last executing test programs: 2m56.929328121s ago: executing program 32 (id=1686): membarrier(0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x9, 0x0, 0x70}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xc, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0xa00, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) 2m44.08255217s ago: executing program 33 (id=1903): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x400c0c0) sendmsg$kcm(r0, &(0x7f0000001900)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)="e8335895946b6bc9fdc2d5f6c78220543bee04d1746151c686a12098c3aec20097084f0e615fee123c98c304268ce4b30f70c2d2583b95bec8c32c26318870da784dc38619c43784b8b0b735303dff729f22b6c64d9f2ff6c77469f937c899482df4cff11d621bbc3dc33f676a170d9f8b01fb33c45a0d0363e7582724c39af9760779d742ee36", 0x87}, {&(0x7f00000003c0)="dc32921f2044bf3e30da69a66581bdc0dd3a716d2ba0dcf05c561461559356c3a7617f975c07eec31d91f065deb8e4aba4578a6ad1df652784814df5e483ff7a76944f59dd9c55c4e82712c2d22a85f33f81e5fcfbcd8fb63d0c520fb4faea2f2cd370173bf68d231130348382d1b0a7df003096da083650239f20cf86a8d80c8b9f4413751c7aad53867a256bd57abe7ecf2110d970375456b20524f0a6da6a7966e35203c85686312eb0df011f6c3116002123dfd1a516", 0xb8}, {&(0x7f0000000480)="05c14846f024ddec034548eec5b18075c4f23986934c1ae360c0fb74376d1416bad131f14a862a302e24c26741f12480e45eb1cfceeacc1e0ffec84c5d1229ad973394f83fb9f6078bc72c54a78da9d4487580", 0x53}, {&(0x7f0000000500)="9119879aed7859692a", 0x9}, {&(0x7f0000000540)="ec63babe3d6b16a17e6ede79e01f3ae1b44bf6c3af16379660462d5b08482b0eadccf4b18a03117dfec78435689233dedc963a157fb3178d88d6a6703ddbd1692afd9907923853adbd49841b01b9a657ac3c952b28e51a24b4d9005d5d68daad9e4ce495ef266b3c1a", 0x69}, {&(0x7f00000005c0)="323d090f4362588c50c8f2e8ae11418fc76ac873cdbc2c815bdc27a041cd13d7037dd358706375889ddeb85a4d3b77f6123b76bc49852494a55d0317a61bdf1f44a5ff8445c46f72a19c7e8b2d7c475a45ece08deffc5c89139d04b4fbe97808e176688157d211e24ad8f22fbccab7", 0x6f}, {&(0x7f0000000640)="6ef69a4992d2105803c20d390f2f6a654255fb572466ea7f77654079172ea66e0ccc2d3141a139cf18fa39102e1fb7caa33b3160ccb3f605055fce723dd097423bf61f778b5e2ec623d6216141602062562e7294241cd64e9e0af305405b7756c9c1d194726da79ed35b4cc70780dae4415226eadbd4780064f489ada5da2f620e3aad6f", 0x84}], 0x7, &(0x7f0000000780)=[{0x58, 0x10e, 0x7, "929249f03b1f59f84ba141d576bd28228c0fbdd9ecdbaaa58f3d72f968a2893cf3f8c0fcad6658d8f52ff80b202a1331ce439f9048f8b519aee7714ca82a96bd476cf16424c53c"}, {0x1010, 0x118, 0x9, "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"}, {0xb0, 0x108, 0x0, "282464e09645fba9908b0cc24386c50d43399b6ab5ce5296167e70cbadb8042c7265bda97227ec9f1444426ae16b82a90796acf40b0087231d4220eeb43ae0eea2495ccc036ece996dadb8629a8a1e2917c402e8e17f42b9dadda72d66ffe71aa29ff60d725d12ea3e7bca544785171326078a473e03fabc66aa4885f815baa451207cb9ef4bd4109efb7ced3796accb76c900733228ae18e950dd"}, {0x50, 0x189, 0x2, "1c671b0b9955c0e29916c912c54a4571aa7ddfed7dece65f98658c3b9982b32f96b17c16a79247b90da67edd2f7813831644c289736688c7efa4ce"}], 0x1168}, 0x44001) 2m38.611532446s ago: executing program 34 (id=1991): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0xc555}}, {@oldalloc}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendfile(r2, r1, 0x0, 0x3ffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}}) 2m32.474536269s ago: executing program 35 (id=2072): socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 2) 2m31.877414984s ago: executing program 36 (id=2087): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4c68e46d0e89fb2b, 0x0) r0 = socket$inet(0x2, 0xa, 0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0xb3) setsockopt$inet6_buf(r1, 0x29, 0xcc, &(0x7f0000000080)="28f49cd7213053a221b4577eac41d4f8683f98e2ef1091ed58ebde8ff0b6e42702fb8854b94f69450013f3694885af2cbb9535aa7d4791167d09", 0x3a) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 2m30.803026471s ago: executing program 6 (id=2097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffeb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000440)={&(0x7f00000000c0)=0xb57, 0x9, &(0x7f0000000200)=[{}, {}], &(0x7f00000003c0)}) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x2c, 0x2d, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r2}]}]}, 0x2c}], 0x1}, 0x8850) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000040)=""/58}, 0x20) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002940)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {0x0, 0xe}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 2m30.802630571s ago: executing program 37 (id=2097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffeb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000440)={&(0x7f00000000c0)=0xb57, 0x9, &(0x7f0000000200)=[{}, {}], &(0x7f00000003c0)}) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x2c, 0x2d, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r2}]}]}, 0x2c}], 0x1}, 0x8850) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000040)=""/58}, 0x20) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002940)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {0x0, 0xe}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 1m57.577295037s ago: executing program 38 (id=2623): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bind$can_raw(r0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1m48.007897465s ago: executing program 39 (id=2543): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x44}, 0x94) stat(0x0, &(0x7f0000000c40)) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={0x0}, 0x10200, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40045304, &(0x7f0000000280)={{0x6, 0x81}, 'port1\x00', 0x19, 0x21000, 0x8, 0x9, 0x100, 0x0, 0x40, 0x0, 0x6, 0x1f}) capset(0x0, &(0x7f0000000280)) setreuid(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) request_key(&(0x7f0000000bc0)='id_legacy\x00', &(0x7f0000000c00)={'syz', 0x1}, &(0x7f0000000cc0)='deflate\x00', 0x0) 1m40.11643998s ago: executing program 40 (id=2885): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000280)={0x0, 0xf692, 0x10000, 0x2, 0x2d0, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) 1m34.336148575s ago: executing program 41 (id=2964): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@newtaction={0x228, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x180, 0x1, [@m_connmark={0x17c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x149, 0x6, "bbcc018133837094467c30cdd4889b1d7e62fa6390bdb16d12b39331e2a261665e3981ec7bfc5c51948a453973d08758b80e7b9b00a6376070171d2fcdc76aa89b18d7b798d1f00d20368dd3e956ad74a35bac2eb617d1cf12eeebc00fab6b53382f1c32d865ac0b521ed8b775f2d325d0b513fc92700aa53ae0a4ed71ffa0948618e4fa2880b57972eae8648c7ac4da79b5c7709b7d114cb836d51f6d7684c47c5b41f93e07bd4ea6c86d657c2ac59a54d208f6e7c4f7783dd529741000c6ae08a6691d0d22c3c5f480ca860956f4affedeee6786e1d217e2fb15e1ffcf25f2dc6154be1fd3ae3369e330ef05bf68bc243f6f25e1efc933c0dea1790991fb97186040a51e974f63f278050223030000006380384800000000000000c6e49b418fc84eeee108d7971a437267bcba9fedf10b8ed6a004c7848ab5fce70419bf3f09db471d18"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, {0x94, 0x1, [@m_tunnel_key={0x60, 0x10, 0x0, 0x0, {{0xf}, {0x4}, {0x30, 0x6, "75a592ed2007a97f98cf3b5d5058434e5ca0910aa6c12583c5eced715bc6dc71c65736035685d707d59093bd"}, {0xc, 0x7, {0x0, 0xfec72d73ad8d9a8d}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x30, 0xd, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m25.294582299s ago: executing program 42 (id=3073): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x10c00, 0x2) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) getdents(r0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x120) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/uprobe_events\x00', 0xe242, 0x48) 1m23.421176355s ago: executing program 43 (id=3083): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0, 0x6}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x0, 0x0, 0x1000000000000003, 0x9b}) mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @empty, 0x0, 0x0, 'veth0\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x20, 0xa, 0x0, 0x2000000, 0x80000000, 0x3, 0x7}, {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x6db95ebc, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0xfff9, 0x1}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8=r0], &(0x7f0000000600)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000800)=""/203, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x10}, 0x9}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) getrandom(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000002200)=""/4108, 0x100c}], 0x2, 0x800, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000001800000000000000500000085100000050000de84000000ba000000a7000000000700000000000000000000000000000000000095000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x94) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$inet(0x2, 0x1, 0x6) bind(r5, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r5, 0x5) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r6 = socket$inet(0x2, 0x1, 0x6) connect(r6, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r7 = accept(r5, 0x0, 0x0) write(r6, &(0x7f0000000400)='PASV\r\n\x00', 0x6) write(r7, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,8,84).\r\n\x00', 0x2c) 1m19.670264029s ago: executing program 6 (id=3074): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000880)={[{@nobarrier}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@acl}, {@resgid}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x1cf3}}]}, 0x0, 0x4a5, &(0x7f0000000940)="$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") syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffffffeffffff00ff00280600fe8000000000000000000000000000bbfe8000000000ecffffff0000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0d900009078000000021e1027040400000000000000020000000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00'], 0x20) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) keyctl$set_reqkey_keyring(0xe, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)="b4", 0x1}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0xc020) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180400000004000000000000feffffe318010000202069250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b7030000fffffff885000000a000000095"], &(0x7f0000000940)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) io_uring_enter(r5, 0x753b, 0xc272, 0x1, &(0x7f0000000200)={[0x81]}, 0x8) r6 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x27) 1m19.136780332s ago: executing program 6 (id=3104): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRESDEC=r0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r2], 0x20000600}}, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r5) keyctl$chown(0x4, r3, r5, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r5, &(0x7f0000000340)) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) syz_clone3(&(0x7f0000000200)={0x1000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x2a}, &(0x7f00000000c0)=""/174, 0xae, &(0x7f0000000180)=""/41, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) prlimit64(r6, 0x9, 0x0, &(0x7f0000000440)) 1m18.917451047s ago: executing program 6 (id=3107): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xd0002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0xc0f0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@init_itable}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x340}}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@noauto_da_alloc}], [{@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xa3'}}, {@euid_lt={'euid<', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x580, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x100000, 0x2000, 0x1}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x1) socketpair(0x28, 0x2, 0x80000000, &(0x7f0000000400)) 1m18.067698039s ago: executing program 6 (id=3122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40800) 1m16.096995658s ago: executing program 44 (id=3135): perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x2, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x500, 0x43, 0xa0, 0xf8, 0x98, 0x208, 0x178, 0x178, 0x208, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x12a, 0xd0, 0xf8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0xff}], 0x2, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x8}}}, {{@uncond, 0x0, 0xa8, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x4, 0x4, 0x9, 'syz1\x00', 'syz1\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) 1m15.453402374s ago: executing program 6 (id=3139): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000180)=ANY=[@ANYBLOB="003547e2289179cd09225a276d8ad02e59785f28c3aa2961f7b0c0c87eef2b0562c4f3f6420329cd2632232c81c29c35a9b1e5093b58dc15bee9e62b713346cc9eba1f080b146fd809966dc7e99fbb5c49b3820557ebbf19eb465bb2b868f0c7b1bbdf47f14b78ec7f2e981f"], 0x1, 0x537, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 1m15.439960254s ago: executing program 45 (id=3139): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000180)=ANY=[@ANYBLOB="003547e2289179cd09225a276d8ad02e59785f28c3aa2961f7b0c0c87eef2b0562c4f3f6420329cd2632232c81c29c35a9b1e5093b58dc15bee9e62b713346cc9eba1f080b146fd809966dc7e99fbb5c49b3820557ebbf19eb465bb2b868f0c7b1bbdf47f14b78ec7f2e981f"], 0x1, 0x537, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 1m10.015698449s ago: executing program 5 (id=3173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0xf8, r5, 0x1, 0x3, 0x6, @random="4331fba8e636"}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_TUPDATE={0x4, 0x4, 0xffff}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x1, 0x7fd8, 0x1, 0x2, {{0x20, 0x4, 0x2, 0x16, 0x80, 0x67, 0x0, 0x9f, 0x2f, 0x0, @local, @local, {[@ssrr={0x89, 0xb, 0x2f, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x27}]}, @lsrr={0x83, 0x7, 0x9f, [@loopback]}, @ra={0x94, 0x4}, @cipso={0x86, 0x2f, 0x1, [{0x0, 0xd, "08dfceb0ede69a860c51e3"}, {0x5, 0x11, "7f51070fbd478c4df836c433086f48"}, {0x6, 0x2}, {0x2, 0x3, "82"}, {0x5, 0x6, "d93f878a"}]}, @rr={0x7, 0xb, 0xfb, [@empty, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_prespec={0x44, 0x1c, 0x1b, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@private=0xa010100, 0x2}, {@remote, 0x7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x80e7, 0x8000, 0x8, 0x6, {{0x11, 0x4, 0x1, 0x6, 0x44, 0x68, 0x0, 0xc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x4c, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x6, 0x0}, @remote, @empty]}, @timestamp={0x44, 0x1c, 0xef, 0x0, 0xf, [0x9, 0x2, 0x1e0000, 0x1, 0x5, 0xfffffffa]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="200025bd7000fbdbdf2519000000340001801400020064756d6d793000000000000000000000140002006c6f000000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="040001808400018014000200767863616e31000000000000000000001400020064756d6d793000000000000000000000140002006772653000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08040100", @ANYRES32=r7, @ANYBLOB="140002007465616d5f736c6176655f30000000000800030001000000080003000100000008000300000000000800030001000000"], 0xd0}, 0x1, 0x0, 0x0, 0x20040800}, 0xc40) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='Ac\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25010000001c000180060005004e22000008000300ac1e00010600010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x40800) 1m9.905309152s ago: executing program 5 (id=3175): socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x3) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000015000303a10000000000000001000000fb305fd886aa7e1d51da14792190657d2911445337395a8412d12eea295c4d3f3898f63ae8b721bef136735fda0ef8206b6c0b61fb587cedb6d9cffe4284a5d038a79bcdc00b1646fcc3614130b54e0e8c6d4d8cc84b876c0f68aa4fff7472c2a63a861919db84d273d6548bc787d48b71d6f0814119b12f5cfc9143ef4f5dd62c24d636f3dcbfb35c8db7bbd03372f74b85fd7e3326f4fe60c5a89bb8b16dc75b846d250ba4e8db3cdf9baaa7520097a91b63d102ecf7334468a476a022e5606735536c6867eedaca67360938138993fce309ab051664083ec03cb5d164d9bc"], 0x14}}, 0x0) 1m9.746897635s ago: executing program 5 (id=3176): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8995, &(0x7f0000000000)={'bond0\x00', @ifru_names='vxcan1\x00'}) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000540)={0x0, 0x1}, 0x8) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="010f0000000000000a004e2400000002ff020000000000000000000000000001ee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000c06ffbb148825ad8b26429bbd1eb477749f6154712cd93ccbdb55fd366f7a9cf9888"], 0x90) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) connect$can_j1939(r6, &(0x7f0000000640)={0x1d, r7, 0x0, {}, 0x1}, 0x18) sendfile(r6, r0, 0x0, 0x1000000000000a) 1m9.632173549s ago: executing program 5 (id=3178): r0 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYBLOB="af4fc33bd40bb20a9c7fd472b8b8a3543cbfb598880019a53dfd2c"], &(0x7f00000020c0)=""/4105, 0xb1, 0x1009, 0x5, 0x10, 0x10000}, 0x28) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x22) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5d, &(0x7f0000000900)=ANY=[@ANYBLOB="0380c2000002ffffffffffff080500010b2490c0d8f36c999e444a3b24a7153745d3acc4298b423de188bbc80cca342809625d6ea9ec1babe8677e2d4d61726fdcb789cfde94148087a4491d5cef813bb85acbf1cf469346c0fd6de302fa4d404179d07f9997c0baeea398b7c148e678126fa28a272a754534510d2430dd1ad358afa0b29a25b8f911373daa9dd6babab9e6e7f9ee0c7f796bef3ce738bbfd20a8aedda4a2fc57746642a6545b639d325956b648326ddb96537c9af6eacb7da9c7e425f78d77c0664942cf6eca6f9522fd847208d580cdcb9b85f8793313aab6f9498aad46ca4ad4142b6ec75ac8604c2e3f18ecf0281446e5205e4d50d901b0511ae834caa37f0f74"], 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x168) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x22000, 0xc6b5897ef189faf9) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000000300)='%', 0x1}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r4 = socket$kcm(0x2d, 0x2, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000200)={r4}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mmap$usbfs(&(0x7f00004e3000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r6, 0xfffffffffffff000) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000002040)}, 0x8040) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@noblock_validity}, {@grpquota}, {@grpid}, {@nombcache}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='-dnet '], 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9d"], 0x1c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r8, 0x80000001, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x143042, 0x0) 1m8.671148042s ago: executing program 5 (id=3187): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305ffffffff0000000000000000", @ANYRES32=r0, @ANYBLOB="15173313650a01000000000100240012800900b9a415320100626f6e640045000014000280825dc81136ba430a235461bd433a918e5f011b315eb631de0f24027693fae3ecc5c6c478283fdf96e53c7e82abc2c5bd50"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x28000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0xfffffffe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) unshare(0x20040600) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="303def085604f48847f6f518d4fefa62cc92d50a844b1b6de07969d71d7864aec11f328d1c82a19619f444ce3051587409c3f7ff3b7c52a3beb9eec98e8fe93e0fbd3dd6210af957769b4bc63782e743b45276dd947ae9f80684221ef8db047b5016d086b1007a1b31f66be5ac0354b27ed93e6a17af8369919a27b09fb2243c258986bfdf542ebafe251e422f102fbd0c", @ANYRES16=r7, @ANYBLOB="01000000000000000000020000000900010073797a3000000000140002006c6f00"/46], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40010) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCGNPMODE(r5, 0x4004743c, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 1m5.961563289s ago: executing program 5 (id=3208): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x100000000003, 0x161341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xf00, 0x400, 0x0, 0xfffffff9, 0x0}) (fail_nth: 4) 1m5.95318614s ago: executing program 46 (id=3208): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x100000000003, 0x161341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xf00, 0x400, 0x0, 0xfffffff9, 0x0}) (fail_nth: 4) 57.614679667s ago: executing program 7 (id=3337): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffdfffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@deltclass={0x64, 0x29, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x5}, {0x4, 0x7}, {0x5, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x34, 0xd}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x17) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00\x00\x00\x00', @ANYRES32], 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 55.124377369s ago: executing program 7 (id=3353): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmmsg$inet6(r2, &(0x7f00000003c0), 0x0, 0x20008050) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg(r3, &(0x7f000000ca80)=[{{&(0x7f0000000000)=@ieee802154, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001800)=[{0x0}, {&(0x7f0000000640)="626b2d13c6b28549d7d6d392f2cbe920ee4e928e5ec3e6d2c91c40c05e474c768e128fe6c9fb2452b5b76fb5d3e87481de769ddc312717824e16fb8c24cb44e5d9624e6d7b31aeca547e31acfadb2fa065e303e8839d00134f4eeb273b7d840f4d94de4c233308bf8a2638fa59693418847907c5e75cdf48cd6a3aa3b7e91594ae6907ca6317a2beb4163b203d0e04862d3ec64804dd94c5049b3a3fa741ae4269d3349b6782e2e461739670d57875527cfda814bdd49952153c7313a2415c66915faf5a28de178fe591e6340866c28f0b804c064bc8e40462cef4c67189ddf18f248c0c4ba6fc79deee6f78ad590a4b2b9def38e7fa1942bec32004f7f3c797beb172ac3c14c37315d07d450f5259a45d3d17802123144df64e430cbfd3fb692b39b8609c4d85f3c340ce6a3fde6b691ebb9240803425c6882caaa4cbe1d1266cd5cb8a2857633e4dc7724caa887e208bda9e9e55eee3319a91a9607548fe74f2763b657beb64ef35833997c61714bc7e580d96a33e9a0bb70ae43e14b2435775cd2bd44e106f84a445f9ed3eefbe3e4551f5794d4bde88e7068f6b34ae28fee5291676532b0ecf5cb7d89d74f9f6f3c16cd5d7d59d2dc584f0307a012ec6dbe24a15fb5802fec8acf6e57a5569bf6fc16af60309cce5e046e449e131538292aa442cb05be6f341708365d9adad63d79602087d8fc17c1ec5578a8f1349dcc72d443e1ffb0a74bf847b695b29b4c9a2d09103b834ea9e6de488452bb9fa810c02337d38ac94be4da7da0a9b2aa825c05ad75b4b72c734609244b98fe59064d78b68db7a92eb0b0f51aba9867bc7604a2b6ef4197f2e2f4ce68721d2561c38e18bb9ed6551da38ba086e239b2c5f69ecc28505992861bd2d0b754497de138da3ce0e3ed691c7914fc327bfb827893421ce12a95cfc6693be9aa0d11eb983d598a194be71abfb15330618b28a47634f8de2e8129914533e5d1e48de131bf9094488a0b9f90bde5db8ecbceb8ae336464a54e910fc58374acc32e79a9c646afe6dd8c935591aab8a99f7810486ef36d9b0d0708d308df0acf7dcabc30d1a5cf0cdabcb9e6fff72a6dd925bc76008889b59c5d559fcf3955c89fbf88f0b9d861b5b0280ec2b964b7a83ffcbbc4e927b8a8c8c4f39c8009098201c9ba07c250799b4e5e7e3a6f16e40134e01bc67e8f0db8f757ba0c375ab2ecad372afa07a435f1efb9d1b302d43a2441c63cc3125afc0951ea23a0f8865282e094c7ae26f27c894257be6a1e7ae55806edae084764a7cac5e614fbe0ab68e197c6dcc8a99f8b0a1f79a9dd2b45fa4e0850dec7ba637a461723f32135f8e2dafc4b07928d245d741041d4e8e84784374e158dfa52a2fb5889c95365c38a5ea15c2d1fb003d268dbc177fbe5f0dc7bcee122bd4d98c23a943bece4283a5f834729f87ed38351734bed9e6e7e15c9cc008aeb4493707114fb23a81a3740d2c372bcec2d5c98fce637da4dad1b1fef25d0980e072e4755cf5dcc6f983f6f87c2cc06748aceda1150d34d1b9ff95aff4d108a482744e2a88df30b7ed6473686d8d056ad990d0b0c5b709d4b39a9ccee96ab2453cced95443e530b0fe56501accb086cc628f852ba6bbc3c99cdae6a347b2cf0913e7a58a95e8226b81c658681b0ee8c42869c614da2108143adce1aa16c6e0c525f44752f943db10ebb41c00e3ac8a67a7e04398de182f1a5fa583ed9749351de84ca5873b3199c609b776f042a64eea25efbdb9b7d28496db6bc724c9f4ad3d8189238a71485ccec1dcbac5a086578fe4498e5c61bb4ad87c3fee7eba2c3a8b5212349c84a516a7ec80fb359af9df518dc764301055d752f47bae526ae524e8ba4db9ffd519b767b5d729e948bf90f01a7cd74f73c9cea6fb529da1831523416cce9c237bc6dda55fea8d865bebadb3678f8faa1a568bfc555d63e50e4b1f60323999584c1e7cdf2eaf8d312b7365aad4486b5f70", 