, {0x7, 0xb701, 0x10000, 0x6, 0x1, 0x8}, {0x6, 0x1, 0x8, 0x101, 0x8000, 0x1}, {0x40, 0x3c6b000, 0x7, 0x8, 0x1, 0x7}, {0x1, 0xffff, 0x9, 0x4, 0x10000, 0x8001}, {0x40, 0x4, 0x9, 0xfffffff7, 0x3, 0x1}, {0x8, 0x1, 0xffff, 0x9, 0x90001, 0x401}, {0x0, 0xfffffff7, 0x4, 0x2, 0x3be3}, {0x80000000, 0x6, 0x9, 0x0, 0x7, 0x8}, {0xfe000000, 0x7ff, 0x2, 0x0, 0x8, 0x9}, {0x8, 0x9, 0x8, 0x6, 0x10001, 0x1}, {0x4, 0x2, 0x1ff, 0x400, 0x1, 0x1}, {0x74f, 0x5, 0x1000, 0x2, 0x195a, 0x4}, {0x20, 0x9, 0x9, 0x1, 0x1, 0xaafe}, {0x3f, 0xfffffffa, 0xfff, 0x2, 0x8, 0x7ff}, {0x6c, 0xfffffffb, 0x6, 0x47, 0x4, 0xfffffffd}, {0x4, 0xb4ab, 0x8, 0x5, 0x3, 0x1}, {0x100, 0x0, 0x6, 0x5, 0x10002, 0x1000}, {0x1000, 0xc1db, 0x0, 0x6, 0x1, 0x5}, {0x4, 0x87c, 0x9df, 0x4, 0xbf55}, {0x3, 0x1000, 0x8001, 0x1, 0x6, 0x1000}, {0x14e5, 0x3f54, 0xfffffffb, 0x9, 0x7, 0xe482}, {0x3, 0xffff, 0x7, 0x800, 0x1d, 0x4}, {0xfff, 0x7fffffff, 0x9, 0x10000, 0x2, 0x8}, {0x9b, 0x6, 0x7fff, 0xfffffffb, 0x2, 0x3c}, {0x5, 0x7ff, 0x6, 0x40, 0xf, 0x6}, {0x4, 0x9, 0x2400000, 0x2, 0x6, 0x4}, {0x6, 0x0, 0x40, 0x201a861c, 0x8, 0x8}, {0x5fe, 0xfffffffa, 0x1000, 0x6, 0xfff}, {0x4, 0x1000, 0x8, 0xbc34, 0x5, 0xe6}, {0x8, 0xec54, 0x8000, 0x7, 0x8, 0x6}, {0xc4, 0x7, 0x7ff, 0x6, 0x4, 0x98}, {0x8, 0x8001, 0x5, 0x7fffffff, 0xcea8, 0xff}, {0x5, 0x400, 0x6, 0x1, 0xfffffff9, 0x2}, {0xffdf, 0xfffffffe, 0x80, 0x5, 0x57f, 0x8}, {0x6, 0x2, 0x1, 0x5, 0x4}, {0x1ff, 0x8000, 0x1, 0x80000001, 0x80, 0x7}, {0x3, 0x235, 0x0, 0x4, 0x100, 0x7}, {0x7, 0x8f9, 0x4, 0xb, 0xfbc, 0x3}, {0x2, 0x7, 0xd, 0x7, 0x9, 0x5}, {0x2, 0x9, 0x3, 0x3, 0x740, 0x3}, {0xfffff0ab, 0x8c6a, 0x2000, 0x0, 0x8, 0x4}, {0x6, 0x8, 0x1, 0x1000, 0x200, 0x8}, {0x800, 0x7, 0x800, 0x3ff, 0x800, 0x8000}, {0x7fff, 0x5, 0x5, 0x3, 0xa000, 0xe}, {0x6, 0x9, 0xb, 0x8, 0x8, 0x479}, {0x7fffffff, 0x0, 0x1, 0x6, 0x8001, 0x10000}, {0x1, 0x8, 0x6, 0x0, 0x8, 0x7}, {0x4, 0x4, 0x80000001, 0x3, 0x8001, 0xf7}, {0x3, 0x5, 0x3, 0x1, 0x4, 0x5}, {0xdd00, 0x7, 0xd, 0x1, 0x2, 0xa79f}, {0x5, 0xfffffffd, 0xb9, 0x3, 0x6, 0x2}, {0x9, 0x5, 0x34400000, 0x401, 0x1, 0xffffffb2}, {0x401, 0x3ff, 0x0, 0x5d, 0x9, 0x8}, {0x6, 0x6, 0x2, 0x5, 0x0, 0x3}, {0x10, 0x7, 0x5, 0x4f, 0x20000000, 0x80000000}, {0x6, 0x96c, 0x0, 0xfffffff6, 0x7, 0x3ff}, {0x0, 0x4, 0x6, 0x2, 0x1, 0x5}, {0x8, 0xfffff2ca, 0x2, 0x5, 0x4, 0xe43}, {0x9, 0x0, 0xe67, 0x7f, 0x101, 0xc}, {0x0, 0xfffffff7, 0xfffffffc, 0x28a, 0x2, 0x6dd1}, {0x1, 0x4, 0x0, 0xd7, 0x1, 0x5}, {0x4, 0x3, 0x4e82, 0x6, 0x7f, 0x35c}, {0x0, 0x5, 0x8, 0x2, 0x10000, 0x5}, {0x4, 0x3, 0x0, 0xd, 0x5, 0x7}, {0x800, 0xf7, 0x0, 0x8, 0x0, 0x8e38}, {0x2000005, 0x40, 0xfa, 0x5, 0x43e, 0x5}, {0x2, 0x6, 0x5, 0x9, 0x2, 0x6d4}, {0x6, 0x0, 0x10000, 0x5, 0x7, 0x5}, {0xd, 0x9, 0x9, 0xd19, 0x3, 0x400}, {0x1000, 0xfffffffa, 0x0, 0x8001, 0xf00, 0x10001}, {0x10000, 0x4, 0xa, 0x72b, 0x0, 0x80000000}, {0x2, 0xf, 0x77, 0x100, 0xfe, 0x7}, {0x6, 0x8, 0x80000001, 0x3, 0x8, 0x9}, {0x5, 0x101, 0x3, 0x2, 0xa}, {0x3, 0x4, 0x3, 0x6, 0x6, 0x5}, {0x5, 0x7, 0x3, 0x1, 0x0, 0x8}, {0x7fffffff, 0x1, 0x7, 0x40, 0xc37, 0x9e}, {0x10000, 0x8, 0x1, 0x8, 0xb536, 0x9}, {0x1, 0xffffffc0, 0x7, 0x2, 0x3, 0xbf}, {0xc0a, 0xffffff1e, 0x5, 0xe, 0x90, 0x6}, {0x4, 0x7, 0x0, 0x0, 0x10, 0x1}, {0x100, 0x5, 0x6, 0x6, 0x8, 0x17f}, {0x47af, 0x8, 0x4, 0x2, 0x1, 0x8}, {0xa, 0x3, 0xb, 0x4, 0x5, 0x3}, {0x4, 0x7, 0x5, 0xba1b, 0xffff, 0xc87e}, {0x374f, 0x9, 0x5, 0xa, 0x1c87, 0xa2}, {0x3, 0x0, 0x5, 0x8000, 0x1ff, 0x7fffffff}, {0x0, 0x5104, 0x2, 0x7fffffff, 0x6, 0x7}, {0x101, 0x5c, 0x800, 0x6, 0x40, 0x8000}], [{0x5, 0x1}, {}, {0x2}, {0x4}, {0x3}, {0x4}, {0x2}, {0x6, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0xc9b7e1d7f2ad2980, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) 0s ago: executing program 9 (id=3944): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) kernel console output (not intermixed with test programs): 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.701527][T16387] RSP: 002b:00007f198fb87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.701562][T16387] RAX: ffffffffffffffda RBX: 00007f19913b5fa0 RCX: 00007f199112e0d9 [ 324.701577][T16387] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 324.701591][T16387] RBP: 00007f198fb87090 R08: 0000000000000000 R09: 0000000000000000 [ 324.701639][T16387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.701654][T16387] R13: 00007f19913b6038 R14: 00007f19913b5fa0 R15: 00007ffc77bfaf08 [ 324.701674][T16387] [ 324.723229][T16380] EXT4-fs (loop7): 1 truncate cleaned up [ 324.742716][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 324.743117][ C1] EXT4-fs (loop7): initial error at time 1786180965: ext4_mb_generate_buddy:1317 [ 324.744323][ C1] EXT4-fs (loop7): last error at time 1786180965: ext4_acquire_dquot:7041 [ 324.770934][T16393] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 324.774059][T16380] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.811709][T16393] netlink: 372 bytes leftover after parsing attributes in process `syz.0.3449'. [ 324.825056][ T28] audit: type=1400 audit(1786180966.065:4974): avc: denied { write } for pid=16379 comm="syz.7.3444" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.837313][T16394] loop4: detected capacity change from 0 to 1024 [ 324.840561][T16380] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.3444: iget: bad i_size value: 360287970189639690 [ 324.851332][T16394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 325.142402][T16394] EXT4-fs (loop4): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 325.183941][ T6442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.194374][T16394] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.209841][T16410] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.223486][T16394] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.3448: lblock 0 mapped to illegal pblock 0 (length 1) [ 325.263922][T16412] loop7: detected capacity change from 0 to 512 [ 325.295291][T16394] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 325.323153][T16412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 325.359524][T16394] EXT4-fs (loop4): This should not happen!! Data will be lost [ 325.359524][T16394] [ 325.542429][T15825] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 325.554693][T15825] EXT4-fs (loop4): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 326.090496][T16428] loop2: detected capacity change from 0 to 256 [ 326.125250][T16428] FAT-fs (loop2): bogus logical sector size 65529 [ 326.170458][T16428] FAT-fs (loop2): Can't find a valid FAT filesystem [ 326.722484][ T6442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.778914][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 327.336310][T16490] netlink: 'syz.7.3470': attribute type 15 has an invalid length. [ 327.365473][T16492] loop2: detected capacity change from 0 to 256 [ 327.367474][T16490] netlink: 666 bytes leftover after parsing attributes in process `syz.7.3470'. [ 327.381804][T16492] FAT-fs (loop2): bogus logical sector size 65529 [ 327.400407][T16492] FAT-fs (loop2): Can't find a valid FAT filesystem [ 327.611061][ T4215] Bluetooth: hci0: Frame reassembly failed (-84) [ 327.660012][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 327.660030][ T28] audit: type=1400 audit(1786180968.915:4983): avc: denied { write } for pid=16506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.703896][T16524] loop1: detected capacity change from 0 to 128 [ 327.718237][ T28] audit: type=1400 audit(1786180968.955:4984): avc: denied { write } for pid=16528 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.740950][T16524] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.753173][T16524] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 327.786489][T16532] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 327.960320][ T28] audit: type=1400 audit(1786180969.215:4985): avc: denied { unmount } for pid=15585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 328.172607][T16563] loop2: detected capacity change from 0 to 512 [ 328.188097][T16564] loop7: detected capacity change from 0 to 164 [ 328.216651][ T28] audit: type=1400 audit(1786180969.475:4986): avc: denied { write } for pid=16546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.247763][T16567] loop4: detected capacity change from 0 to 1024 [ 328.261719][T16563] EXT4-fs (loop2): 1 orphan inode deleted [ 328.268099][T16563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.280703][T16567] EXT4-fs: Ignoring removed bh option [ 328.299582][T16564] rock: directory entry would overflow storage [ 328.325602][T16567] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 328.342930][ T28] audit: type=1400 audit(1786180969.545:4987): avc: denied { write } for pid=16573 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.365193][T16564] rock: sig=0x5252, size=5, remaining=3 [ 328.371414][T16563] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.371481][T16567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 328.390988][T16567] System zones: 0-1, 3-12 [ 328.397045][T16567] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.3490: lblock 1 mapped to illegal pblock 1 (length 1) [ 328.411692][T16567] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 328.411857][T16567] EXT4-fs (loop4): Remounting filesystem read-only [ 328.420949][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 328.420975][ C0] EXT4-fs (loop4): initial error at time 1786180969: ext4_map_blocks:833: inode 3: block 1 [ 328.421011][ C0] EXT4-fs (loop4): last error at time 1786180969: ext4_map_blocks:833: inode 3: block 1 [ 328.444347][T16564] netlink: 'syz.7.3486': attribute type 30 has an invalid length. [ 328.462149][T16567] Quota error (device loop4): write_blk: dquota write failed [ 328.469567][T16567] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 328.480045][T16567] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 328.488948][T16567] EXT4-fs (loop4): 1 orphan inode deleted [ 328.502085][T16567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.527175][T15585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.537332][T15825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.589927][T16586] loop2: detected capacity change from 0 to 1024 [ 328.598122][T16586] EXT4-fs: dax option not supported [ 328.616869][T16586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3493'. [ 328.661364][T16584] socket: no more sockets [ 328.670830][T16584] socket: no more sockets [ 328.677763][T16584] socket: no more sockets [ 328.727074][ T28] audit: type=1400 audit(1786180969.955:4988): avc: denied { write } for pid=16593 comm="syz.2.3496" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 328.751805][ T28] audit: type=1400 audit(1786180969.955:4989): avc: denied { open } for pid=16593 comm="syz.2.3496" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 328.934386][T16599] loop7: detected capacity change from 0 to 4096 [ 328.983722][T16599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.005944][T16599] geneve2: entered allmulticast mode [ 329.047144][ T6442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.170413][T16605] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 329.180208][T10590] bond0: (slave bond_slave_0): interface is now down [ 329.187105][T10590] bond0: (slave bond_slave_1): interface is now down [ 329.194381][T10590] bond0: now running without any active interface! [ 329.235069][T16605] infiniband syz1: set down [ 329.239648][T16605] infiniband syz1: added bond0 [ 329.253179][T16605] RDS/IB: syz1: added [ 329.264609][T16605] smc: adding ib device syz1 with port count 1 [ 329.277057][T16605] smc: ib device syz1 port 1 has no pnetid [ 329.492218][T16628] loop7: detected capacity change from 0 to 512 [ 329.501105][T16628] EXT4-fs: Ignoring removed nobh option [ 329.512959][T16628] EXT4-fs (loop7): inodes count not valid: 4 vs 32 [ 329.584096][T11322] Bluetooth: hci0: command 0x1003 tx timeout [ 329.590344][ T9596] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 329.635499][T16636] netlink: 'syz.7.3512': attribute type 1 has an invalid length. [ 329.644005][T16635] netlink: 'syz.7.3512': attribute type 1 has an invalid length. [ 329.657790][T16636] bond3: entered promiscuous mode [ 329.663015][T16636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.671918][T16635] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3512'. [ 329.681088][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3512'. [ 329.749954][T16635] loop7: detected capacity change from 0 to 512 [ 329.759435][T16635] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 329.778576][T16635] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 329.796572][T16635] EXT4-fs (loop7): 1 truncate cleaned up [ 329.802495][T16635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.833775][ T6442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.949801][T16662] loop7: detected capacity change from 0 to 512 [ 329.966603][T16662] EXT4-fs (loop7): 1 orphan inode deleted [ 329.972942][T16662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.986635][T16662] ext4 filesystem being mounted at /556/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.040117][ T6442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.145840][T16669] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3523'. [ 330.276287][T16674] 9p: Bad value for 'rfdno' [ 330.287638][T16672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.310452][ T6442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.495632][T16692] tcf_pedit_act: 22 callbacks suppressed [ 330.495652][T16692] tc action pedit 'at' offset -4096 out of bounds [ 330.507745][T16692] tc action pedit 'at' offset -4096 out of bounds [ 330.514173][T16692] tc action pedit 'at' offset -4096 out of bounds [ 330.520592][T16692] tc action pedit 'at' offset -4096 out of bounds [ 330.527064][T16692] tc action pedit 'at' offset -4096 out of bounds [ 330.533626][T16692] tc action pedit 'at' offset -4096 out of bounds [ 330.540065][T16692] tc action pedit 'at' offset -4096 out of bounds [ 330.546508][T16692] tc action pedit 'at' offset -4096 out of bounds [ 330.553008][T16692] tc action pedit 'at' offset -4096 out of bounds [ 330.559445][T16692] tc action pedit 'at' offset -4096 out of bounds [ 330.565999][T16692] TC_ACT_REPEAT abuse ? [ 330.598334][T16690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.696345][ T6442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.788999][T16706] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 330.797175][T16706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 330.805466][T16706] EXT4-fs (loop7): orphan cleanup on readonly fs [ 330.826040][T14452] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 330.835420][T16706] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #13: comm syz.7.3537: iget: bad i_size value: 12154761577498 [ 330.849185][T16706] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 330.849460][T16706] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3537: couldn't read orphan inode 13 (err -117) [ 330.858667][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 330.858697][ C1] EXT4-fs (loop7): initial error at time 1786180972: ext4_orphan_get:1399: inode 13 [ 330.858728][ C1] EXT4-fs (loop7): last error at time 1786180972: ext4_orphan_get:1399: inode 13 [ 330.900325][T16706] loop7: lost filesystem error report for type 5 error -117 [ 330.900908][T16706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 330.926057][T16706] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.3537: dx entry: limit 65535 != root limit 120 [ 330.941437][T16706] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3537: Corrupt directory, running e2fsck is recommended [ 331.006698][T10586] Bluetooth: hci0: Frame reassembly failed (-84) [ 331.016268][ T6442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.050083][T16729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.072012][T16731] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.136632][T16729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.166044][T16731] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 331.349756][T16744] netlink: 'syz.1.3546': attribute type 39 has an invalid length. [ 331.811282][T16760] FAULT_INJECTION: forcing a failure. [ 331.811282][T16760] name failslab, interval 1, probability 0, space 10, times 0 [ 331.824238][T16760] CPU: 0 UID: 0 PID: 16760 Comm: syz.2.3553 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 331.824280][T16760] Tainted: [W]=WARN [ 331.824288][T16760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.824371][T16760] Call Trace: [ 331.824379][T16760] [ 331.824388][T16760] __dump_stack+0x1d/0x30 [ 331.824476][T16760] dump_stack_lvl+0x95/0xd0 [ 331.824507][T16760] dump_stack+0x15/0x1b [ 331.824526][T16760] should_fail_ex+0x25e/0x270 [ 331.824553][T16760] should_failslab+0x8c/0xb0 [ 331.824637][T16760] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 331.824661][T16760] ? skb_clone+0x151/0x1f0 [ 331.824682][T16760] ? skb_clone+0x151/0x1f0 [ 331.824709][T16760] skb_clone+0x151/0x1f0 [ 331.824729][T16760] __netlink_deliver_tap+0x2be/0x510 [ 331.824757][T16760] netlink_unicast+0x654/0x680 [ 331.824781][T16760] netlink_sendmsg+0x5be/0x6f0 [ 331.824814][T16760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.824918][T16760] ____sys_sendmsg+0x532/0x580 [ 331.824940][T16760] ___sys_sendmsg+0x195/0x1e0 [ 331.825057][T16760] __x64_sys_sendmsg+0xd4/0x160 [ 331.825080][T16760] x64_sys_call+0x194c/0x3020 [ 331.825231][T16760] do_syscall_64+0x136/0x3c0 [ 331.825280][T16760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.825327][T16760] RIP: 0033:0x7fb119b9e0d9 [ 331.825346][T16760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.825367][T16760] RSP: 002b:00007fb1185f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.825387][T16760] RAX: ffffffffffffffda RBX: 00007fb119e25fa0 RCX: 00007fb119b9e0d9 [ 331.825401][T16760] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 331.825529][T16760] RBP: 00007fb1185f7090 R08: 0000000000000000 R09: 0000000000000000 [ 331.825545][T16760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.825560][T16760] R13: 00007fb119e26038 R14: 00007fb119e25fa0 R15: 00007ffc6fdfb0d8 [ 331.825581][T16760] [ 332.121036][T16774] FAULT_INJECTION: forcing a failure. [ 332.121036][T16774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.145560][T16774] CPU: 1 UID: 0 PID: 16774 Comm: syz.2.3555 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 332.145616][T16774] Tainted: [W]=WARN [ 332.145624][T16774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.145636][T16774] Call Trace: [ 332.145653][T16774] [ 332.145662][T16774] __dump_stack+0x1d/0x30 [ 332.145689][T16774] dump_stack_lvl+0x95/0xd0 [ 332.145733][T16774] dump_stack+0x15/0x1b [ 332.145830][T16774] should_fail_ex+0x25e/0x270 [ 332.145859][T16774] should_fail+0xb/0x20 [ 332.145893][T16774] should_fail_usercopy+0x1a/0x20 [ 332.145925][T16774] copy_folio_from_iter_atomic+0x24b/0x10a0 [ 332.145995][T16774] ? is_bad_inode+0x16/0x30 [ 332.146019][T16774] ? fat_write_begin+0x52/0xe0 [ 332.146040][T16774] ? __pfx_fat_get_block+0x10/0x10 [ 332.146074][T16774] generic_perform_write+0x2c4/0x490 [ 332.146155][T16774] __generic_file_write_iter+0x9e/0x120 [ 332.146177][T16774] ? __pfx_generic_file_write_iter+0x10/0x10 [ 332.146201][T16774] generic_file_write_iter+0x77/0x1f0 [ 332.146227][T16774] ? __pfx_generic_file_write_iter+0x10/0x10 [ 332.146372][T16774] vfs_write+0x57d/0x990 [ 332.146403][T16774] ksys_write+0xdc/0x1a0 [ 332.146422][T16774] __x64_sys_write+0x40/0x50 [ 332.146443][T16774] x64_sys_call+0x27e1/0x3020 [ 332.146469][T16774] do_syscall_64+0x136/0x3c0 [ 332.146501][T16774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.146536][T16774] RIP: 0033:0x7fb119b9e0d9 [ 332.146554][T16774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.146574][T16774] RSP: 002b:00007fb1185d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.146597][T16774] RAX: ffffffffffffffda RBX: 00007fb119e26090 RCX: 00007fb119b9e0d9 [ 332.146613][T16774] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000004 [ 332.146662][T16774] RBP: 00007fb1185d6090 R08: 0000000000000000 R09: 0000000000000000 [ 332.146685][T16774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.146699][T16774] R13: 00007fb119e26128 R14: 00007fb119e26090 R15: 00007ffc6fdfb0d8 [ 332.146719][T16774] [ 332.376312][T16776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3558'. [ 332.445789][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3558'. [ 332.454218][T16783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=16783 comm=syz.0.3562 [ 332.486973][T16784] set_capacity_and_notify: 7 callbacks suppressed [ 332.486988][T16784] loop7: detected capacity change from 0 to 512 [ 332.499716][T16776] hsr_slave_1 (unregistering): left promiscuous mode [ 332.508193][T16784] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 332.512427][T16783] geneve3: entered allmulticast mode [ 332.532323][T16784] EXT4-fs (loop7): orphan cleanup on readonly fs [ 332.540334][T16784] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.3561: bad orphan inode 15 [ 332.551364][T16784] loop7: lost filesystem error report for type 5 error -117 [ 332.551784][T16784] ext4_test_bit(bit=14, block=5) = 0 [ 332.564884][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 332.564964][ C0] EXT4-fs (loop7): initial error at time 1786180973: ext4_orphan_get:1425 [ 332.565043][ C0] EXT4-fs (loop7): last error at time 1786180973: ext4_orphan_get:1425 [ 332.594847][T16784] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 332.624369][ T6442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.648458][T16788] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 332.684163][ T4215] Bluetooth: hci1: Frame reassembly failed (-84) [ 332.735881][T16801] loop1: detected capacity change from 0 to 128 [ 332.833884][T16801] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.904464][T16801] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 333.028055][T16812] loop2: detected capacity change from 0 to 2048 [ 333.039900][ T9596] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 333.296256][T16812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.308863][T16812] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.379524][T15585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.418376][T16821] loop2: detected capacity change from 0 to 128 [ 333.517161][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 333.517178][ T28] audit: type=1400 audit(1786180974.775:5018): avc: denied { setopt } for pid=16829 comm="syz.2.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 333.547429][ T28] audit: type=1400 audit(1786180974.775:5019): avc: denied { read } for pid=16829 comm="syz.2.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 333.595289][T16837] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.622122][T16839] loop7: detected capacity change from 0 to 4096 [ 333.636222][T16839] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.652468][ T28] audit: type=1400 audit(1786180974.905:5020): avc: denied { write } for pid=16838 comm="syz.7.3579" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.675231][ T28] audit: type=1400 audit(1786180974.905:5021): avc: denied { write } for pid=16838 comm="syz.7.3579" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.699574][ T28] audit: type=1400 audit(1786180974.915:5022): avc: denied { mounton } for pid=16838 comm="syz.7.3579" path="/576/file0/proc" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 333.724927][ T28] audit: type=1400 audit(1786180974.965:5023): avc: denied { map } for pid=16838 comm="syz.7.3579" path="/576/file0/blkio.bfq.io_wait_time" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 333.781968][ T28] audit: type=1400 audit(1786180975.035:5024): avc: denied { write } for pid=16852 comm="syz.2.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 333.844894][T10586] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.853938][T10586] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.863283][T10586] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.872566][T10586] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.132174][ T28] audit: type=1400 audit(1786180975.385:5025): avc: denied { write } for pid=6442 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.133305][ T6442] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 334.154421][ T28] audit: type=1400 audit(1786180975.385:5026): avc: denied { write } for pid=6442 comm="syz-executor" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.168053][ T6442] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 334.189455][ T28] audit: type=1400 audit(1786180975.385:5027): avc: denied { unlink } for pid=6442 comm="syz-executor" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 334.257382][T15149] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.358415][ T4215] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.368956][ T4215] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.427915][ T4215] bond0: (slave netdevsim2): Releasing backup interface [ 334.436595][ T4215] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.447749][ T4215] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.529909][ T4215] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.542810][ T4215] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.547554][ T3374] IPVS: starting estimator thread 0... [ 334.559330][T16888] IPv6: NLM_F_REPLACE set, but no existing node found! [ 334.603940][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'. [ 334.624840][ T4215] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.635688][ T4215] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.647703][T16899] loop2: detected capacity change from 0 to 512 [ 334.655488][T16892] IPVS: using max 2736 ests per chain, 136800 per kthread [ 334.667723][T16899] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 334.684317][T16899] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 198:freeing already freed block (bit 197); block bitmap corrupt. [ 334.699457][T11322] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 334.705684][ T3593] Bluetooth: hci1: command 0x1003 tx timeout [ 334.718738][T16899] EXT4-fs (loop2): Remounting filesystem read-only [ 334.725863][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 334.725888][ C0] EXT4-fs (loop2): initial error at time 1786180975: mb_free_blocks:2049: inode 11: block 198 [ 334.725925][ C0] EXT4-fs (loop2): last error at time 1786180975: mb_free_blocks:2049: inode 11: block 198 [ 334.769204][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 334.780431][T16899] EXT4-fs (loop2): 1 truncate cleaned up [ 334.803248][T16899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.813950][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.831343][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.832532][T15825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.838921][T16872] bridge_slave_0: entered allmulticast mode [ 334.854497][T16872] bridge_slave_0: entered promiscuous mode [ 334.872693][T10594] netdevsim netdevsim7 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.883509][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.890707][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.893756][T15585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.898298][T16872] bridge_slave_1: entered allmulticast mode [ 334.914054][T16872] bridge_slave_1: entered promiscuous mode [ 335.081469][ T4215] bond0 (unregistering): Released all slaves [ 335.088383][ T3373] SELinux: failure in sel_netif_sid_slow(), invalid network interface (1422) [ 335.106094][ T4215] bond1 (unregistering): (slave veth3): Releasing active interface [ 335.115541][ T4215] bond1 (unregistering): Released all slaves [ 335.127052][ T4215] bond2 (unregistering): Released all slaves [ 335.136936][ T4215] bond3 (unregistering): Released all slaves [ 335.152360][T16872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.163201][T16872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.184460][T16872] team0: Port device team_slave_0 added [ 335.184472][T16937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3598'. [ 335.191130][T16872] team0: Port device team_slave_1 added [ 335.216877][T16936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3598'. [ 335.247092][T16872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.257814][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.290416][T16872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.303239][T16872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.310500][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.440518][T16872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.566960][ T4215] tipc: Disabling bearer [ 335.573712][ T4215] tipc: Left network mode [ 335.583266][T10586] netdevsim netdevsim7 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.636238][T16952] pim6reg: entered allmulticast mode [ 335.742174][ T4215] hsr_slave_0: left promiscuous mode [ 335.749163][ T4215] hsr_slave_1: left promiscuous mode [ 335.773792][ T4215] veth1_macvtap: left promiscuous mode [ 335.785302][ T4215] veth0_macvtap: left promiscuous mode [ 335.797673][ T4215] veth1_vlan: left promiscuous mode [ 335.809339][ T4215] veth0_vlan: left promiscuous mode [ 335.971940][T10589] netdevsim netdevsim7 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.993396][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 336.015947][T16872] hsr_slave_0: entered promiscuous mode [ 336.021938][T16872] hsr_slave_1: entered promiscuous mode [ 336.056986][T16986] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3607'. [ 336.176960][T14452] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.204577][T10589] netdevsim netdevsim7 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.235460][T17013] loop1: detected capacity change from 0 to 1024 [ 336.302022][T17013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 336.320837][T17013] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.350470][T17028] FAULT_INJECTION: forcing a failure. [ 336.350470][T17028] name failslab, interval 1, probability 0, space 10, times 0 [ 336.365296][T17028] CPU: 1 UID: 0 PID: 17028 Comm: syz.4.3615 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 336.365394][T17028] Tainted: [W]=WARN [ 336.365400][T17028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.365420][T17028] Call Trace: [ 336.365428][T17028] [ 336.365436][T17028] __dump_stack+0x1d/0x30 [ 336.365501][T17028] dump_stack_lvl+0x95/0xd0 [ 336.365523][T17028] dump_stack+0x15/0x1b [ 336.365542][T17028] should_fail_ex+0x25e/0x270 [ 336.365570][T17028] should_failslab+0x8c/0xb0 [ 336.365594][T17028] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 336.365764][T17028] ? skb_clone+0x151/0x1f0 [ 336.365815][T17028] ? skb_clone+0x151/0x1f0 [ 336.365832][T17028] skb_clone+0x151/0x1f0 [ 336.365848][T17028] __netlink_deliver_tap+0x2be/0x510 [ 336.365873][T17028] netlink_unicast+0x654/0x680 [ 336.365958][T17028] netlink_sendmsg+0x5be/0x6f0 [ 336.365983][T17028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.366005][T17028] ____sys_sendmsg+0x532/0x580 [ 336.366054][T17028] ___sys_sendmsg+0x195/0x1e0 [ 336.366079][T17028] __x64_sys_sendmsg+0xd4/0x160 [ 336.366103][T17028] x64_sys_call+0x194c/0x3020 [ 336.366151][T17028] do_syscall_64+0x136/0x3c0 [ 336.366176][T17028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.366195][T17028] RIP: 0033:0x7f199112e0d9 [ 336.366210][T17028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.366226][T17028] RSP: 002b:00007f198fb87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.366303][T17028] RAX: ffffffffffffffda RBX: 00007f19913b5fa0 RCX: 00007f199112e0d9 [ 336.366316][T17028] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 336.366328][T17028] RBP: 00007f198fb87090 R08: 0000000000000000 R09: 0000000000000000 [ 336.366339][T17028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.366351][T17028] R13: 00007f19913b6038 R14: 00007f19913b5fa0 R15: 00007ffc77bfaf08 [ 336.366392][T17028] [ 336.615597][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 336.811157][ T4215] IPVS: stop unused estimator thread 0... [ 336.886097][T16872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 336.936335][T16872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.988587][T16872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.050036][T16872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.063592][T16872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.077751][T16872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.094587][T16872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.110353][T16872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.208842][T16872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.256792][T16872] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.297965][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.305104][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.321797][T10597] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.328956][T10597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.336937][T10597] Bluetooth: hci0: Frame reassembly failed (-84) [ 337.375808][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 337.393312][T17076] loop2: detected capacity change from 0 to 128 [ 337.435624][T17076] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.463151][T17076] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 337.618227][T16872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.759199][T17121] netlink: 'syz.1.3630': attribute type 1 has an invalid length. [ 337.774356][T17121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.795480][T16872] veth0_vlan: entered promiscuous mode [ 337.804998][T17115] loop4: detected capacity change from 0 to 4096 [ 337.814793][T17121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.826169][ T4215] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 337.837588][T17121] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 337.848101][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 337.850037][T17115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.869974][T16872] veth1_vlan: entered promiscuous mode [ 337.915620][T16872] veth0_macvtap: entered promiscuous mode [ 337.937456][T16872] veth1_macvtap: entered promiscuous mode [ 337.944441][T10590] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 337.959480][T16872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.968375][T16872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.006216][T15825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.016452][T10594] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.031773][T10594] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.065112][T10594] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.105249][T10589] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.123065][T17136] loop1: detected capacity change from 0 to 2048 [ 338.229121][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 338.302319][T17136] loop1: p1 < > [ 338.349361][T17157] netlink: 'syz.3.3634': attribute type 4 has an invalid length. [ 338.362821][T17161] loop1: detected capacity change from 0 to 512 [ 338.383437][T17161] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 338.407024][T17161] EXT4-fs (loop1): 1 truncate cleaned up [ 338.413209][T17161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.426546][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.429276][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3639'. [ 338.433913][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.454524][T17161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.461887][T17161] IPv6: NLM_F_CREATE should be set when creating new route [ 338.491812][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.493590][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3640'. [ 338.501172][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.562172][T10594] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.580575][T10594] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.590222][T10594] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.599471][T10594] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.611793][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.718483][T17178] loop1: detected capacity change from 0 to 512 [ 338.736921][T17178] EXT4-fs (loop1): 1 orphan inode deleted [ 338.743835][T17178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.756386][T17178] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.835151][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.910264][T17198] loop1: detected capacity change from 0 to 512 [ 338.945407][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 338.945422][ T28] audit: type=1400 audit(1786180980.165:5102): avc: denied { write } for pid=17189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.029214][T17215] netlink: 'syz.4.3650': attribute type 21 has an invalid length. [ 339.037074][T17215] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3650'. [ 339.046149][T17215] netlink: 'syz.4.3650': attribute type 4 has an invalid length. [ 339.053919][T17215] netlink: 'syz.4.3650': attribute type 5 has an invalid length. [ 339.054489][ T28] audit: type=1400 audit(1786180980.255:5103): avc: denied { write } for pid=17210 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.064615][T17215] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3650'. [ 339.092812][T17215] netlink: 'syz.4.3650': attribute type 21 has an invalid length. [ 339.129904][T17215] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3650'. [ 339.163299][T17215] netlink: 'syz.4.3650': attribute type 4 has an invalid length. [ 339.171074][T17215] netlink: 'syz.4.3650': attribute type 5 has an invalid length. [ 339.178898][T17215] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3650'. [ 339.189042][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3651'. [ 339.219945][T17234] loop1: detected capacity change from 0 to 256 [ 339.238200][T17234] FAT-fs (loop1): bogus logical sector size 65529 [ 339.245527][T17234] FAT-fs (loop1): Can't find a valid FAT filesystem [ 339.301127][ T28] audit: type=1400 audit(1786180980.525:5104): avc: denied { create } for pid=17239 comm="syz.4.3656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 339.332626][T17234] FAULT_INJECTION: forcing a failure. [ 339.332626][T17234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.346310][T17234] CPU: 0 UID: 0 PID: 17234 Comm: syz.1.3653 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 339.346404][T17234] Tainted: [W]=WARN [ 339.346422][T17234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.346436][T17234] Call Trace: [ 339.346444][T17234] [ 339.346453][T17234] __dump_stack+0x1d/0x30 [ 339.346485][T17234] dump_stack_lvl+0x95/0xd0 [ 339.346515][T17234] dump_stack+0x15/0x1b [ 339.346539][T17234] should_fail_ex+0x25e/0x270 [ 339.346589][T17234] should_fail+0xb/0x20 [ 339.346644][T17234] should_fail_usercopy+0x1a/0x20 [ 339.346746][T17234] _copy_from_iter+0xcc/0xe70 [ 339.346781][T17234] ? __alloc_skb+0x511/0x6f0 [ 339.346849][T17234] ? __alloc_skb+0x205/0x6f0 [ 339.346908][T17234] netlink_sendmsg+0x4a4/0x6f0 [ 339.346954][T17234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.346991][T17234] ____sys_sendmsg+0x532/0x580 [ 339.347016][T17234] ___sys_sendmsg+0x195/0x1e0 [ 339.347107][T17234] __x64_sys_sendmsg+0xd4/0x160 [ 339.347139][T17234] x64_sys_call+0x194c/0x3020 [ 339.347183][T17234] do_syscall_64+0x136/0x3c0 [ 339.347255][T17234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.347280][T17234] RIP: 0033:0x7f02e42be0d9 [ 339.347299][T17234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.347318][T17234] RSP: 002b:00007f02e2d17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.347343][T17234] RAX: ffffffffffffffda RBX: 00007f02e4545fa0 RCX: 00007f02e42be0d9 [ 339.347413][T17234] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 339.347427][T17234] RBP: 00007f02e2d17090 R08: 0000000000000000 R09: 0000000000000000 [ 339.347442][T17234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.347492][T17234] R13: 00007f02e4546038 R14: 00007f02e4545fa0 R15: 00007ffdc051d618 [ 339.347513][T17234] [ 339.535123][T11322] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 339.561489][T17250] loop3: detected capacity change from 0 to 2048 [ 339.563719][T17255] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3661'. [ 339.590121][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'. [ 339.600729][ T28] audit: type=1400 audit(1786180980.815:5105): avc: denied { write } for pid=17227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.623984][ T28] audit: type=1400 audit(1786180980.845:5106): avc: denied { write } for pid=17256 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.675602][T17260] lo: entered allmulticast mode [ 339.682797][T17263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3656'. [ 339.733192][T17253] lo: left allmulticast mode [ 339.748450][T17267] vlan0: entered promiscuous mode [ 339.779409][T17270] loop1: detected capacity change from 0 to 1764 [ 339.857238][T17272] bond1: entered allmulticast mode [ 339.865880][T17272] gre1: entered allmulticast mode [ 339.958936][T17283] 9p: Bad value for 'rfdno' [ 340.071769][T17289] loop4: detected capacity change from 0 to 512 [ 340.078540][T17289] EXT4-fs: Ignoring removed nobh option [ 340.084822][T17289] EXT4-fs (loop4): inodes count not valid: 4 vs 32 [ 340.264843][T17295] loop4: detected capacity change from 0 to 164 [ 340.273311][T17295] iso9660: Unknown parameter 'i`chars' [ 340.421024][T17302] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 340.430732][T17302] gretap1: entered allmulticast mode [ 340.520221][ T28] audit: type=1400 audit(1786180981.775:5107): avc: denied { bind } for pid=17303 comm="syz.3.