0x57e}], 0x2}}], 0x2, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @broadcast}, &(0x7f00000001c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@RTM_DELMDB={0xf8, 0x55, 0x400, 0x70bd2d, 0x25dfdbfd, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x3, 0x4, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x2, 0x2, {@in6_addr=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@private0, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x2, {@in6_addr=@mcast1, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@multicast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0x25}, 0x8edd}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040091}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r8 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180)) 50.66213092s ago: executing program 7 (id=3425): r0 = socket(0x2a, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/f/7x3fndmZ/8wEUFgT6ZckYjwiLkXEzv7sf68w0f/WOXRxLp2S6HY//Zekt97soYtzw1WHP7cj/TIWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02r3WyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo2+jrUyERODv0klbhqpH0si7l3rxnJS7v+r446RumQsxw7xlnW7u7+XZvTtEbGvl/+dUY7+P++lpx/428745T159xFYP92h7MWvdoFNq9TbB05K1Yjol0ularW/D39zbC81W0vtAw+2LizM9veVd0Wl9ODZZn1y8FlhV1SSdP5gr/z6/NQb5g9F9PaBHytv681Xz7Sasxv9Zgf0jEdcvvS5M1t2vCH/fyr38w9sXmn+f/HCU8+m5dfKefcG2Ehp/r/72vwnQv6hcOQfikv+objkH4pL/qG45B+KS/6huOQfikv+objkH4prmP/7T56M+0+e7HYG178vtBpnz80tHpuarM5fOFM90zq/WG20Wo3eFTvz1/+9zVZr8eBUXHio1q4vtWtLy53T860LC+3Tvev6T9czbgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9zXIQD589Ificqs2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz563O/0FROf4PxeX4PxSXfXzA8X8oHsf/objGr/H8rxtHnt01GRFvi4iflCs3DJ/1Bfz/Go+4fPnbn62tPIdbQUFBYaWQ9zsUsN5eD33ePQHyMnvo4txw2qg2n2lsVEtAllfu7g8CSnPfGUz9JWMr5wYq6zRO6OXHIibih799fP9cOZ1i8D60Dk0BGR55NCLelbX9T3rnBnYN1tvdXy1ujohbIuIdEfHOVbb99U+l+X+hPlon/7Bx3mr+b42I2yPitoh4d0TsiYj3rLLtn19K8/+rbaN18g/F8Pnn8+4BkJePP5V3D4C8nDLGAArrOw/n3QMgL0//IO8eAHn5yot59wCK7bm7I2Iy6/xfqXe+f6gyuC/gDYN7AWyLiO0RsWNwDeGNg2sEd46cM7ye05+MmIjbfzRa5/wfbJzh+L/OVeP/Sivj/8oRsXcVbTzzwfEvZ9XP7Enz/8TDw/F/6ZS2PxwLCKyvVx6NuC0z/8nKmN8k0pxGvPd/bGPiC1eezKp/8b7091Z+Jv+Qj+63It4f2fkfSku19vxibWm5c1fvOd6N+sLho9PHpo5MH52u9W4RUhveKCTDib++eiCr/uWpNP/fOCz/kI90+7/9Gvkf3f9/3yraOP61L53Kqh//fZr/Pc++ef5Lf96SfKY3P3wuwUMz7fb5gxFbkhNX10+toqOwyQ0zMsxQmv/9+7I//+8e/Ey6/T8eER9O9xci4l8R8e+I+EhEfDQiPhYR97xJm1+9s3Elq/53T6b5f/yc7T/kI83/7HW2/+n3f6yijQP7f/zFrPoP7U3zX/3NH048MJZO8g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9paWO+dmms36+XUs5P0aAQAAAAAAoCj+EwAA//+eEDT3") sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="110000005200010003000000000000000a"], 0x20}}, 0x0) 50.568325352s ago: executing program 7 (id=3426): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xc000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2a62, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x5, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x181040, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x5}, 0xd, 0x1, &(0x7f0000000040)={0x60, 0x7, 0xb2e, 0x4d, 0x9}, 0x8, 0x8, 0x3, 0x0, 0xd31, 0x10, &(0x7f0000000100)="4daf6595bf714843a2fe9a90142c26f4b73a391b145031c6f8823712ca973f99749e3630b5c27dddd682741550ff33b28d1c690536c8ada4260395193041e1eafd316ea6a5eb1700a1b9b66466e3a3e1ffb7a400a0e31a82fdd68f5420fcd9329da4c324b039dd03bfe74eb1ba667f3a20a958a64605ee4012eb98536940f25885a9c3f89decfd5d11a049ff236e2996659c49e12da9bfdcf2a14d7dbb3347909e1e4c9dad98622d2e54df632fef4e26097b3026390be611d2da357406300b9cf1a7123ba12e8d4e0741e65a"}) 50.335463268s ago: executing program 7 (id=3430): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1) 49.85495013s ago: executing program 7 (id=3436): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8914, &(0x7f0000000080)='veth0:') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05020000000000007111ad00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) syz_io_uring_setup(0x2f70, &(0x7f00000000c0)={0x0, 0xc866, 0x2, 0x3, 0x34}, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x101, 0x6) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x36, 0x0, @wg=@data={0x4, 0x40000000, 0x0, "4f09d52680eb4c98c65d810baf13a0c99e112fc4afa7dbfad80cee844358"}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) read(r2, &(0x7f0000000400)=""/198, 0xc6) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)=0xfffffffd) 49.825298251s ago: executing program 47 (id=3436): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8914, &(0x7f0000000080)='veth0:') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05020000000000007111ad00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) syz_io_uring_setup(0x2f70, &(0x7f00000000c0)={0x0, 0xc866, 0x2, 0x3, 0x34}, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x101, 0x6) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x36, 0x0, @wg=@data={0x4, 0x40000000, 0x0, "4f09d52680eb4c98c65d810baf13a0c99e112fc4afa7dbfad80cee844358"}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) read(r2, &(0x7f0000000400)=""/198, 0xc6) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)=0xfffffffd) 41.037550479s ago: executing program 1 (id=3519): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x80, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01072cbd7000fcdbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="534a49864f6aca1c5e592aeb3b7eb110e3f81e0dee24d5bb9b003254b37a3f16dcafa14132340ff73092b1430396ec0c2f17e7694c5113999e5b44330c31c3b2bf3a3b0fbabb58d31975e372753609f1d1f529e875416b9559efa03f4e976e4e3972110cb89d787496adacb26e3da18f862510d5d7be4f7b0d039eb85e7e5aa1247087212169dc189357765cee47fd9d30f95c7723f568db896abb8ab17fc4840df25b27c4715ce1732a93faf651428e4301"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) io_setup(0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 40.737453037s ago: executing program 1 (id=3523): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) listxattr(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)=""/101, 0x11) syz_io_uring_setup(0x530d, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c100000", @ANYRES16=r1, @ANYBLOB="040027bd7000ffdbdf25870000000600480046000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r2 = getpid() rt_sigqueueinfo(r2, 0x1000002f, &(0x7f0000000340)={0x31, 0x718, 0x80000000}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4000005e}}, {@noauto_da_alloc}, {}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x476, &(0x7f0000000540)="$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") unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200) 40.692420318s ago: executing program 1 (id=3524): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x20040000) unshare(0x42000000) r1 = io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x273}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r3 = gettid() mmap(&(0x7f00002b3000/0x2000)=nil, 0x2000, 0x2000008, 0x80010, r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0x7, 0xffffffffffffffff, 0xa) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) setns(0xc9, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e22, @private=0xa010100}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x2, 0x3, {0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, 0x3a) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000c29267c37b09af22a08d7faa2446779b553e8501e9f0a3183f40dfa23973d77472f83f8e0505eda88bfa8ac777ef2a31af6ce24adcfa363e12c11da2f9b01c5bd2e0e52b8b4d8da14cbca7b26e43a3f7fa5243507200a751ec922080c574a1bb84a83acfb9fdba1f0e682feb5b0475bd5cacfb13c577733d4ab700f4cf916ba2fe86671dcc0fc6361a3555aa302a8a58e9227f1555fb04408f4612f8b3a78e20a9b3f9d69854f92ec368b079a9aa7bec16de548709fbb52b2d144013a8dad22bdbefe2567cd8479209314d32487f1b120febc84c18dd8e22dd374dcfd1e2d384d72157857dba8e8602b4a41fceb982671d153d2486faad998f0045d7ed6c3edd6b091a8b49bdd49fc709c6384519cb3400fbfb9dbd79968e2eeaa5348ad95e68153470144b43666671406c742ce4ad79e2360168f85600af2b1b84bcdb69c757f0cf8b0720e05667dd3417702882926ed2f5e2e3a1c6dacbe8ae696ceabc34c3ef02e45dd1f93dcf364bcff61058940b4260d8a926d14deeff0cf6dc99ff3bcfdb7ba539dbf6d51da87266e8fd3b3e290a36a4742923da8fb3410fa7ae9d53fc27abcb29d01fdd0ab400"/445, @ANYRES16=r7, @ANYBLOB="00042bbd7000fedbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x805}, 0xd15514c36463dd6f) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2530, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x401, 0x1000, 0x5, 0x8, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r8, 0x24, &(0x7f0000000140)={0x0, 0x1, 0x400, 0x80000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 38.501466303s ago: executing program 1 (id=3538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) socket$kcm(0x11, 0xa, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) io_submit(0x0, 0x0, &(0x7f0000001300)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@auto_da_alloc}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") ioctl(r4, 0x40047438, &(0x7f0000000040)) write$ppp(r4, &(0x7f00000001c0)="ab29", 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@ipmr_newroute={0x38, 0x18, 0x4, 0x70bd27, 0x25dfdbfd, {0x80, 0x14, 0x0, 0x7f, 0xff, 0x4, 0xc8, 0xa}, [@RTA_FLOW={0x8, 0xb, 0xb23}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2f, 0xf}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x68010}, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r8, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000740)={0x0}) 38.074000213s ago: executing program 1 (id=3544): syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4, @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 35.085711688s ago: executing program 1 (id=3559): r0 = socket$inet(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) setreuid(r3, 0x0) setpriority(0x2, 0xff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r4, 0x402, 0x91ea6c16f182517) getdents64(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000040), 0x0) epoll_create1(0x0) readv(r1, &(0x7f00000038c0)=[{&(0x7f0000001500)=""/4089, 0xff9}], 0x1) shutdown(r1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = eventfd(0xffffffff) readv(r6, &(0x7f0000002000)=[{&(0x7f0000000640)=""/214, 0xe7}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000002040)=""/4086, 0xffd}], 0x1) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 34.929556471s ago: executing program 48 (id=3559): r0 = socket$inet(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) setreuid(r3, 0x0) setpriority(0x2, 0xff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r4, 