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 340.600061][T17304] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 340.610662][T17304] FAT-fs (loop3): Filesystem has been set read-only [ 340.618397][T17317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=17317 comm=syz.0.3678 [ 340.675961][T17315] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 340.695648][T17315] FAT-fs (loop4): Filesystem has been set read-only [ 340.702777][T17315] FAULT_INJECTION: forcing a failure. [ 340.702777][T17315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.716529][T17315] CPU: 1 UID: 0 PID: 17315 Comm: syz.4.3677 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 340.716565][T17315] Tainted: [W]=WARN [ 340.716574][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.716586][T17315] Call Trace: [ 340.716613][T17315] [ 340.716622][T17315] __dump_stack+0x1d/0x30 [ 340.716649][T17315] dump_stack_lvl+0x95/0xd0 [ 340.716671][T17315] dump_stack+0x15/0x1b [ 340.716845][T17315] should_fail_ex+0x25e/0x270 [ 340.716874][T17315] should_fail+0xb/0x20 [ 340.716980][T17315] should_fail_usercopy+0x1a/0x20 [ 340.717045][T17315] _copy_to_user+0x20/0xa0 [ 340.717068][T17315] simple_read_from_buffer+0xb5/0x130 [ 340.717095][T17315] proc_fail_nth_read+0x10e/0x150 [ 340.717143][T17315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.717164][T17315] vfs_read+0x18e/0x7c0 [ 340.717184][T17315] ? __rcu_read_unlock+0x4e/0x70 [ 340.717211][T17315] ? __fget_files+0x184/0x1c0 [ 340.717253][T17315] ? mutex_lock+0x57/0x90 [ 340.717277][T17315] ksys_read+0xdc/0x1a0 [ 340.717303][T17315] __x64_sys_read+0x40/0x50 [ 340.717391][T17315] x64_sys_call+0x2886/0x3020 [ 340.717415][T17315] do_syscall_64+0x136/0x3c0 [ 340.717443][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.717522][T17315] RIP: 0033:0x7f19910ee90e [ 340.717540][T17315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.717557][T17315] RSP: 002b:00007f198fb65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.717580][T17315] RAX: ffffffffffffffda RBX: 00007f198fb666c0 RCX: 00007f19910ee90e [ 340.717659][T17315] RDX: 000000000000000f RSI: 00007f198fb660a0 RDI: 000000000000000b [ 340.717673][T17315] RBP: 00007f198fb66090 R08: 0000000000000000 R09: 0000000000000000 [ 340.717688][T17315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.717701][T17315] R13: 00007f19913b6128 R14: 00007f19913b6090 R15: 00007ffc77bfaf08 [ 340.717719][T17315] [ 340.937013][T17322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.978955][T17333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42514 sclass=netlink_route_socket pid=17333 comm=syz.4.3682 [ 341.022355][T16872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.038337][ T28] audit: type=1400 audit(1786180982.255:5108): avc: denied { bind } for pid=17334 comm="syz.0.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 341.058078][ T28] audit: type=1400 audit(1786180982.255:5109): avc: denied { map } for pid=17334 comm="syz.0.3684" path="socket:[50290]" dev="sockfs" ino=50290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 341.081374][ T28] audit: type=1400 audit(1786180982.255:5110): avc: denied { read } for pid=17334 comm="syz.0.3684" path="socket:[50290]" dev="sockfs" ino=50290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 341.346777][T15585] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.835874][T17386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.864612][T17390] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.885723][T17390] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 341.912516][T17390] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 341.932551][T17390] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 341.941086][ T28] audit: type=1326 audit(1786180983.195:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.4.3705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199112e0d9 code=0x7ffc0000 [ 341.945270][T17390] System zones: 0-2, 18-18, 34-35 [ 342.021432][T17390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.140159][T17390] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3704: bg 0: block 353: padding at end of block bitmap is not set [ 342.161140][T17390] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 342.172010][T17404] FAULT_INJECTION: forcing a failure. [ 342.172010][T17404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.186175][T17404] CPU: 0 UID: 0 PID: 17404 Comm: syz.4.3709 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 342.186211][T17404] Tainted: [W]=WARN [ 342.186219][T17404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.186232][T17404] Call Trace: [ 342.186240][T17404] [ 342.186304][T17404] __dump_stack+0x1d/0x30 [ 342.186402][T17404] dump_stack_lvl+0x95/0xd0 [ 342.186420][T17404] dump_stack+0x15/0x1b [ 342.186437][T17404] should_fail_ex+0x25e/0x270 [ 342.186462][T17404] should_fail+0xb/0x20 [ 342.186569][T17404] should_fail_usercopy+0x1a/0x20 [ 342.186594][T17404] strncpy_from_user+0x27/0x250 [ 342.186616][T17404] do_getname+0x59/0x1c0 [ 342.186699][T17404] __se_sys_symlinkat+0x32/0x1b0 [ 342.186756][T17404] __x64_sys_symlinkat+0x43/0x50 [ 342.186776][T17404] x64_sys_call+0x2b7d/0x3020 [ 342.186822][T17404] do_syscall_64+0x136/0x3c0 [ 342.186848][T17404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.186868][T17404] RIP: 0033:0x7f199112e0d9 [ 342.187016][T17404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.187033][T17404] RSP: 002b:00007f198fb87028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 342.187052][T17404] RAX: ffffffffffffffda RBX: 00007f19913b5fa0 RCX: 00007f199112e0d9 [ 342.187066][T17404] RDX: 0000200000000240 RSI: ffffffffffffff9c RDI: 0000200000000140 [ 342.187079][T17404] RBP: 00007f198fb87090 R08: 0000000000000000 R09: 0000000000000000 [ 342.187090][T17404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.187129][T17404] R13: 00007f19913b6038 R14: 00007f19913b5fa0 R15: 00007ffc77bfaf08 [ 342.187146][T17404] [ 342.383443][T15585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.134411][T17431] tcf_pedit_act: 22 callbacks suppressed [ 343.134431][T17431] tc action pedit 'at' offset -4096 out of bounds [ 343.146749][T17431] tc action pedit 'at' offset -4096 out of bounds [ 343.153180][T17431] tc action pedit 'at' offset -4096 out of bounds [ 343.159667][T17431] tc action pedit 'at' offset -4096 out of bounds [ 343.166088][T17431] tc action pedit 'at' offset -4096 out of bounds [ 343.172571][T17431] tc action pedit 'at' offset -4096 out of bounds [ 343.179073][T17431] tc action pedit 'at' offset -4096 out of bounds [ 343.185503][T17431] tc action pedit 'at' offset -4096 out of bounds [ 343.191995][T17431] tc action pedit 'at' offset -4096 out of bounds [ 343.198435][T17431] tc action pedit 'at' offset -4096 out of bounds [ 343.204983][T17431] TC_ACT_REPEAT abuse ? [ 343.547634][T17440] __nla_validate_parse: 6 callbacks suppressed [ 343.547652][T17440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3722'. [ 343.661523][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3726'. [ 343.986200][T17459] set_capacity_and_notify: 5 callbacks suppressed [ 343.986220][T17459] loop4: detected capacity change from 0 to 164 [ 344.087893][T17461] TC_ACT_REPEAT abuse ? [ 344.201382][T17466] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3731'. [ 344.250966][T17470] netlink: zone id is out of range [ 344.258156][T17470] netlink: zone id is out of range [ 344.267235][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 344.267251][ T28] audit: type=1400 audit(1786180985.525:5222): avc: denied { ioctl } for pid=17471 comm="syz.4.3734" path="socket:[51347]" dev="sockfs" ino=51347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.269009][T17470] netlink: zone id is out of range [ 344.304617][T17470] netlink: zone id is out of range [ 344.305279][ T28] audit: type=1400 audit(1786180985.565:5223): avc: denied { accept } for pid=17469 comm="syz.2.3733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 344.309952][T17470] netlink: zone id is out of range [ 344.334950][T17473] sctp: [Deprecated]: syz.2.3733 (pid 17473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.334950][T17473] Use struct sctp_sack_info instead [ 344.341102][T17470] netlink: zone id is out of range [ 344.357035][T17470] netlink: zone id is out of range [ 344.362169][T17470] netlink: zone id is out of range [ 344.379609][T17476] loop1: detected capacity change from 0 to 512 [ 344.406874][T17476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.419777][T17476] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.434671][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3735'. [ 344.443614][T17476] netlink: 'syz.1.3735': attribute type 2 has an invalid length. [ 344.451458][T17476] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3735'. [ 344.456397][T17481] loop2: detected capacity change from 0 to 512 [ 344.468016][T17481] EXT4-fs: Ignoring removed oldalloc option [ 344.475827][T17481] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3736: bad orphan inode 32 [ 344.485999][T17481] loop2: lost filesystem error report for type 5 error -117 [ 344.486136][T17481] ext4_test_bit(bit=31, block=4) = 0 [ 344.497920][ T28] audit: type=1400 audit(1786180985.695:5224): avc: denied { block_suspend } for pid=17475 comm="syz.1.3735" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 344.498809][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 344.522061][ T28] audit: type=1400 audit(1786180985.755:5225): avc: denied { write } for pid=17475 comm="syz.1.3735" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.526672][ C0] EXT4-fs (loop2): initial error at time 1786180985: ext4_orphan_get:1425 [ 344.556949][ C0] EXT4-fs (loop2): last error at time 1786180985: ext4_orphan_get:1425 [ 344.566018][T17481] EXT4-fs (loop2): 1 truncate cleaned up [ 344.572189][T17481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.586619][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.611996][T15585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.667438][T17489] loop1: detected capacity change from 0 to 4096 [ 344.681704][T17489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.705155][T17496] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 344.711711][ T28] audit: type=1400 audit(1786180985.965:5226): avc: denied { write } for pid=17488 comm="syz.1.3738" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.735960][ T28] audit: type=1400 audit(1786180985.965:5227): avc: denied { write } for pid=17488 comm="syz.1.3738" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.757960][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.821678][T17504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3743'. [ 345.120083][T17509] loop4: detected capacity change from 0 to 128 [ 345.715676][ T28] audit: type=1400 audit(1786180986.975:5228): avc: denied { create } for pid=17526 comm="syz.4.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 345.729940][T17527] sctp: [Deprecated]: syz.4.3746 (pid 17527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.729940][T17527] Use struct sctp_sack_info instead [ 345.753408][ T28] audit: type=1400 audit(1786180986.975:5229): avc: denied { bind } for pid=17526 comm="syz.4.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 345.778614][ T28] audit: type=1326 audit(1786180986.975:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17526 comm="syz.4.3746" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199112e0d9 code=0x7ffc0000 [ 345.806911][ T28] audit: type=1326 audit(1786180986.975:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17526 comm="syz.4.3746" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199112e0d9 code=0x7ffc0000 [ 345.856087][T17536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3750'. [ 345.904119][T17540] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 345.923819][T17543] tipc: Started in network mode [ 345.928888][T17543] tipc: Node identity ac14140f, cluster identity 4711 [ 345.935881][T17543] tipc: New replicast peer: 255.255.255.255 [ 345.942050][T17543] tipc: Enabled bearer , priority 10 [ 345.949185][T17543] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0001 [ 346.035047][T17554] loop4: detected capacity change from 0 to 164 [ 346.094454][T17557] loop1: detected capacity change from 0 to 256 [ 346.122418][T17557] netlink: 'syz.1.3756': attribute type 21 has an invalid length. [ 346.130489][T17557] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3756'. [ 346.139642][T17557] netlink: 'syz.1.3756': attribute type 4 has an invalid length. [ 346.147461][T17557] netlink: 'syz.1.3756': attribute type 5 has an invalid length. [ 346.155296][T17557] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3756'. [ 346.343377][T17576] netlink: 'syz.4.3764': attribute type 2 has an invalid length. [ 346.394883][T17571] FAULT_INJECTION: forcing a failure. [ 346.394883][T17571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.408001][T17571] CPU: 1 UID: 0 PID: 17571 Comm: syz.3.3762 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 346.408068][T17571] Tainted: [W]=WARN [ 346.408075][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.408087][T17571] Call Trace: [ 346.408095][T17571] [ 346.408103][T17571] __dump_stack+0x1d/0x30 [ 346.408126][T17571] dump_stack_lvl+0x95/0xd0 [ 346.408146][T17571] dump_stack+0x15/0x1b [ 346.408228][T17571] should_fail_ex+0x25e/0x270 [ 346.408330][T17571] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 346.408433][T17571] should_fail+0xb/0x20 [ 346.408458][T17571] should_fail_usercopy+0x1a/0x20 [ 346.408487][T17571] _copy_from_user+0x1c/0xb0 [ 346.408583][T17571] ucma_resolve_ip+0x4e/0x360 [ 346.408612][T17571] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 346.408640][T17571] ucma_write+0x1c9/0x260 [ 346.408719][T17571] ? __pfx_ucma_write+0x10/0x10 [ 346.408781][T17571] vfs_write+0x252/0x990 [ 346.408837][T17571] ? __fget_files+0x184/0x1c0 [ 346.408875][T17571] ksys_write+0xdc/0x1a0 [ 346.408896][T17571] __x64_sys_write+0x40/0x50 [ 346.408918][T17571] x64_sys_call+0x27e1/0x3020 [ 346.408977][T17571] do_syscall_64+0x136/0x3c0 [ 346.409011][T17571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.409124][T17571] RIP: 0033:0x7f7f7679e0d9 [ 