0x402, 0x91ea6c16f182517) getdents64(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000040), 0x0) epoll_create1(0x0) readv(r1, &(0x7f00000038c0)=[{&(0x7f0000001500)=""/4089, 0xff9}], 0x1) shutdown(r1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = eventfd(0xffffffff) readv(r6, &(0x7f0000002000)=[{&(0x7f0000000640)=""/214, 0xe7}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000002040)=""/4086, 0xffd}], 0x1) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 23.965491044s ago: executing program 3 (id=3666): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x7ffffffd, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 23.918712005s ago: executing program 3 (id=3668): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xffffffffffffffff, 0x100ffff}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc61}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a010400000000000000000a0004050900010073797a3100000000200004801c0001800a00010071756575650000000c000280080004400000000d0900020073797a320000000005000740890000001400000011000100c108723f28bcb21f0100000a3e4d14cd95473de186838788e23e37950fe8a3054ffcfa84bc8fdb14e71b109709292c26c2b5f0a04c6c1c6a322e267f48bd7c8fb03274d746fb5ae73eed474f9027e331133768ad915a0bafbd596eaa14a6eea418c9e6a4d9d1bb3af01f62d74f7fd9f29f775761ce54ad975b956cff41b289b5ff"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) unshare(0x6a040000) timer_create(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r3, &(0x7f00000038c0)=[{&(0x7f0000000380)=""/4103, 0x1007}], 0x1) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000029c0), 0xffffffffffffffff) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x6000, 0x7, 0x9, 0x2, 0xa}, 0xfffffffffffffe70, 0x1000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x4c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44040}, 0x40058) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x400, 0x5, [0x2, 0x7f, 0x65, 0x4, 0x9]}, &(0x7f00000013c0)=0x12) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001400)={r8, @in={{0x2, 0x4e20, @loopback}}, 0xe0000, 0x4, 0x81, 0x9, 0x39, 0x6, 0xf4}, &(0x7f00000014c0)=0x9c) socket(0xa, 0x5, 0x0) 23.527078005s ago: executing program 3 (id=3671): sendmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000900)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x6, 0x9, "b5ab647ea0eb09dabba1ff3015b196d49c4bba1592669635000bea3609f0b4ae2e4a3b50ce3bf175293802c64e1c48aa8a1192d15ad8abf1c0c61315048a64", 0x18}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000980)="428cd72581fda8d26583ac623fdf59c12a3f", 0x12}, {&(0x7f00000009c0)}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="d0000000000000003300000007000000dd50ec0bc85b7dd8bfb89b23e9b29162537ddb1becb918daf524d0c3b07e424cfaea349d25c60ec34336ad3e3ed436e0c402000000e8c6da9181543b4d80b91cccc902e4e07d208d2fab09be77e5779bb0d8118c2d26b395c5e8a72f1fc37320fc66080afb4e94643c9d9740da67b222c8ec7b2067bf9c98a87d4884d4bc25e832dd691e3b658f99a5d9e0b1f806f67ed47e122a88c9ff980ec07911743ea0b2f60cac27eed508a17d39e835f8c1d0a795cf492b8f801841e36f6a0c02000000"], 0xd0}, 0x40041) 23.409416878s ago: executing program 3 (id=3672): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth1_to_team\x00', {'lo\x00'}, 0xffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mkdir(&(0x7f0000001a80)='./file0\x00', 0x100) bind(r0, &(0x7f00000003c0)=@isdn={0x22, 0x0, 0xff, 0xf8}, 0x80) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000200)) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4800028044000100240000006d6f646500000000000000000000000000000000000000000000000000000000050003000500000011"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) close_range(r0, r1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r4, &(0x7f00000002c0)=""/169, 0xa9, 0x0, &(0x7f0000000380)={0x2, 0x4e24, @loopback}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x509103, 0x0) pread64(r6, &(0x7f0000000800)=""/4096, 0x1000, 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900ff030000000000000000e00000020000000000000000000000000000000000000000000000000000000000002200000000000a"], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x8044821}, 0x0) r7 = dup2(r0, r0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) accept$nfc_llcp(r7, 0x0, 0x0) 23.339219669s ago: executing program 3 (id=3674): r0 = syz_open_procfs(0x0, &(0x7f0000000900)='smaps\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x17c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xbb5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x39}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x40}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xf}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc845}, 0x40000) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x8, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40066, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080005008000000004001200080004"], 0x48}}, 0x0) 23.061632846s ago: executing program 3 (id=3676): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e26, 0x403, @loopback, 0x2000003}, 0x80, 0x0}, 0x4c040) 23.053866427s ago: executing program 49 (id=3676): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e26, 0x403, @loopback, 0x2000003}, 0x80, 0x0}, 0x4c040) 10.073977139s ago: executing program 0 (id=3889): syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4, @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.996071701s ago: executing program 0 (id=3891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc}}}, 0x24}}, 0x0) 9.951848302s ago: executing program 0 (id=3893): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xbaf, &(0x7f0000000a40)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) pread64(r0, &(0x7f0000000080)=""/79, 0x4f, 0x47) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000040)="0118269db93bda7b297893dbebf7e87c", 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x1000000, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 9.661565479s ago: executing program 0 (id=3895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) socket$kcm(0x11, 0xa, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) io_submit(0x0, 0x0, &(0x7f0000001300)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@auto_da_alloc}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.343901157s ago: executing program 0 (id=3903): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 9.22905455s ago: executing program 0 (id=3906): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @empty}], 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@RTM_DELMDB={0xf8, 0x55, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x4, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x2, {@in6_addr=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@private0, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x2, {@in6_addr=@mcast1, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@multicast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0x25}, 0x8edd}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040091}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r4 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000180)) 2.349091261s ago: executing program 9 (id=4039): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x181cd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) socket$kcm(0x29, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000010c0)=0x14, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000004a00037e58dfc300000000000a"], 0x24}}, 0x400040c0) 2.251349833s ago: executing program 9 (id=4042): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udp\x00') ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, &(0x7f0000000000)=0xa639, 0x9, 0x0) r1 = io_uring_setup(0xfa4, &(0x7f0000000000)={0x0, 0xbe4d, 0x10, 0x3, 0x16a, 0x0, r0}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001e00010028bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000060005"], 0x24}}, 0x0) 2.228192534s ago: executing program 4 (id=4044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) socket$kcm(0x11, 0xa, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) io_submit(0x0, 0x0, &(0x7f0000001300)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.178738095s ago: executing program 9 (id=4046): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40066, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="180000007a00010600"], 0x18}], 0x1, 0x0, 0x0, 0x240040d0}, 0x20004080) 2.121998887s ago: executing program 4 (id=4047): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x3830, 0x1, 0xbd6, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x2040400) r0 = getpid() socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2004000c) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='1', 0x1) r2 = syz_pidfd_open(r0, 0x0) process_madvise(r2, 0x0, 0x0, 0x12, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x1, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0xc9, 0x9}, 0x8b3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x8f, 0x7fff0000}]}) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x40082102, 0x0) 2.097911627s ago: executing program 9 (id=4048): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0xfffffffc}}]}, 0x70}, 0x1, 0x7}, 0x840) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) unshare(0x2a020400) r3 = socket$inet(0x2, 0x3, 0x2) dup(r3) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0xf, 0x39, 0x17, 0x8, 0x9, 0xfb, 0x2, 0x11, 0xffffffffffffffff}}) 2.061534918s ago: executing program 4 (id=4049): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.021902739s ago: executing program 4 (id=4050): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfc, 0x4, &(0x7f0000006680)) chown(&(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0xee01) 2.021425379s ago: executing program 4 (id=4051): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x9f00, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x1499, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r4 = shmget(0x3, 0x4000, 0x800, &(0x7f0000326000/0x4000)=nil) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, 0x0) r6 = getpid() shmctl$IPC_SET(r4, 0x1, &(0x7f0000000400)={{0x0, 0x0, 0x0, r5, 0x0, 0xb2, 0xd11}, 0x7, 0x10, 0x1, 0x7, r6, 0xffffffffffffffff, 0xa2}) futimesat(r3, 0x0, &(0x7f00000004c0)={{0x77359400}, {0x0, 0xea60}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x11, 0x0, 0x0, 0x0) 1.749350326s ago: executing program 2 (id=4055): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0], 0x48}}, 0x0) 1.720278937s ago: executing program 2 (id=4056): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udp\x00') ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, &(0x7f0000000000)=0xa639, 0x9, 0x0) r1 = io_uring_setup(0xfa4, &(0x7f0000000000)={0x0, 0xbe4d, 0x10, 0x3, 0x16a, 0x0, r0}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001e00010028bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000060005"], 0x24}}, 0x0) 1.669618398s ago: executing program 8 (id=4057): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xd2c, 0x19d}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x200000000005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000002700010004000000ffdbdf25ac1e010100be16732cfa1aecf400000a0101000000000000000000000000004e2000040000000002000000a5000000e4ebf768f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x1080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048860}, 