346.409140][T17571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.409158][T17571] RSP: 002b:00007f7f751f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.409193][T17571] RAX: ffffffffffffffda RBX: 00007f7f76a25fa0 RCX: 00007f7f7679e0d9 [ 346.409210][T17571] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000005 [ 346.409226][T17571] RBP: 00007f7f751f7090 R08: 0000000000000000 R09: 0000000000000000 [ 346.409241][T17571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.409296][T17571] R13: 00007f7f76a26038 R14: 00007f7f76a25fa0 R15: 00007fffec380e98 [ 346.409371][T17571] [ 346.410405][T17581] FAULT_INJECTION: forcing a failure. [ 346.410405][T17581] name failslab, interval 1, probability 0, space 10, times 0 [ 346.442897][T17583] loop3: detected capacity change from 0 to 512 [ 346.445977][T17581] CPU: 0 UID: 0 PID: 17581 Comm: syz.4.3766 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 346.446010][T17581] Tainted: [W]=WARN [ 346.446017][T17581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.446052][T17581] Call Trace: [ 346.446060][T17581] [ 346.446069][T17581] __dump_stack+0x1d/0x30 [ 346.446094][T17581] dump_stack_lvl+0x95/0xd0 [ 346.446115][T17581] dump_stack+0x15/0x1b [ 346.446187][T17581] should_fail_ex+0x25e/0x270 [ 346.446234][T17581] should_failslab+0x8c/0xb0 [ 346.446257][T17581] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 346.446312][T17581] ? skb_clone+0x151/0x1f0 [ 346.446331][T17581] ? skb_clone+0x151/0x1f0 [ 346.446373][T17581] skb_clone+0x151/0x1f0 [ 346.446391][T17581] __netlink_deliver_tap+0x2be/0x510 [ 346.446421][T17581] netlink_unicast+0x654/0x680 [ 346.446504][T17581] netlink_sendmsg+0x5be/0x6f0 [ 346.446529][T17581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.446627][T17581] ____sys_sendmsg+0x532/0x580 [ 346.446649][T17581] ___sys_sendmsg+0x195/0x1e0 [ 346.446677][T17581] __x64_sys_sendmsg+0xd4/0x160 [ 346.446756][T17581] x64_sys_call+0x194c/0x3020 [ 346.446855][T17581] do_syscall_64+0x136/0x3c0 [ 346.446933][T17581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.447036][T17581] RIP: 0033:0x7f199112e0d9 [ 346.447099][T17581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.447118][T17581] RSP: 002b:00007f198fb87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.447139][T17581] RAX: ffffffffffffffda RBX: 00007f19913b5fa0 RCX: 00007f199112e0d9 [ 346.447155][T17581] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 346.447169][T17581] RBP: 00007f198fb87090 R08: 0000000000000000 R09: 0000000000000000 [ 346.447226][T17581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.447240][T17581] R13: 00007f19913b6038 R14: 00007f19913b5fa0 R15: 00007ffc77bfaf08 [ 346.447301][T17581] [ 346.558713][T17592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3767'. [ 346.966858][T17596] loop4: detected capacity change from 0 to 512 [ 346.986452][T17596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.033546][T17596] ext4 filesystem being mounted at /82/sys supports timestamps until 2038-01-19 (0x7fffffff) [ 347.054474][ T3367] tipc: Node number set to 2886997007 [ 347.093655][T17583] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3768: invalid indirect mapped block 11 (level 0) [ 347.106981][T17583] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 347.110100][T17583] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3768: attempt to clear invalid blocks 1024 len 1 [ 347.132616][T17583] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 347.132927][T17583] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 347.156717][T17583] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3768: invalid indirect mapped block 1819239214 (level 0) [ 347.170739][T17583] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 347.171187][T17583] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3768: invalid indirect mapped block 33554432 (level 2) [ 347.195307][ C1] EXT4-fs (loop3): error count since last fsck: 4 [ 347.195428][ C1] EXT4-fs (loop3): initial error at time 1786180988: ext4_free_branches:1023: inode 13 [ 347.196768][ C1] EXT4-fs (loop3): last error at time 1786180988: ext4_free_branches:1023: inode 13 [ 347.227397][T17583] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 347.228985][T17583] EXT4-fs (loop3): 1 truncate cleaned up [ 347.247617][T17583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.309454][T15825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.367102][T16872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.419433][T17617] loop4: detected capacity change from 0 to 512 [ 347.426164][T17617] EXT4-fs: Ignoring removed nobh option [ 347.439664][T17617] EXT4-fs (loop4): inodes count not valid: 4 vs 32 [ 347.505543][T17620] EXT4-fs: Ignoring removed nobh option [ 347.511567][T17620] EXT4-fs (loop3): inodes count not valid: 4 vs 32 [ 347.562827][T17617] EXT4-fs (loop4): 1 orphan inode deleted [ 347.570606][T17617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.583665][T10586] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:19: Failed to release dquot type 1 [ 347.583731][T10586] loop4: lost filesystem error report for type 5 error -117 [ 347.596437][T17617] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.641416][T15825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.703251][T17626] FAULT_INJECTION: forcing a failure. [ 347.703251][T17626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.716343][T17626] CPU: 0 UID: 0 PID: 17626 Comm: syz.3.3779 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 347.716449][T17626] Tainted: [W]=WARN [ 347.716456][T17626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.716467][T17626] Call Trace: [ 347.716476][T17626] [ 347.716484][T17626] __dump_stack+0x1d/0x30 [ 347.716510][T17626] dump_stack_lvl+0x95/0xd0 [ 347.716530][T17626] dump_stack+0x15/0x1b [ 347.716583][T17626] should_fail_ex+0x25e/0x270 [ 347.716611][T17626] should_fail+0xb/0x20 [ 347.716633][T17626] should_fail_usercopy+0x1a/0x20 [ 347.716786][T17626] _copy_from_user+0x1c/0xb0 [ 347.716806][T17626] load_msg+0x172/0x2f0 [ 347.716841][T17626] do_mq_timedsend+0x23f/0x6b0 [ 347.716867][T17626] __x64_sys_mq_timedsend+0xd1/0x180 [ 347.716888][T17626] x64_sys_call+0x28c8/0x3020 [ 347.716910][T17626] do_syscall_64+0x136/0x3c0 [ 347.716982][T17626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.717004][T17626] RIP: 0033:0x7f7f7679e0d9 [ 347.717021][T17626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.717063][T17626] RSP: 002b:00007f7f751f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 347.717147][T17626] RAX: ffffffffffffffda RBX: 00007f7f76a25fa0 RCX: 00007f7f7679e0d9 [ 347.717160][T17626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 347.717172][T17626] RBP: 00007f7f751f7090 R08: 0000000000000000 R09: 0000000000000000 [ 347.717184][T17626] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 347.717195][T17626] R13: 00007f7f76a26038 R14: 00007f7f76a25fa0 R15: 00007fffec380e98 [ 347.717212][T17626] [ 348.053742][T17644] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 348.063355][T17644] iwpm_mapping_info_cb: Unable to parse nlmsg [ 348.113927][T17636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.127061][T17649] EXT4-fs: Ignoring removed nobh option [ 348.134034][T17649] EXT4-fs (loop1): inodes count not valid: 4 vs 32 [ 348.241848][T15825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.272079][T17656] EXT4-fs: Ignoring removed orlov option [ 348.290604][T17656] EXT4-fs: inline encryption not supported [ 348.310396][T17656] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 348.332241][T17656] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 348.344522][T17656] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 348.354809][T17656] EXT4-fs (loop3): invalid journal inode [ 348.360475][T17656] EXT4-fs (loop3): can't get journal size [ 348.373234][T17656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.386551][T17656] netlink: 'syz.3.3791': attribute type 21 has an invalid length. [ 348.407873][T16872] EXT4-fs error (device loop3): __ext4_iget:5533: inode #15: block 1803188595: comm syz-executor: invalid block [ 348.420138][T16872] EXT4-fs error (device loop3): __ext4_iget:5533: inode #15: block 1803188595: comm syz-executor: invalid block [ 348.433380][T15825] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 348.449796][T15825] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 348.496211][T17649] EXT4-fs (loop1): 1 orphan inode deleted [ 348.507245][T17649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.520885][T10590] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:23: Failed to release dquot type 1 [ 348.523827][T17649] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.565875][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.575883][T17662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.610888][T17667] FAULT_INJECTION: forcing a failure. [ 348.610888][T17667] name failslab, interval 1, probability 0, space 10, times 0 [ 348.623751][T17667] CPU: 0 UID: 0 PID: 17667 Comm: syz.1.3795 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 348.623804][T17667] Tainted: [W]=WARN [ 348.623833][T17667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.623846][T17667] Call Trace: [ 348.623854][T17667] [ 348.623864][T17667] __dump_stack+0x1d/0x30 [ 348.623890][T17667] dump_stack_lvl+0x95/0xd0 [ 348.623910][T17667] dump_stack+0x15/0x1b [ 348.623928][T17667] should_fail_ex+0x25e/0x270 [ 348.624038][T17667] should_failslab+0x8c/0xb0 [ 348.624129][T17667] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 348.624155][T17667] ? dev_exception_add+0x2b/0x200 [ 348.624186][T17667] ? dev_exception_add+0x2b/0x200 [ 348.624225][T17667] kmemdup_noprof+0x2b/0x70 [ 348.624254][T17667] dev_exception_add+0x2b/0x200 [ 348.624296][T17667] devcgroup_access_write+0xc45/0x1030 [ 348.624334][T17667] ? __pfx_devcgroup_access_write+0x10/0x10 [ 348.624409][T17667] cgroup_file_write+0x197/0x350 [ 348.624433][T17667] ? __pfx_cgroup_file_write+0x10/0x10 [ 348.624505][T17667] kernfs_fop_write_iter+0x1d2/0x2e0 [ 348.624532][T17667] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 348.624629][T17667] vfs_write+0x57d/0x990 [ 348.624650][T17667] ksys_write+0xdc/0x1a0 [ 348.624735][T17667] __x64_sys_write+0x40/0x50 [ 348.624756][T17667] x64_sys_call+0x27e1/0x3020 [ 348.624851][T17667] do_syscall_64+0x136/0x3c0 [ 348.624877][T17667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.624982][T17667] RIP: 0033:0x7f02e42be0d9 [ 348.625017][T17667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.625089][T17667] RSP: 002b:00007f02e2d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.625111][T17667] RAX: ffffffffffffffda RBX: 00007f02e4545fa0 RCX: 00007f02e42be0d9 [ 348.625125][T17667] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000007 [ 348.625199][T17667] RBP: 00007f02e2d17090 R08: 0000000000000000 R09: 0000000000000000 [ 348.625216][T17667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.625231][T17667] R13: 00007f02e4546038 R14: 00007f02e4545fa0 R15: 00007ffdc051d618 [ 348.625253][T17667] [ 349.195490][T17670] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.222501][T17670] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.229957][T17670] bridge_slave_0: entered allmulticast mode [ 349.236839][T17670] bridge_slave_0: entered promiscuous mode [ 349.243861][T17670] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.247840][T17667] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.3795: Failed to acquire dquot type 1 [ 349.251112][T17670] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.262198][T17667] loop1: lost filesystem error report for type 5 error -117 [ 349.262996][T17667] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.3795: corrupted inode contents [ 349.269757][T17670] bridge_slave_1: entered allmulticast mode [ 349.276606][T17667] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.276801][T17667] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.3795: mark_inode_dirty error [ 349.289432][T17670] bridge_slave_1: entered promiscuous mode [ 349.294553][T17667] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.320929][T17667] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.3795: corrupted inode contents [ 349.335163][T17670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.341842][T17667] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.368310][T17670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.388282][T17670] team0: Port device team_slave_0 added [ 349.398772][ C0] EXT4-fs (loop1): error count since last fsck: 3 [ 349.399100][ C0] EXT4-fs (loop1): initial error at time 1786180990: ext4_acquire_dquot:7041 [ 349.399630][ C0] EXT4-fs (loop1): last error at time 1786180990: ext4_dirty_inode:6639 [ 349.399765][T17670] team0: Port device team_slave_1 added [ 349.400178][ C0] : inode 16 [ 349.410313][T17670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.410328][T17670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.410359][T17670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.410943][T17670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.410970][T17670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.410999][T17670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.553670][T17702] set_capacity_and_notify: 9 callbacks suppressed [ 349.553687][T17702] loop2: detected capacity change from 0 to 1024 [ 349.589185][T17667] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.3795: mark_inode_dirty error [ 349.593287][T17702] EXT4-fs: Ignoring removed orlov option [ 349.625481][T17702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.631131][T17667] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.645041][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 349.645056][ T28] audit: type=1400 audit(1786180990.905:5396): avc: denied { write } for pid=17701 comm="syz.2.3802" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.659309][T17667] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.3795: corrupted inode contents [ 