0x0) ioctl(r1, 0xc138fd04, &(0x7f0000000000)="0400000000000000000000003801") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000080000000049acb26100c7000000000000000000007f638c25b7b10b6c20de969dc311d728b525d6cebb6807552165e1d2fb052dedfee44dac4711c5fa0e24d468a4b370bcdc8521e79ec70045"], 0x50) 1.391361885s ago: executing program 8 (id=4058): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40066, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="180000007a00010600000000fbdb"], 0x18}], 0x1, 0x0, 0x0, 0x240040d0}, 0x20004080) 1.378153095s ago: executing program 2 (id=4059): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x8f, 0x7fff0000}]}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x40082102, 0x0) 1.037254074s ago: executing program 2 (id=4060): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.031346664s ago: executing program 9 (id=4061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) socket$kcm(0x11, 0xa, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) io_submit(0x0, 0x0, &(0x7f0000001300)) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 905.077867ms ago: executing program 2 (id=4062): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, r1, 0x100ffff}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0xc61}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a010400000000000000000a0004050900010073797a3100000000200004801c0001800a00010071756575650000000c000280080004400000000d0900020073797a320000000005000740890000001400000011000100c108723f28bcb21f0100000a3e4d14cd95473de186838788e23e37950fe8a3054ffcfa84bc8fdb14e71b109709292c26c2b5f0a04c6c1c6a322e267f48bd7c8fb03274d746fb5ae73eed474f9027e331133768ad915a0bafbd596eaa14a6eea418c9e6a4d9d1bb3af01f62d74f7fd9f29f775761ce54ad975b956cff41b289b5ff"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) unshare(0x6a040000) timer_create(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r4, &(0x7f00000038c0)=[{&(0x7f0000000380)=""/4103, 0x1007}], 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000029c0), 0xffffffffffffffff) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x6000, 0x7, 0x9, 0x2, 0xa}, 0xfffffffffffffe70, 0x1000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x4c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44040}, 0x40058) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x400, 0x5, [0x2, 0x7f, 0x65, 0x4, 0x9]}, &(0x7f00000013c0)=0x12) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001400)={r9, @in={{0x2, 0x4e20, @loopback}}, 0xe0000, 0x4, 0x81, 0x9, 0x39, 0x6, 0xf4}, &(0x7f00000014c0)=0x9c) socket(0xa, 0x5, 0x0) 904.618217ms ago: executing program 8 (id=4063): socket(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000480)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000740)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000001cc0)=[{0x0}], 0x1}}, {{&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f0000002100)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000003640)=[{0x0}], 0x1, &(0x7f00000036c0)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003880)=""/201, 0xc9}, {&(0x7f0000003980)=""/10, 0xa}, {0x0}, {&(0x7f0000003a80)=""/55, 0x37}], 0x4, &(0x7f0000003c40)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x2001, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 758.005391ms ago: executing program 9 (id=4064): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x46, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x100) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r2, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x2097fbe0148a2c82, "8f953742ea208bc85367ebbcc3d2b2a052c4dd1acce4ee06a3f29a67fe1c9bd34dded8cafda8d2c2939102cfcc1a64f6600d54adf872db7f093cb9c4a0ec8a47", "a95e4df5e686592802344a7d1ac099451f53eac2fe6028e1abd7ac5face506bc1326742afdbd54a971622ad7c3828a507eb6d7ffcf30f1e1e503dccb704d6d96", "15edf26db7e7ce8895809fe39d477b3a7d60ca7d98a7579e254d0c603fd24682", [0x8, 0x1]}}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000240)={{r1}, 0xa6cb, 0x1, 0x4}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffff, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "96a71c52ca1ef7ac32a755d4"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ff428ba8d3"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "2a6b85"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "51ff23e9e755fd3e9c0b8fbdcaaf"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004850) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1406, 0x2, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x11}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000540)=[@increfs_done, @dead_binder_done], 0xa2, 0x0, &(0x7f0000000580)="792c661e314df11c113bcb1337bf4b5e72e6cd0270734df2e17d38a2b3080466789211b0566be93293a31cd0c13c8c160bca79f98b2a55bc055e5a7427fda7284dc873f2dea1de4e678ac53fd3c98d2a48522dbe5281210ab62db5475f313e954e6f1a1b14cb778e4f9cab8f5ba3200e3a34148e8ab3aca57e8345cdea3b9bc93aeb804d125b4e3fd00450a407d5ec692ab872c3600436b835080bcf363e75d9d88a"}) r8 = accept$unix(r7, &(0x7f0000000680), &(0x7f0000000700)=0x6e) lseek(r8, 0xffffffff, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000740)=0x4, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000780)={0x0, 0xb}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000800)={r10, 0x8, 0x30}, &(0x7f0000000840)=0xc) sendmmsg$inet6(r9, &(0x7f0000000f80)=[{{&(0x7f0000000880)={0xa, 0x4e24, 0x0, @local, 0x4}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000008c0)="1dda343ec8b12a6d0d9779545abc36adb1b1b9ddf232c4cfaf80d1c5557e3ac51cfe96ca05c13767969685fccf52e530c4cafd6b6bd7f88af5374d52577e98f9bc7f4d26263091f9c4bd6a3b893c58662097c4267762e29bef490a86072eb91d9473187596f20a6f6e3c7eca36bf798723cf166a831ba8bcf6e27b77f847612fa0ce3899cba349086e484d47d5c47f5b1a21b5846f4284c52129c3fd64220d275b39e4b6f989195b08de051742643f1b5f72439334f4f22f3e66ff1fcce92e03a63508b5e24a234e6b339af896714b8c4d44", 0xd2}, {&(0x7f00000009c0)="2e4529221afccba42562e74c9494f4f702f537ef79dae10998291d5971c369dedf32586bd4c81b78c78f22d4da6c9d2c51a6abb5d7ed61b4ca8ef07497079a5cf9ff1b8a1ed24567927b820b249886df62a611c191fd096709873f2c9590a77a5c2c2199293aa2cc908e7146d0947664f6024d46fb95a7c67f7c402109", 0x7d}], 0x2, &(0x7f0000000a80)=[@hopopts_2292={{0x108, 0x29, 0x36, {0xff, 0x1d, '\x00', [@ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x80000001}, @generic={0x83, 0x90, "abbe81fdbdd92a5a916399955e032af80ecf54617466c144e382fcf8dab9b9e6defe98483e4c9eecdc996bc444d92748cf47ba7e5731cfcc9b60820133c448039e48a5b98b9cd47d64ac281322f106b94ea09be30233a62a51a1fc7df04e789256be14abbae790479c8728fa0c118818fb7e90ba14cc6ab3715fe96986194f63da8cf13911e663cdba0d4db3b57f7969"}, @pad1, @generic={0x6c, 0x38, "0e13bf68c6c4c575ab74aa0fa6a089b84431c976fdc107156c17df68bd93592f47e8979b437cbd494b981700fe4d9f480ddf2136b8d2e54e"}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x62, 0xe, 0x0, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @local, @remote]}}}], 0x190}}, {{&(0x7f0000000c40)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000c80)="ea77d7c355b27ad6db4543b903896b518a2a6b370388de39fd85b8f4f619a95a3a0d0db6e23855d294f6ecd0f8298d7521610b967e5e792bed8c8142cbb68a1a1bdb5f2c5df802bc54c6f8a14aaf9080ca9cc1a0ba7e11308dc099ba234d3c13d87d3695cf3e2929c70cd66dc0f749b36e5b7067b9462087c5484b441b41c3f6098c1530f810a30a1b5b33edceae64aff8bb27e4221138bb05cba5e0eec33ce099907a6b36232ca2af291ca6110b77be0168103dba17629ad11084db7779a08ccac58dccda801ca25b3940c53122f0a40a725ffcfdd906e835663316dc30d1", 0xdf}, {&(0x7f0000000d80)="ba5a258081d3d5c5475a1285f1274521e9ab7e522686380cb108f9f8092d66043edebf22578c3dbb1dfe48c4071ae4bce61eef9de1f533e12bd421ed7c501a6e2d10dd7a48aca15e7c6cd6d94c3905f98e0b74bb62b064f790812efb548584f1b66c0be520be0e70887a1c856f70f81a73a76baa97ef99ed32bde624d7d95012573ff7ec4dddcced439aeee89540b12123ef206b12a68e7335e98fb2fd02020ef7546aecec4bd96745c9356aba554cc8a1c0ebdfa0eaa7a3842df9e0377cab764ce1f8ee7ceb2c64b50e66", 0xcb}, {&(0x7f0000000e80)="ba2681b37d1d86fa5dbc77cf5c9085e0ff29bb563d75f37ce36ff6bde98b3808538f8a03784e2a2b48fbc3f80962ec67a1cb79746915b86fa5c9c0625ec4c86c68bb8903a6bd9781d222659067f1a727df170738f2a05ca7e73fa9be0c597128107d06d199adb302dd8e55385490d57a5e569bede06f40cda63e99c31f67c9a1f9b302b188494687b5cfdb72b582c14002184ea68f2e63e0f0261ff414f76b56", 0xa0}], 0x3}}], 0x2, 0x20000000) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000001000)=0x439, 0x4) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001080), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)={0x1c0, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x28}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xb}, {0xc, 0x90, 0x6732}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8000}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x81}, {0xc, 0x90, 0x4}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40}, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001340)={'wg1\x00'}) 678.361233ms ago: executing program 8 (id=4065): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f40)=""/4077, 0x26, 0xfed, 0x2}, 0x28) (fail_nth: 10) 191.427535ms ago: executing program 8 (id=4066): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0], 0x48}}, 0x0) 181.613845ms ago: executing program 4 (id=4067): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0xe}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbf7fffffffff, 0xffffffffffffffff, 0x1) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) request_key(0x0, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r2, 0x1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x200000, 0x200000, 0x7, 0x0, 0x4, 0x4}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x100000000000000, &(0x7f0000000280)={0x77359400}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 75.702007ms ago: executing program 2 (id=4068): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40110, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x401, 0x1000, 0x5, 0x8, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x0) epoll_create1(0x80000) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x114, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c95b59cc6bff610d5045633cca"}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0xf, 0x4, "1f0a7f1630e2c520dffcf9"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b978d16d94767806819399bfd1"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c051}, 0x8040) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x20904, 0x4) 0s ago: executing program 8 (id=4069): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf1d56d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x6000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.992461][ T28] audit: type=1400 audit(1786229836.559:10915): avc: denied { ioctl } for pid=16744 comm="syz.4.3419" path="socket:[52213]" dev="sockfs" ino=52213 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 259.019587][ T28] audit: type=1400 audit(1786229836.589:10916): avc: denied { getopt } for pid=16744 comm="syz.4.