349.687267][ T28] audit: type=1400 audit(1786180990.945:5397): avc: denied { write } for pid=15585 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.688000][T17667] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.710160][T17667] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 349.741306][ T28] audit: type=1400 audit(1786180990.945:5398): avc: denied { write } for pid=15585 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.741338][ T28] audit: type=1400 audit(1786180990.945:5399): avc: denied { write } for pid=15585 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.741387][ T28] audit: type=1400 audit(1786180990.945:5400): avc: denied { unlink } for pid=15585 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 349.741413][ T28] audit: type=1400 audit(1786180990.945:5401): avc: denied { write } for pid=15585 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.741474][ T28] audit: type=1400 audit(1786180990.985:5402): avc: denied { write } for pid=15585 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.741497][ T28] audit: type=1400 audit(1786180990.985:5403): avc: denied { write } for pid=15585 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.741520][ T28] audit: type=1400 audit(1786180990.985:5404): avc: denied { write } for pid=15585 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.741578][ T28] audit: type=1400 audit(1786180990.985:5405): avc: denied { write } for pid=15585 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.748381][T17670] hsr_slave_0: entered promiscuous mode [ 349.748905][T17670] hsr_slave_1: entered promiscuous mode [ 349.749257][T17670] debugfs: 'hsr0' already exists in 'hsr' [ 349.749278][T17670] Cannot create hsr debugfs directory [ 350.027353][T17667] loop1: lost filesystem error report for type 5 error -117 [ 350.031053][T17667] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.3795: corrupted inode contents [ 350.054021][T17667] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 350.059477][T17033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.078856][T17667] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.3795: mark_inode_dirty error [ 350.107094][T17667] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 350.116067][T17667] loop1: lost filesystem error report for type 5 error -117 [ 350.116646][T17667] EXT4-fs (loop1): 1 truncate cleaned up [ 350.130491][T17667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.142962][T17667] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.180278][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.287245][T10590] bridge_slave_1: left allmulticast mode [ 350.292945][T10590] bridge_slave_1: left promiscuous mode [ 350.298639][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.308063][T10590] bridge_slave_0: left allmulticast mode [ 350.313817][T10590] bridge_slave_0: left promiscuous mode [ 350.319538][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.346665][T10590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.355786][T10590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.401007][T17734] __nla_validate_parse: 4 callbacks suppressed [ 350.401026][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3807'. [ 350.576949][T10590] bond0 (unregistering): Released all slaves [ 350.597594][T17734] hsr_slave_1 (unregistering): left promiscuous mode [ 350.657168][T17682] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.664270][T17682] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.682586][T17682] bridge_slave_0: entered allmulticast mode [ 350.689395][T17682] bridge_slave_0: entered promiscuous mode [ 350.696906][T17682] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.704066][T17682] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.711399][T17682] bridge_slave_1: entered allmulticast mode [ 350.718071][T17682] bridge_slave_1: entered promiscuous mode [ 350.749423][T17682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.762896][T17682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.782958][T17670] netdevsim netdevsim6 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.850923][T17682] team0: Port device team_slave_0 added [ 350.869965][T10590] hsr_slave_0: left promiscuous mode [ 350.879920][T10590] hsr_slave_1: left promiscuous mode [ 350.891340][T10590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.900437][T10590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.905555][T17756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=17756 comm=syz.0.3810 [ 350.923356][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3810'. [ 350.962132][T10590] team0 (unregistering): Port device team_slave_1 removed [ 350.972588][T10590] team0 (unregistering): Port device team_slave_0 removed [ 351.004734][T17682] team0: Port device team_slave_1 added [ 351.029268][T17682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.043417][T17682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.070590][T17682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.082205][T17682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.110446][T17682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.137988][T17682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.152504][T17787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3812'. [ 351.164993][T10586] netdevsim netdevsim3 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.179325][T10586] netdevsim netdevsim3 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.220010][T17682] hsr_slave_0: entered promiscuous mode [ 351.240737][T17682] hsr_slave_1: entered promiscuous mode [ 351.442208][T10594] netdevsim netdevsim3 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.452191][T10586] netdevsim netdevsim3 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.558170][T17760] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.565273][T17760] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.572563][T17760] bridge_slave_0: entered allmulticast mode [ 351.579248][T17760] bridge_slave_0: entered promiscuous mode [ 351.586468][T17760] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.593555][T17760] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.600837][T17760] bridge_slave_1: entered allmulticast mode [ 351.607297][T17760] bridge_slave_1: entered promiscuous mode [ 351.614735][ T3018] 8021q: adding VLAN 0 to HW filter on device eth21 [ 351.640258][T17760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.651364][T17760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.672741][T17760] team0: Port device team_slave_0 added [ 351.701543][T17760] team0: Port device team_slave_1 added [ 351.721842][T17760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.726641][T17845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3820'. [ 351.734395][T17760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.763974][T17760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.789295][T17760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.796458][T17760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.843992][T17760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.858003][T10590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.870531][ T3018] 8021q: adding VLAN 0 to HW filter on device eth22 [ 351.883568][T17858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3821'. [ 351.897451][T17760] hsr_slave_0: entered promiscuous mode [ 351.903641][T17760] hsr_slave_1: entered promiscuous mode [ 351.910465][T17760] debugfs: 'hsr0' already exists in 'hsr' [ 351.916419][T17760] Cannot create hsr debugfs directory [ 351.958998][T10590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.059127][T17670] netdevsim netdevsim6 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.147306][T10590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.189278][T17670] netdevsim netdevsim6 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.205124][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3831'. [ 352.214866][ T3018] 8021q: adding VLAN 0 to HW filter on device eth23 [ 352.225581][T10590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.242848][T17904] cgroup: Need name or subsystem set [ 352.258077][T17670] netdevsim netdevsim6 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.304332][T10597] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.334923][T10594] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.351872][T10590] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.366087][T17916] loop1: detected capacity change from 0 to 164 [ 352.404986][T10594] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.421315][T10594] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.445570][ T3018] 8021q: adding VLAN 0 to HW filter on device eth24 [ 352.460156][T10590] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.483089][T17670] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 352.492548][T17670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.504794][T17682] netdevsim netdevsim5 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.540537][T17670] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 352.552669][T17670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.563610][T17670] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 352.580833][T17670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.604935][T10590] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.620548][T17670] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 352.636060][T17670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.651977][T17938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3836'. [ 352.673456][T10590] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.763300][T17670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.824634][ T4215] netdevsim netdevsim4 eth27: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.837316][T17670] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.856004][T10590] bridge_slave_1: left allmulticast mode [ 352.861717][T10590] bridge_slave_1: left promiscuous mode [ 352.867427][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.883867][T10590] bridge_slave_0: left allmulticast mode [ 352.889611][T10590] bridge_slave_0: left promiscuous mode [ 352.895401][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.903996][T10590] pim6reg: left allmulticast mode [ 352.911284][T10590] bridge_slave_1: left allmulticast mode [ 352.916982][T10590] bridge_slave_1: left promiscuous mode [ 352.922986][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.930984][T10590] bridge_slave_0: left allmulticast mode [ 352.936715][T10590] bridge_slave_0: left promiscuous mode [ 352.942383][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.035385][T10590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.045361][T10590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.055551][T10590] bond0 (unregistering): Released all slaves [ 353.082898][T10590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.092912][T10590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.102792][T10590] bond0 (unregistering): Released all slaves [ 353.110670][T10590] bond1 (unregistering): Released all slaves [ 353.129807][T10597] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.136969][T10597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.149857][T10594] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.157259][T10594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.188957][T17670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.214557][T18005] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3843'. [ 353.224821][T10586] netdevsim netdevsim4 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.244612][T10586] netdevsim netdevsim4 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.253711][T18005] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3843'. [ 353.264414][T10594] netdevsim netdevsim4 eth26: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.331328][T10590] hsr_slave_0: left promiscuous mode [ 353.341828][T10590] hsr_slave_1: left promiscuous mode [ 353.353505][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.369203][T10590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.379289][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.387168][T10590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.411095][T10590] hsr_slave_0: left promiscuous mode [ 353.423510][T10590] hsr_slave_1: left promiscuous mode [ 353.433424][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.441256][T10590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.560383][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.568143][T10590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.583312][T10590] veth1_macvtap: left promiscuous mode [ 353.589443][T10590] veth0_macvtap: left promiscuous mode [ 353.595190][T10590] veth1_vlan: left promiscuous mode [ 353.600557][T10590] veth0_vlan: left promiscuous mode [ 353.609301][T10590] veth1_macvtap: left promiscuous mode [ 353.616601][T10590] veth0_macvtap: left promiscuous mode [ 353.622338][T10590] veth1_vlan: left promiscuous mode [ 353.628340][T10590] veth0_vlan: left promiscuous mode [ 353.751770][T10590] team0 (unregistering): Port device team_slave_1 removed [ 353.764033][T10590] team0 (unregistering): Port device team_slave_0 removed [ 353.862351][T10590] team0 (unregistering): Port device team_slave_1 removed [ 353.873219][T10590] team0 (unregistering): Port device team_slave_0 removed [ 353.936485][T17682] netdevsim netdevsim5 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.003666][T18056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18056 comm=syz.1.3850 [ 354.020752][T17670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.132371][T17682] netdevsim netdevsim5 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.198150][T17670] veth0_vlan: entered promiscuous mode [ 354.208667][T17682] netdevsim netdevsim5 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.223179][T17670] veth1_vlan: entered promiscuous mode [ 