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.040444][ T28] audit: type=1400 audit(1786229836.599:10917): avc: denied { name_connect } for pid=16744 comm="syz.4.3419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 259.098409][T16751] loop2: detected capacity change from 0 to 512 [ 259.118495][T16751] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.3422: Unrecognised inode hash code 255 [ 259.133925][T16751] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3422: Corrupt directory, running e2fsck is recommended [ 259.138143][T16753] usb usb9: usbfs: process 16753 (syz.8.3420) did not claim interface 12 before use [ 259.159292][ T28] audit: type=1400 audit(1786229836.709:10918): avc: denied { write } for pid=16746 comm="syz.8.3420" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 259.168976][T16751] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 259.190425][T16751] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.3422: corrupted in-inode xattr: invalid ea_ino [ 259.204033][T16751] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.206400][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 259.222002][ C1] EXT4-fs (loop2): initial error at time 1786229836: ext4_iget_extra_inode:5180: inode 15 [ 259.231922][ C1] EXT4-fs (loop2): last error at time 1786229836: ext4_iget_extra_inode:5180: inode 15 [ 259.242205][T16751] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3422: couldn't read orphan inode 15 (err -117) [ 259.254659][T16751] loop2: lost filesystem error report for type 5 error -117 [ 259.261681][T16751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.346638][ T5932] usb usb6-port1: unable to enumerate USB device [ 259.368474][ T28] audit: type=1400 audit(1786229836.939:10919): avc: denied { create } for pid=16756 comm="syz.7.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 259.371417][T16757] loop7: detected capacity change from 0 to 512 [ 259.400388][T16757] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51489!=18645) [ 259.410084][T16757] EXT4-fs (loop7): group descriptors corrupted! [ 259.455491][T14973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.467153][ T5935] tipc: Node number set to 3554562694 [ 259.499368][ T28] audit: type=1400 audit(1786229837.059:10920): avc: denied { create } for pid=16759 comm="syz.7.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 259.530226][ T9991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.551966][T16768] loop4: detected capacity change from 0 to 512 [ 259.558387][ T28] audit: type=1400 audit(1786229837.099:10921): avc: denied { cpu } for pid=16761 comm="syz.2.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 259.579161][T16768] EXT4-fs: Ignoring removed i_version option [ 259.584670][T16767] loop8: detected capacity change from 0 to 4096 [ 259.599662][T16768] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.613348][T16767] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.634681][T16771] netlink: 'syz.9.3428': attribute type 5 has an invalid length. [ 259.643285][ T28] audit: type=1400 audit(1786229837.209:10922): avc: denied { unmount } for pid=9606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 259.670402][T16767] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #2: comm syz.8.3427: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 6(4), depth 0(0) [ 259.671022][T16768] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 259.702366][T16768] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.3429: Failed to acquire dquot type 1 [ 259.713626][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 259.713647][ C0] EXT4-fs (loop4): initial error at time 1786229837: ext4_mb_generate_buddy:1317 [ 259.713670][ C0] EXT4-fs (loop4): last error at time 1786229837: ext4_mb_generate_buddy:1317 [ 259.719300][T16767] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 259.738635][T16768] loop4: lost filesystem error report for type 5 error -28 [ 259.747677][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 259.747693][ C1] EXT4-fs (loop8): initial error at time 1786229837: ext4_ext_check_inode:521: inode 2 [ 259.747721][ C1] EXT4-fs (loop8): last error at time 1786229837: ext4_ext_check_inode:521: inode 2 [ 259.753042][T16777] bond2: option arp_all_targets: invalid value (131073) [ 259.755192][T16767] EXT4-fs (loop8): get root inode failed [ 259.768794][T16768] EXT4-fs (loop4): 1 truncate cleaned up [ 259.773240][T16767] EXT4-fs (loop8): mount failed [ 259.781495][T16768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.789691][T16777] bond2 (unregistering): Released all slaves [ 259.842552][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.871145][T16767] loop8: detected capacity change from 0 to 1024 [ 259.878159][T16767] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 259.891062][T16767] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #3: block 1: comm syz.8.3427: lblock 1 mapped to illegal pblock 1 (length 1) [ 259.912173][T16767] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 259.916229][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 259.931736][ C0] EXT4-fs (loop8): initial error at time 1786229837: ext4_map_blocks:833: inode 3: block 1 [ 259.941770][ C0] EXT4-fs (loop8): last error at time 1786229837: ext4_map_blocks:833: inode 3: block 1 [ 259.963581][T16767] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.3427: Failed to acquire dquot type 0 [ 259.976235][T16767] loop8: lost filesystem error report for type 5 error -117 [ 259.977343][T16767] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.3427: Freeing blocks not in datazone - block = 0, count = 4096 [ 260.002681][T16767] loop8: lost filesystem error report for type 5 error -117 [ 260.002872][T16767] EXT4-fs error (device loop8): ext4_read_inode_bitmap:141: comm syz.8.3427: Invalid inode bitmap blk 0 in block_group 0 [ 260.023119][T16767] loop8: lost filesystem error report for type 5 error -117 [ 260.031461][T16767] EXT4-fs error (device loop8) in ext4_free_inode:363: Corrupt filesystem [ 260.047371][T16767] loop8: lost filesystem error report for type 5 error -117 [ 260.047537][T16767] EXT4-fs (loop8): 1 orphan inode deleted [ 260.061453][T16767] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.076915][T16767] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz.8.3427: Invalid inode table block 18446744069414584321 in block_group 0 [ 260.091396][T16767] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 260.177219][ T9441] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.197397][ T9441] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.280511][ T9441] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.291054][ T9441] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.339654][T16801] loop4: detected capacity change from 0 to 512 [ 260.348927][ T9441] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.359374][ T9441] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.374666][T16801] EXT4-fs: Ignoring removed nobh option [ 260.407560][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.444914][ T9441] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.474266][ T9441] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.485554][T16801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.506646][T16801] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.511921][T16802] syzkaller0 speed is unknown, defaulting to 1000 [ 260.545640][T16801] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.3438: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 260.590599][T16801] xt_hashlimit: max too large, truncated to 1048576 [ 260.600245][T16801] xt_hashlimit: size too large, truncated to 1048576 [ 260.623350][T16801] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 260.745879][ T3411] IPVS: starting estimator thread 0... [ 260.837034][T16822] IPVS: using max 2400 ests per chain, 120000 per kthread [ 260.848814][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.880965][ T9441] bond0 (unregistering): Released all slaves [ 260.899629][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.918529][T16824] Unsupported ieee802154 address type: 0 [ 260.926355][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.940251][ T9441] IPVS: stopping master sync thread 12365 ... [ 261.019195][ T9441] hsr_slave_0: left promiscuous mode [ 261.025334][T16824] EXT4-fs (loop8): invalid inodes per group: 4294967295 [ 261.025334][T16824] [ 261.034581][ T9441] hsr_slave_1: left promiscuous mode [ 261.052849][ T9441] veth1_macvtap: left promiscuous mode [ 261.064974][ T9441] veth0_macvtap: left promiscuous mode [ 261.070795][ T9441] veth1_vlan: left promiscuous mode [ 261.076227][ T9441] veth0_vlan: left promiscuous mode [ 261.260203][ T9452] smc: removing ib device syz1 [ 261.280302][T16802] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.288896][T16802] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.307637][T16802] bridge_slave_0: entered allmulticast mode [ 261.314308][T16802] bridge_slave_0: entered promiscuous mode [ 261.321092][T16802] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.343394][T16802] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.362220][T16802] bridge_slave_1: entered allmulticast mode [ 261.368885][T16802] bridge_slave_1: entered promiscuous mode [ 261.387310][ T3411] syz1: Port: 1 Link DOWN [ 261.387789][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 261.458854][T16802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.566229][T16802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.614373][T16849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.639449][T16802] team0: Port device team_slave_0 added [ 261.643187][T16849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.707054][T16802] team0: Port device team_slave_1 added [ 261.724569][T16802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.740262][T16802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.788900][T16802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.803760][ T9441] IPVS: stop unused estimator thread 0... [ 261.810328][T16802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.818093][T16802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.847390][T16802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.858584][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 261.898661][T16802] hsr_slave_0: entered promiscuous mode [ 261.904682][T16802] hsr_slave_1: entered promiscuous mode [ 261.919439][T16802] debugfs: 'hsr0' already exists in 'hsr' [ 261.931101][T16802] Cannot create hsr debugfs directory [ 262.026713][ T5932] usb usb6-port1: attempt power cycle [ 262.050959][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 262.171840][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 262.412821][T16947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3454'. [ 262.460468][T16951] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.478574][T16951] EXT4-fs (loop9): warning: maximal mount count reached, running e2fsck is recommended [ 262.511080][T16951] EXT4-fs error (device loop9): ext4_orphan_get:1399: comm syz.9.3455: inode #15: comm syz.9.3455: iget: illegal inode # [ 262.523792][T16951] loop9: lost filesystem error report for type 5 error -117 [ 262.534651][T16968] FAULT_INJECTION: forcing a failure. [ 262.534651][T16968] name failslab, interval 1, probability 0, space 0, times 0 [ 262.535770][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 262.541965][T16968] CPU: 0 UID: 0 PID: 16968 Comm: syz.8.3458 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 262.541992][T16968] Tainted: [W]=WARN [ 262.541999][T16968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.542009][T16968] Call Trace: [ 262.542015][T16968] [ 262.542023][T16968] __dump_stack+0x1d/0x30 [ 262.542077][T16968] dump_stack_lvl+0x95/0xd0 [ 262.542096][T16968] dump_stack+0x15/0x1b [ 262.542113][T16968] should_fail_ex+0x25e/0x270 [ 262.542161][T16968] should_failslab+0x8c/0xb0 [ 262.542225][T16968] __kmalloc_noprof+0xd4/0x4a0 [ 262.542279][T16968] ? usb_alloc_urb+0x42/0xc0 [ 262.542300][T16968] ? usb_alloc_urb+0x42/0xc0 [ 262.542322][T16968] usb_alloc_urb+0x42/0xc0 [ 262.542343][T16968] do_proc_control+0x191/0x850 [ 262.542420][T16968] ? ioctl_has_perm+0x273/0x2c0 [ 262.542438][T16968] ? should_fail_ex+0xd9/0x270 [ 262.542541][T16968] proc_control_compat+0xb9/0xe0 [ 262.542563][T16968] usbdev_ioctl+0xe57/0x16a0 [ 262.542596][T16968] ? __pfx_usbdev_ioctl+0x10/0x10 [ 262.542615][T16968] __se_sys_ioctl+0xce/0x140 [ 262.542697][T16968] __x64_sys_ioctl+0x43/0x50 [ 262.542713][T16968] x64_sys_call+0x1563/0x3020 [ 262.542803][T16968] do_syscall_64+0x136/0x3c0 [ 262.542856][T16968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.542882][T16968] RIP: 0033:0x7f1fb24ae0d9 [ 262.542962][T16968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.543002][T16968] RSP: 002b:00007f1fb0f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.543021][T16968] RAX: ffffffffffffffda RBX: 00007f1fb2735fa0 RCX: 00007f1fb24ae0d9 [ 262.543035][T16968] RDX: 00002000000001c0 RSI: 00000000c0105500 RDI: 000000000000000c [ 262.543048][T16968] RBP: 00007f1fb0f07090 R08: 0000000000000000 R09: 0000000000000000 [ 262.543089][T16968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.543101][T16968] R13: 00007f1fb2736038 R14: 00007f1fb2735fa0 R15: 00007ffeeb7b6688 [ 262.543119][T16968] [ 262.596332][T16951] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3455: couldn't read orphan inode 15 (err -117) [ 262.600738][ C1] EXT4-fs (loop9): initial error at time 1786229840: ext4_orphan_get:1399 [ 262.604858][T16951] loop9: lost filesystem error report for type 5 error -117 [ 262.609526][ C1] [ 262.614749][T16951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.618845][ C1] EXT4-fs (loop9): last error at time 1786229840: ext4_orphan_get:1404 [ 262.814031][ T9991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.862916][T16976] EXT4-fs: Ignoring removed bh option [ 262.879085][T16976] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.896393][T16976] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 262.905317][T16976] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 262.917621][T16976] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 262.944641][T16976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.964452][T16802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.972234][T16976] FAULT_INJECTION: forcing a failure. [ 262.972234][T16976] name failslab, interval 1, probability 0, space 0, times 0 [ 262.974464][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.992885][T16802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.999946][T16976] CPU: 1 UID: 0 PID: 16976 Comm: syz.4.3461 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 262.999976][T16976] Tainted: [W]=WARN [ 262.999983][T16976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.999995][T16976] Call Trace: [ 263.000001][T16976] [ 263.000007][T16976] __dump_stack+0x1d/0x30 [ 263.000032][T16976] dump_stack_lvl+0x95/0xd0 [ 263.000048][T16976] dump_stack+0x15/0x1b [ 263.000066][T16976] should_fail_ex+0x25e/0x270 [ 263.000093][T16976] should_failslab+0x8c/0xb0 [ 263.000164][T16976] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 263.000186][T16976] ? alloc_empty_file+0x70/0x1e0 [ 263.000227][T16976] ? alloc_empty_file+0x70/0x1e0 [ 263.000268][T16976] alloc_empty_file+0x70/0x1e0 [ 263.000322][T16976] path_openat+0x54/0x2000 [ 263.000356][T16976] ? _parse_integer+0x27/0x40 [ 263.000439][T16976] ? kstrtoull+0x111/0x140 [ 263.000535][T16976] ? kstrtouint+0x76/0xc0 [ 263.000558][T16976] do_file_open+0x16c/0x290 [ 263.000591][T16976] do_sys_openat2+0xa0/0x130 [ 263.000638][T16976] __x64_sys_openat+0xf2/0x120 [ 263.000660][T16976] x64_sys_call+0x1e39/0x3020 [ 263.000750][T16976] do_syscall_64+0x136/0x3c0 [ 263.000773][T16976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.000867][T16976] RIP: 0033:0x7f38b2c2e0d9 [ 263.000881][T16976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.000965][T16976] RSP: 002b:00007f38b1687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.000985][T16976] RAX: ffffffffffffffda RBX: 00007f38b2eb5fa0 RCX: 00007f38b2c2e0d9 [ 263.001000][T16976] RDX: 00000000000026e1 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 263.001014][T16976] RBP: 00007f38b1687090 R08: 0000000000000000 R09: 0000000000000000 [ 263.001027][T16976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.001039][T16976] R13: 00007f38b2eb6038 R14: 00007f38b2eb5fa0 R15: 00007ffc141445c8 [ 263.001166][T16976] [ 263.240486][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.253977][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.273711][T16802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.352966][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.368979][T16802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.393207][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.429592][T17028] 9pnet_fd: Insufficient options for proto=fd [ 263.441700][T17016] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3466'. [ 263.479345][T17016] EXT4-fs: Ignoring removed bh option [ 263.507162][T16802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.515295][T17040] tmpfs: Bad value for 'size' [ 263.522091][T17016] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.540566][T16802] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.547708][T17016] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 263.552964][T17040] set_capacity_and_notify: 4 callbacks suppressed [ 263.552977][T17040] loop8: detected capacity change from 0 to 1024 [ 263.559232][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.564577][T17016] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 263.568793][ T9457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.586475][T17016] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 263.600370][T17016] System zones: 0-2, 18-18, 34-35 [ 263.606050][T17016] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.618170][T17040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.626793][T17016] program syz.9.3466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.636885][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.646496][ T9452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.663040][T17040] netlink: 'syz.8.3470': attribute type 1 has an invalid length. [ 263.680234][ T9991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.713306][T17040] bond1: entered promiscuous mode [ 263.719182][T17040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.731747][T17040] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3470'. [ 263.740931][T17040] bond1: entered allmulticast mode [ 263.763592][T17040] bond1: (slave bridge1): making interface the new active one [ 263.772980][T17040] bridge1: entered promiscuous mode [ 263.778479][T17040] bridge1: entered allmulticast mode [ 263.785352][T17040] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 263.840236][T17076] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3471'. [ 263.864922][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.909327][T16802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.920760][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 263.920772][ T28] audit: type=1400 audit(1786229841.490:10967): avc: denied { write } for pid=17083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.962965][ T28] audit: type=1400 audit(1786229841.530:10968): avc: denied { write } for pid=17098 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.019054][T17097] netlink: 'syz.8.3472': attribute type 5 has an invalid length. [ 264.058348][T16802] veth0_vlan: entered promiscuous mode [ 264.070375][T16802] veth1_vlan: entered promiscuous mode [ 264.106949][T16802] veth0_macvtap: entered promiscuous mode [ 264.122368][ T28] audit: type=1326 audit(1786229841.690:10969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.8.3474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 264.122701][T16802] veth1_macvtap: entered promiscuous mode [ 264.165849][ T28] audit: type=1326 audit(1786229841.690:10970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.8.3474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 264.165981][T16802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.191998][ T28] audit: type=1326 audit(1786229841.690:10971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.8.3474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 264.226234][T16802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.234286][ T28] audit: type=1326 audit(1786229841.690:10972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.8.3474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 264.264340][ T28] audit: type=1326 audit(1786229841.720:10973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.8.3474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 264.290291][ T28] audit: type=1326 audit(1786229841.720:10974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.8.3474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 264.316426][ T28] audit: type=1326 audit(1786229841.720:10975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.8.3474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 264.356054][ T5932] usb usb6-port1: unable to enumerate USB device [ 264.357021][ T9441] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.377719][ T28] audit: type=1326 audit(1786229841.720:10976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.8.3474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 264.410013][ T9441] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.435961][ T9452] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.460346][ T9452] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.641636][T17160] veth0_macvtap: left promiscuous mode [ 264.671645][T17166] devpts: Unknown parameter 'u' [ 264.939610][T17209] netlink: 'syz.1.3491': attribute type 5 has an invalid length. [ 264.944566][T17204] netlink: 10 bytes leftover after parsing attributes in process `syz.8.3488'. [ 265.171558][T17240] netlink: 'syz.9.3497': attribute type 15 has an invalid length. [ 265.225906][T17242] loop8: detected capacity change from 0 to 512 [ 265.228434][T17248] loop9: detected capacity change from 0 to 512 [ 265.255834][T17248] EXT4-fs: Invalid want_extra_isize 1969 [ 265.350775][T17242] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 265.360056][T17242] EXT4-fs (loop8): orphan cleanup on readonly fs [ 265.374973][T17242] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.3498: Failed to acquire dquot type 1 [ 265.395505][T17242] loop8: lost filesystem error report for type 5 error -5 [ 265.397499][T17242] EXT4-fs (loop8): Remounting filesystem read-only [ 265.411578][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 265.411608][ C1] EXT4-fs (loop8): initial error at time 1786229842: ext4_acquire_dquot:7041 [ 265.411779][ C1] EXT4-fs (loop8): last error at time 1786229842: ext4_acquire_dquot:7041 [ 265.445899][T17242] EXT4-fs (loop8): 1 truncate cleaned up [ 265.506205][T17242] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.526614][T17242] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=16 [ 265.536404][T17242] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=16 [ 265.617406][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.709437][T17288] netlink: 'syz.8.3502': attribute type 5 has an