354.240478][T17670] veth0_macvtap: entered promiscuous mode [ 354.248344][T17670] veth1_macvtap: entered promiscuous mode [ 354.260028][T17670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.273829][T17670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.291668][T17760] netdevsim netdevsim9 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.324652][T10586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.333893][T10586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.358069][T10586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.416227][T18140] loop6: detected capacity change from 0 to 1024 [ 354.469714][T10586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.486041][T17760] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.669924][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 354.669939][ T28] audit: type=1400 audit(1786180995.925:5451): avc: denied { write } for pid=18165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.679064][T18140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.710682][ T28] audit: type=1400 audit(1786180995.965:5452): avc: denied { write } for pid=18177 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.820654][ T28] audit: type=1400 audit(1786180996.075:5453): avc: denied { write } for pid=18180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.875699][T17760] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.895703][ T28] audit: type=1400 audit(1786180996.145:5454): avc: denied { write } for pid=18139 comm="syz.6.3855" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.921521][ T28] audit: type=1400 audit(1786180996.145:5455): avc: denied { map } for pid=18139 comm="syz.6.3855" path="/2/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 354.923177][T17670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.952990][ T28] audit: type=1400 audit(1786180996.145:5456): avc: denied { execute } for pid=18139 comm="syz.6.3855" path="/2/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 354.978090][ T28] audit: type=1400 audit(1786180996.155:5457): avc: denied { write } for pid=18191 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.978962][ T3018] 8021q: adding VLAN 0 to HW filter on device eth10 [ 355.052345][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3859'. [ 355.155315][T17760] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.182094][ T28] audit: type=1400 audit(1786180996.435:5458): avc: denied { write } for pid=18202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.224425][ T28] audit: type=1400 audit(1786180996.475:5459): avc: denied { write } for pid=18214 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.260077][ T3018] 8021q: adding VLAN 0 to HW filter on device eth11 [ 355.323525][T17682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 355.332900][T17682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.348873][T17760] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 355.362869][T17760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.382024][T17682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 355.395733][T17682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.396923][ T28] audit: type=1400 audit(1786180996.655:5460): avc: denied { write } for pid=18222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.416275][T17682] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 355.441678][T17682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.444347][T18235] FAULT_INJECTION: forcing a failure. [ 355.444347][T18235] name failslab, interval 1, probability 0, space 10, times 0 [ 355.462244][T18235] CPU: 0 UID: 0 PID: 18235 Comm: syz.6.3861 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 355.462403][T18235] Tainted: [W]=WARN [ 355.462412][T18235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.462426][T18235] Call Trace: [ 355.462435][T18235] [ 355.462445][T18235] __dump_stack+0x1d/0x30 [ 355.462534][T18235] dump_stack_lvl+0x95/0xd0 [ 355.462556][T18235] dump_stack+0x15/0x1b [ 355.462574][T18235] should_fail_ex+0x25e/0x270 [ 355.462621][T18235] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 355.462649][T18235] should_failslab+0x8c/0xb0 [ 355.462674][T18235] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 355.462751][T18235] ? debugfs_alloc_inode+0x34/0x40 [ 355.462772][T18235] ? debugfs_alloc_inode+0x34/0x40 [ 355.462793][T18235] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 355.462862][T18235] debugfs_alloc_inode+0x34/0x40 [ 355.462882][T18235] alloc_inode+0x40/0x170 [ 355.462956][T18235] new_inode+0x1d/0xe0 [ 355.462977][T18235] __debugfs_create_file+0x97/0x2b0 [ 355.463073][T18235] debugfs_create_file_full+0x3f/0x60 [ 355.463093][T18235] blk_trace_setup_prepare+0x201/0x300 [ 355.463208][T18235] blk_trace_setup+0x25f/0x3f0 [ 355.463239][T18235] ? __pfx_blkdev_ioctl+0x10/0x10 [ 355.463260][T18235] blk_trace_ioctl+0x20f/0x710 [ 355.463301][T18235] ? ioctl_has_perm+0x273/0x2c0 [ 355.463321][T18235] ? do_vfs_ioctl+0x848/0xe50 [ 355.463342][T18235] ? selinux_file_ioctl+0x33c/0x3c0 [ 355.463418][T18235] ? __pfx_blkdev_ioctl+0x10/0x10 [ 355.463438][T18235] blkdev_ioctl+0x2ac/0x460 [ 355.463459][T18235] ? __pfx_blkdev_ioctl+0x10/0x10 [ 355.463564][T18235] __se_sys_ioctl+0xce/0x140 [ 355.463582][T18235] __x64_sys_ioctl+0x43/0x50 [ 355.463610][T18235] x64_sys_call+0x1563/0x3020 [ 355.463689][T18235] do_syscall_64+0x136/0x3c0 [ 355.463733][T18235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.463752][T18235] RIP: 0033:0x7fe6e339e0d9 [ 355.463767][T18235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.463783][T18235] RSP: 002b:00007fe6e1df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.463849][T18235] RAX: ffffffffffffffda RBX: 00007fe6e3625fa0 RCX: 00007fe6e339e0d9 [ 355.463861][T18235] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 355.463873][T18235] RBP: 00007fe6e1df7090 R08: 0000000000000000 R09: 0000000000000000 [ 355.463885][T18235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.463899][T18235] R13: 00007fe6e3626038 R14: 00007fe6e3625fa0 R15: 00007fffb883f638 [ 355.463922][T18235] [ 355.463945][T18235] debugfs: out of free dentries, can not create file 'dropped' [ 355.464059][T17760] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 355.739085][T17760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.748401][T17682] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.763874][T17682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.780176][ T3018] 8021q: adding VLAN 0 to HW filter on device eth9 [ 355.787736][T17760] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 355.797152][T17760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.804814][T17760] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 355.813122][T17760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.842227][T10590] IPVS: stop unused estimator thread 0... [ 355.857087][T18244] loop6: detected capacity change from 0 to 1024 [ 355.882129][T18244] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 355.890263][T18244] System zones: 0-1, 3-36 [ 355.909524][T18244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.917192][T17682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.943556][T17682] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.960473][T18262] 9pnet_fd: Insufficient options for proto=fd [ 355.982577][T10594] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.989740][T10594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.001634][T10594] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.008760][T10594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.114059][T17760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.144129][T18283] loop1: detected capacity change from 0 to 164 [ 356.176779][T17760] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.200509][ T3018] 8021q: adding VLAN 0 to HW filter on device eth12 [ 356.213044][T17670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.231104][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.238240][T10586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.298121][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.305262][T10586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.351252][T17760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.377558][T17760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.569433][T17682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.738877][T17760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.872626][T17682] veth0_vlan: entered promiscuous mode [ 356.896825][T17682] veth1_vlan: entered promiscuous mode [ 356.929117][T17682] veth0_macvtap: entered promiscuous mode [ 356.936869][T17682] veth1_macvtap: entered promiscuous mode [ 356.947925][T17682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.961193][T17682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.971803][T10586] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.980785][T10586] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.991180][T10586] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.104558][T10586] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.184089][T18390] loop6: detected capacity change from 0 to 164 [ 357.347682][T18400] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3883'. [ 357.362126][T17760] veth0_vlan: entered promiscuous mode [ 357.380564][T17760] veth1_vlan: entered promiscuous mode [ 357.397419][T17760] veth0_macvtap: entered promiscuous mode [ 357.840286][T18411] loop1: detected capacity change from 0 to 512 [ 358.282828][T18411] EXT4-fs (loop1): 1 orphan inode deleted [ 358.361444][T17760] veth1_macvtap: entered promiscuous mode [ 358.371119][T18411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.372905][T17760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.393171][T17760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.480121][T18411] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.546840][T14452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.597488][T18421] syzkaller0: entered promiscuous mode [ 358.625047][T18421] syzkaller0: entered allmulticast mode [ 358.670280][T18423] loop6: detected capacity change from 0 to 512 [ 358.880413][T18432] loop5: detected capacity change from 0 to 1024 [ 359.035535][ T3018] 8021q: adding VLAN 0 to HW filter on device eth16 [ 359.214964][T10589] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.263437][T10589] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.305528][T10586] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.325797][T10589] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.455925][T18432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.468173][T18464] xt_CT: No such helper "pptp" [ 359.529672][ T3018] 8021q: adding VLAN 0 to HW filter on device eth25 [ 359.622406][T17682] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.668081][T10586] Bluetooth: hci0: Frame reassembly failed (-84) [ 359.683343][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 359.683361][ T28] audit: type=1400 audit(1786181000.935:5479): avc: denied { write } for pid=18482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.717371][T18501] loop1: detected capacity change from 0 to 128 [ 359.752148][ T3018] 8021q: adding VLAN 0 to HW filter on device eth26 [ 359.756628][T18506] netlink: 'syz.5.3897': attribute type 1 has an invalid length. [ 359.769182][ T28] audit: type=1400 audit(1786181000.995:5480): avc: denied { write } for pid=18502 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.771012][T18501] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.829877][T18506] loop5: detected capacity change from 0 to 736 [ 359.836524][T18501] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.994245][T18524] loop5: detected capacity change from 0 to 1764 [ 360.019963][ T28] audit: type=1400 audit(1786181001.275:5481): avc: denied { write } for pid=18511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.065199][ T28] audit: type=1400 audit(1786181001.275:5482): avc: denied { write } for pid=18534 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.159358][ T28] audit: type=1400 audit(1786181001.415:5483): avc: denied { relabelfrom } for pid=18530 comm="syz.9.3906" name="" dev="pipefs" ino=54492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 360.182821][ T3018] 8021q: adding VLAN 0 to HW filter on device eth27 [ 360.204366][T18539] FAULT_INJECTION: forcing a failure. [ 360.204366][T18539] name failslab, interval 1, probability 0, space 10, times 0 [ 360.217228][T18539] CPU: 0 UID: 0 PID: 18539 Comm: syz.6.3907 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 360.217286][T18539] Tainted: [W]=WARN [ 360.217294][T18539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.217307][T18539] Call Trace: [ 360.217316][T18539] [ 360.217327][T18539] __dump_stack+0x1d/0x30 [ 360.217353][T18539] dump_stack_lvl+0x95/0xd0 [ 360.217394][T18539] dump_stack+0x15/0x1b [ 360.217415][T18539] should_fail_ex+0x25e/0x270 [ 360.217511][T18539] should_failslab+0x8c/0xb0 [ 360.217533][T18539] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 360.217552][T18539] ? copy_signal+0x53/0x350 [ 360.217654][T18539] ? copy_signal+0x53/0x350 [ 360.217692][T18539] copy_signal+0x53/0x350 [ 360.217723][T18539] copy_process+0x1062/0x2310 [ 360.217815][T18539] kernel_clone+0x1c0/0x5f0 [ 360.217912][T18539] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 360.217939][T18539] __x64_sys_clone+0x143/0x180 [ 360.217978][T18539] x64_sys_call+0x1222/0x3020 [ 360.218004][T18539] do_syscall_64+0x136/0x3c0 [ 360.218035][T18539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.218130][T18539] RIP: 0033:0x7fe6e339e0d9 [ 360.218171][T18539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.218209][T18539] RSP: 002b:00007fe6e1df6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 360.218234][T18539] RAX: ffffffffffffffda RBX: 00007fe6e3625fa0 RCX: 00007fe6e339e0d9 [ 360.218251][T18539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 360.218266][T18539] RBP: 00007fe6e1df7090 R08: 0000000000000000 R09: 0000000000000000 [ 360.218280][T18539] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 360.218292][T18539] R13: 00007fe6e3626038 R14: 00007fe6e3625fa0 R15: 00007fffb883f638 [ 360.218345][T18539] [ 360.599516][T18544] loop6: detected capacity change from 0 to 512 [ 360.647187][T18544] EXT4-fs (loop6): 1 orphan inode deleted [ 360.653465][T18544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.755766][ T28] audit: type=1400 audit(1786181001.915:5484): avc: denied { write } for pid=18543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.835640][ T28] audit: type=1400 audit(1786181002.085:5485): avc: denied { write } for pid=18560 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.897545][T18565] loop5: detected capacity change from 0 to 164 [ 361.014572][T18573] FAULT_INJECTION: forcing a failure. [ 361.014572][T18573] name failslab, interval 1, probability 0, space 10, times 0 [ 361.027319][T18573] CPU: 1 UID: 0 PID: 18573 Comm: syz.9.3914 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 361.027488][T18573] Tainted: [W]=WARN [ 361.027496][T18573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.027510][T18573] Call Trace: [ 361.027518][T18573] [ 361.027527][T18573] __dump_stack+0x1d/0x30 [ 361.027550][T18573] dump_stack_lvl+0x95/0xd0 [ 361.027633][T18573] dump_stack+0x15/0x1b [ 361.027650][T18573] should_fail_ex+0x25e/0x270 [ 361.027676][T18573] should_failslab+0x8c/0xb0 [ 361.027702][T18573] __kvmalloc_node_noprof+0x15b/0x590 [ 361.027769][T18573] ? nf_hook_entries_grow+0x1cb/0x460 [ 361.027865][T18573] ? nf_hook_entries_grow+0x1cb/0x460 [ 361.027968][T18573] nf_hook_entries_grow+0x1cb/0x460 [ 361.028044][T18573] __nf_register_net_hook+0x187/0x480 [ 361.028164][T18573] nf_register_net_hook+0x88/0x130 [ 361.028197][T18573] nf_register_net_hooks+0x44/0x150 [ 361.028233][T18573] nf_ct_netns_do_get+0x2b1/0x3a0 [ 361.028320][T18573] ? pcpu_block_refresh_hint+0x10b/0x170 [ 361.028416][T18573] nf_ct_netns_get+0xf1/0x2c0 [ 361.028441][T18573] xt_ct_tg_check+0x7d/0x650 [ 361.028465][T18573] xt_ct_tg_check_v0+0xf4/0x160 [ 361.028569][T18573] xt_check_target+0x3c2/0x5d0 [ 361.028601][T18573] ? xt_find_match+0x208/0x240 [ 361.028625][T18573] ? mutex_unlock+0x4e/0x90 [ 361.028694][T18573] ? xt_find_target+0x204/0x240 [ 361.028721][T18573] translate_table+0xd32/0x1120 [ 361.028776][T18573] do_ipt_set_ctl+0x734/0x970 [ 361.028895][T18573] ? _raw_spin_lock_bh+0x56/0xb0 [ 361.028935][T18573] nf_setsockopt+0x199/0x1b0 [ 361.028958][T18573] ip_setsockopt+0x102/0x110 [ 361.028987][T18573] tcp_setsockopt+0x98/0xb0 [ 361.029005][T18573] sock_common_setsockopt+0x69/0x80 [ 361.029074][T18573] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 361.029120][T18573] __sys_setsockopt+0x184/0x200 [ 361.029158][T18573] __x64_sys_setsockopt+0x64/0x80 [ 361.029249][T18573] x64_sys_call+0x2327/0x3020 [ 361.029277][T18573] do_syscall_64+0x136/0x3c0 [ 361.029308][T18573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.029377][T18573] RIP: 0033:0x7f6ed3e5e0d9 [ 361.029396][T18573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.029417][T18573] RSP: 002b:00007f6ed28b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.029508][T18573] RAX: ffffffffffffffda RBX: 00007f6ed40e5fa0 RCX: 00007f6ed3e5e0d9 [ 361.029521][T18573] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000008 [ 361.029611][T18573] RBP: 00007f6ed28b7090 R08: 0000000000000308 R09: 0000000000000000 [ 361.029628][T18573] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 361.029644][T18573] R13: 00007f6ed40e6038 R14: 00007f6ed40e5fa0 R15: 00007fff598f0d58 [ 361.029729][T18573] [ 361.055083][T17670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.251223][ T28] audit: type=1400 audit(1786181002.505:5486): avc: denied { write } for pid=18566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.421212][T18596] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3919'. [ 361.459912][ T28] audit: type=1400 audit(1786181002.635:5487): avc: denied { write } for pid=18588 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.513032][T18604] FAULT_INJECTION: forcing a failure. [ 361.513032][T18604] name failslab, interval 1, probability 0, space 10, times 0 [ 361.513069][T18604] CPU: 0 UID: 0 PID: 18604 Comm: syz.9.3920 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 361.513103][T18604] Tainted: [W]=WARN [ 361.513157][T18604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.513168][T18604] Call Trace: [ 361.513174][T18604] [ 361.513182][T18604] __dump_stack+0x1d/0x30 [ 361.513208][T18604] dump_stack_lvl+0x95/0xd0 [ 361.513231][T18604] dump_stack+0x15/0x1b [ 361.513310][T18604] should_fail_ex+0x25e/0x270 [ 361.513408][T18604] should_failslab+0x8c/0xb0 [ 361.513434][T18604] __kmalloc_noprof+0xd4/0x4a0 [ 361.513460][T18604] ? ___neigh_create+0x4c9/0x1250 [ 361.513484][T18604] ? ___neigh_create+0x4c9/0x1250 [ 361.513535][T18604] ___neigh_create+0x4c9/0x1250 [ 361.513560][T18604] ? ktime_get_with_offset+0x232/0x260 [ 361.513587][T18604] ? netif_rx_internal+0x61/0x210 [ 361.513616][T18604] ? __local_bh_enable_ip+0x70/0x80 [ 361.513638][T18604] __neigh_create+0x54/0x70 [ 361.513727][T18604] ip6_finish_output2+0x45a/0xd70 [ 361.513768][T18604] ? __pfx_dev_loopback_xmit+0x10/0x10 [ 361.513855][T18604] ? __pfx_ip6_mtu+0x10/0x10 [ 361.513884][T18604] ip6_finish_output+0x1e1/0x410 [ 361.513916][T18604] ip6_output+0x10a/0x280 [ 361.513994][T18604] ? __pfx_ip6_finish_output+0x10/0x10 [ 361.514027][T18604] ip6_mr_output+0x298/0x800 [ 361.514049][T18604] ? __pfx_ip6t_do_table+0x10/0x10 [ 361.514099][T18604] ? __pfx_dst_output+0x10/0x10 [ 361.514139][T18604] ? __pfx_ip6_mr_output+0x10/0x10 [ 361.514216][T18604] ip6_local_out+0xc3/0xd0 [ 361.514239][T18604] ip6_send_skb+0x5a/0x130 [ 361.514270][T18604] udp_v6_send_skb+0x782/0xa90 [ 361.514297][T18604] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 361.514368][T18604] udpv6_sendmsg+0x163b/0x1700 [ 361.514474][T18604] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 361.514497][T18604] inet6_sendmsg+0xac/0xd0 [ 361.514521][T18604] ? __pfx_inet6_sendmsg+0x10/0x10 [ 361.514597][T18604] ____sys_sendmsg+0x390/0x580 [ 361.514622][T18604] ___sys_sendmsg+0x195/0x1e0 [ 361.514663][T18604] __x64_sys_sendmsg+0xd4/0x160 [ 361.514689][T18604] x64_sys_call+0x194c/0x3020 [ 361.514792][T18604] do_syscall_64+0x136/0x3c0 [ 361.514826][T18604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.514850][T18604] RIP: 0033:0x7f6ed3e5e0d9 [ 361.514918][T18604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.515029][T18604] RSP: 002b:00007f6ed28b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.515129][T18604] RAX: ffffffffffffffda RBX: 00007f6ed40e5fa0 RCX: 00007f6ed3e5e0d9 [ 361.515147][T18604] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000003 [ 361.515162][T18604] RBP: 00007f6ed28b7090 R08: 0000000000000000 R09: 0000000000000000 [ 361.515177][T18604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.515190][T18604] R13: 00007f6ed40e6038 R14: 00007f6ed40e5fa0 R15: 00007fff598f0d58 [ 361.515219][T18604] [ 361.535998][T18605] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3919'. [ 361.713732][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3921'. [ 361.719122][T18605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3919'. [ 361.772282][ T28] audit: type=1400 audit(1786181003.025:5488): avc: denied { write } for pid=18594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.774651][T18610] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3921'. [ 361.794549][T11322] Bluetooth: hci0: command 0x1003 tx timeout [ 361.799287][ T3593] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 361.828773][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3921'. [ 361.868474][T18609] loop9: detected capacity change from 0 to 1024 [ 361.877741][T10591] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.901267][T18609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.966151][T18610] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3921'. [ 361.993213][T18609] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 361.997887][T18623] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3923'. [ 362.001918][T10591] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.011113][T18623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3923'. [ 362.028386][T18609] System zones: 0-1, 3-12 [ 362.033194][T10591] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.043818][T10591] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.053497][T18609] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.155970][T18609] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.178232][T18636] veth1_to_bond: entered allmulticast mode [ 362.216203][T18628] loop5: detected capacity change from 0 to 512 [ 362.237769][T18628] EXT4-fs: Ignoring removed nobh option [ 362.252362][T18628] EXT4-fs (loop5): inodes count not valid: 4 vs 32 [ 362.274215][T18646] loop6: detected capacity change from 0 to 164 [ 362.361380][T18628] loop5: detected capacity change from 0 to 512 [ 362.443415][T18628] EXT4-fs (loop5): 1 orphan inode deleted [ 362.449583][T18628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.468604][T18634] veth1_to_bond: left allmulticast mode [ 362.474377][T18628] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.507030][T17682] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.663361][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3934'. [ 362.674000][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3934'. [ 362.724327][T18694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3937'. [ 362.734159][T18694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3937'. [ 363.907705][ T2940] ================================================================== [ 363.915839][ T2940] BUG: KCSAN: data-race in blk_mq_dispatch_rq_list / blk_mq_dispatch_rq_list [ 363.924634][ T2940] [ 363.926992][ T2940] read-write to 0xffff888102772af8 of 4 bytes by task 18706 on cpu 0: [ 363.935164][ T2940] blk_mq_dispatch_rq_list+0xc3e/0xef0 [ 363.940748][ T2940] __blk_mq_sched_dispatch_requests+0x86c/0xce0 [ 363.947014][ T2940] blk_mq_sched_dispatch_requests+0x86/0x120 [ 363.953034][ T2940] blk_mq_run_hw_queue+0x17e/0x220 [ 363.958180][ T2940] blk_mq_dispatch_list+0x83d/0x9f0 [ 363.963414][ T2940] blk_mq_flush_plug_list+0x2cd/0x320 [ 363.968824][ T2940] blk_add_rq_to_plug+0xe4/0x360 [ 363.973795][ T2940] blk_mq_submit_bio+0xc11/0x1130 [ 363.978864][ T2940] __submit_bio+0x54/0x3d0 [ 363.983312][ T2940] submit_bio_noacct_nocheck+0x1c6/0x620 [ 363.989065][ T2940] submit_bio_noacct+0x700/0x920 [ 363.994027][ T2940] submit_bio+0x2a4/0x2c0 [ 363.998386][ T2940] bio_chain_and_submit+0x84/0xb0 [ 364.003462][ T2940] __blkdev_issue_zero_pages+0x1f7/0x240 [ 364.009135][ T2940] blkdev_issue_zeroout+0x3a1/0x4f0 [ 364.014378][ T2940] blkdev_common_ioctl+0x1a07/0x2060 [ 364.019712][ T2940] blkdev_ioctl+0x31f/0x460 [ 364.024239][ T2940] __se_sys_ioctl+0xce/0x140 [ 364.028848][ T2940] __x64_sys_ioctl+0x43/0x50 [ 364.033558][ T2940] x64_sys_call+0x1563/0x3020 [ 364.038274][ T2940] do_syscall_64+0x136/0x3c0 [ 364.042908][ T2940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.048841][ T2940] [ 364.051184][ T2940] read-write to 0xffff888102772af8 of 4 bytes by task 2940 on cpu 1: [ 364.059268][ T2940] blk_mq_dispatch_rq_list+0xc3e/0xef0 [ 364.064761][ T2940] __blk_mq_sched_dispatch_requests+0x1db/0xce0 [ 364.071040][ T2940] blk_mq_sched_dispatch_requests+0x86/0x120 [ 364.077040][ T2940] blk_mq_run_hw_queue+0x17e/0x220 [ 364.082164][ T2940] blk_mq_run_hw_queues+0x18e/0x270 [ 364.087401][ T2940] blk_mq_requeue_work+0x3ca/0x400 [ 364.092524][ T2940] process_scheduled_works+0x4d4/0x9a0 [ 364.098003][ T2940] worker_thread+0x569/0x750 [ 364.102598][ T2940] kthread+0x221/0x270 [ 364.106666][ T2940] ret_from_fork+0x146/0x330 [ 364.111281][ T2940] ret_from_fork_asm+0x1a/0x30 [ 364.116051][ T2940] [ 364.118376][ T2940] value changed: 0x00000008 -> 0x00000009 [ 364.124092][ T2940] [ 364.126413][ T2940] Reported by Kernel Concurrency Sanitizer on: [ 364.132567][ T2940] CPU: 1 UID: 0 PID: 2940 Comm: kworker/1:1H Tainted: G W syzkaller #0 PREEMPT(lazy) [ 364.143598][ T2940] Tainted: [W]=WARN [ 364.147412][ T2940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.157470][ T2940] Workqueue: kblockd blk_mq_requeue_work [ 364.163113][ T2940] ================================================================== [ 364.703227][ T28] kauditd_printk_skb: 162 callbacks suppressed [ 364.703245][ T28] audit: type=1400 audit(1786181005.955:5651): avc: denied { write } for pid=18823 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.821109][ T28] audit: type=1400 audit(1786181006.075:5652): avc: denied { write } for pid=18825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.911980][ T28] audit: type=1400 audit(1786181006.165:5653): avc: denied { write } for pid=18838 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.925056][T14452] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.026372][ T28] audit: type=1400 audit(1786181006.285:5654): avc: denied { write } for pid=18840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.049688][ T28] audit: type=1400 audit(1786181006.285:5655): avc: denied { write } for pid=18851 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.113474][ T28] audit: type=1400 audit(1786181006.365:5656): avc: denied { write } for pid=18853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.137417][ T28] audit: type=1400 audit(1786181006.385:5657): avc: denied { write } for pid=18864 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.200611][ T28] audit: type=1400 audit(1786181006.455:5658): avc: denied { write } for pid=18866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.225692][ T28] audit: type=1400 audit(1786181006.475:5659): avc: denied { write } for pid=18877 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.289144][ T28] audit: type=1400 audit(1786181006.545:5660): avc: denied { write } for pid=18879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1