invalid length. [ 265.804588][T17302] loop8: detected capacity change from 0 to 512 [ 265.826496][T17302] EXT4-fs: Ignoring removed bh option [ 265.846074][T17302] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.861357][T17302] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 265.874451][T17302] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 265.889274][T17302] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 265.903691][T17302] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.934218][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.987928][T17317] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3508'. [ 266.034547][T17317] loop1: detected capacity change from 0 to 512 [ 266.136323][T17330] syzkaller0: entered promiscuous mode [ 266.146442][T17331] loop8: detected capacity change from 0 to 512 [ 266.152978][T17331] EXT4-fs: Ignoring removed nobh option [ 266.158818][T17330] syzkaller0: entered allmulticast mode [ 266.198656][ T3022] veth0_macvtap: entered promiscuous mode [ 266.243060][T17338] loop9: detected capacity change from 0 to 1024 [ 266.244931][T17331] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.257345][T17338] EXT4-fs: Ignoring removed bh option [ 266.261845][T17331] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.302282][T17331] xt_hashlimit: max too large, truncated to 1048576 [ 266.311863][T17331] xt_hashlimit: size too large, truncated to 1048576 [ 266.319081][T17331] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 266.360080][T17338] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 266.379084][T17338] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 266.395154][T17338] System zones: 0-1, 3-12 [ 266.411460][T17338] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #3: block 1: comm syz.9.3512: lblock 1 mapped to illegal pblock 1 (length 1) [ 266.438013][T17338] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 266.438470][T17338] EXT4-fs (loop9): Remounting filesystem read-only [ 266.447681][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 266.447743][ C0] EXT4-fs (loop9): initial error at time 1786229844: ext4_map_blocks:833: inode 3: block 1 [ 266.447851][ C0] EXT4-fs (loop9): last error at time 1786229844: ext4_map_blocks:833: inode 3: block 1 [ 266.528733][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.539190][T17338] EXT4-fs (loop9): 1 orphan inode deleted [ 266.583241][T17357] FAULT_INJECTION: forcing a failure. [ 266.583241][T17357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.596333][T17357] CPU: 0 UID: 0 PID: 17357 Comm: syz.8.3514 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 266.596410][T17357] Tainted: [W]=WARN [ 266.596416][T17357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.596428][T17357] Call Trace: [ 266.596435][T17357] [ 266.596443][T17357] __dump_stack+0x1d/0x30 [ 266.596465][T17357] dump_stack_lvl+0x95/0xd0 [ 266.596546][T17357] dump_stack+0x15/0x1b [ 266.596564][T17357] should_fail_ex+0x25e/0x270 [ 266.596587][T17357] should_fail+0xb/0x20 [ 266.596618][T17357] should_fail_usercopy+0x1a/0x20 [ 266.596640][T17357] _copy_to_user+0x20/0xa0 [ 266.596659][T17357] simple_read_from_buffer+0xb5/0x130 [ 266.596727][T17357] proc_fail_nth_read+0x10e/0x150 [ 266.596749][T17357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.596769][T17357] vfs_read+0x18e/0x7c0 [ 266.596844][T17357] ? __rcu_read_unlock+0x4e/0x70 [ 266.596890][T17357] ? __fget_files+0x184/0x1c0 [ 266.596913][T17357] ? mutex_lock+0x57/0x90 [ 266.596935][T17357] ksys_read+0xdc/0x1a0 [ 266.596974][T17357] __x64_sys_read+0x40/0x50 [ 266.596993][T17357] x64_sys_call+0x2886/0x3020 [ 266.597016][T17357] do_syscall_64+0x136/0x3c0 [ 266.597043][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.597129][T17357] RIP: 0033:0x7f1fb246e90e [ 266.597143][T17357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.597239][T17357] RSP: 002b:00007f1fb0f06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.597258][T17357] RAX: ffffffffffffffda RBX: 00007f1fb0f076c0 RCX: 00007f1fb246e90e [ 266.597351][T17357] RDX: 000000000000000f RSI: 00007f1fb0f070a0 RDI: 0000000000000004 [ 266.597410][T17357] RBP: 00007f1fb0f07090 R08: 0000000000000000 R09: 0000000000000000 [ 266.597423][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.597436][T17357] R13: 00007f1fb2736038 R14: 00007f1fb2735fa0 R15: 00007ffeeb7b6688 [ 266.597453][T17357] [ 266.597884][T17338] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.863745][ T3398] usb usb6-port1: attempt power cycle [ 266.872788][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 266.939069][ T9991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.071648][T17370] netlink: 'syz.8.3515': attribute type 5 has an invalid length. [ 267.081681][T17372] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 268.979788][T17385] loop1: detected capacity change from 0 to 128 [ 269.021350][T17390] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 269.021434][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 269.021521][ T28] audit: type=1400 audit(1786229846.591:11067): avc: denied { load_policy } for pid=17389 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 269.032039][T17390] SELinux: failed to load policy [ 269.085716][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3519'. [ 269.096614][T17391] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 269.104314][T17391] SELinux: failed to load policy [ 269.115383][T17394] loop8: detected capacity change from 0 to 512 [ 269.122108][T17394] EXT4-fs: Ignoring removed nobh option [ 269.191755][T17394] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.204238][T17394] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.214288][T17390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3521'. [ 269.224486][T17391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3521'. [ 269.238738][T17394] xt_hashlimit: max too large, truncated to 1048576 [ 269.245918][T17394] xt_hashlimit: size too large, truncated to 1048576 [ 269.252616][T17394] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 269.285334][T17398] loop1: detected capacity change from 0 to 512 [ 269.293975][ T28] audit: type=1400 audit(1786229846.801:11068): avc: denied { mounton } for pid=17397 comm="syz.1.3523" path="/15/file0" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 269.331182][ T3398] usb usb6-port1: unable to enumerate USB device [ 269.365509][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.499141][ T28] audit: type=1400 audit(1786229846.971:11069): avc: denied { setopt } for pid=17401 comm="syz.2.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 269.524541][T17400] syzkaller0 speed is unknown, defaulting to 1000 [ 269.574884][ T28] audit: type=1400 audit(1786229847.131:11070): avc: denied { map } for pid=17399 comm="syz.1.3524" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.627312][ T28] audit: type=1400 audit(1786229847.131:11071): avc: denied { read } for pid=17399 comm="syz.1.3524" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.749535][ T28] audit: type=1400 audit(1786229847.231:11072): avc: denied { ioctl } for pid=17401 comm="syz.2.3526" path="socket:[54447]" dev="sockfs" ino=54447 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 269.783796][T17402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3526'. [ 269.889276][ T28] audit: type=1400 audit(1786229847.461:11073): avc: denied { bind } for pid=17401 comm="syz.2.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 270.018641][ T28] audit: type=1400 audit(1786229847.461:11074): avc: denied { name_bind } for pid=17401 comm="syz.2.3526" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 270.039734][ T28] audit: type=1400 audit(1786229847.461:11075): avc: denied { node_bind } for pid=17401 comm="syz.2.3526" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 270.507180][T17422] netlink: 'syz.4.3531': attribute type 5 has an invalid length. [ 271.067068][ T28] audit: type=1400 audit(1786229848.641:11076): avc: denied { write } for pid=17423 comm="syz.8.3533" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 271.130961][T17424] unsupported nlmsg_type 40 [ 271.562213][T17426] loop2: detected capacity change from 0 to 8192 [ 271.704838][T17439] loop1: detected capacity change from 0 to 1024 [ 271.711762][T17439] EXT4-fs: inline encryption not supported [ 271.718472][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3541'. [ 271.820863][T17451] loop8: detected capacity change from 0 to 512 [ 271.832968][T17439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 271.845098][T17439] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.860173][T17439] netlink: 'syz.1.3538': attribute type 4 has an invalid length. [ 271.876925][T17439] netlink: 'syz.1.3538': attribute type 4 has an invalid length. [ 271.918988][ T830] usb usb6-port1: attempt power cycle [ 271.949805][T16802] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /17/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 271.991828][T17458] loop4: detected capacity change from 0 to 512 [ 272.000527][T17458] EXT4-fs: Ignoring removed nobh option [ 272.006914][T16802] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /17/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 272.030718][T16802] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 272.051127][T16802] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /17/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 272.073122][T16802] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 272.097617][T17451] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.109839][T16802] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /17/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 272.110122][T17451] ext4 filesystem being mounted at /72/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.183897][T17451] syzkaller0: entered promiscuous mode [ 272.189380][T17451] syzkaller0: entered allmulticast mode [ 272.197599][T16802] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 272.250520][T16802] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /17/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 272.274982][T17458] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.286506][T17451] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3542'. [ 272.298850][T16802] EXT4-fs error (device loop1): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 272.320551][T16802] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /17/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 272.416466][T17464] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.3545: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 272.880208][T17478] netlink: 'syz.8.3552': attribute type 4 has an invalid length. [ 272.888294][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3552'. [ 274.362427][T17498] loop8: detected capacity change from 0 to 512 [ 274.394523][T17498] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 274.487051][T17501] loop4: detected capacity change from 0 to 1024 [ 274.494130][T17501] EXT4-fs: inline encryption not supported [ 274.495440][T17498] EXT4-fs (loop8): 1 truncate cleaned up [ 274.570157][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 274.570175][ T28] audit: type=1400 audit(1786229852.141:11194): avc: denied { write } for pid=17496 comm="syz.8.3556" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.606899][ T28] audit: type=1400 audit(1786229852.181:11195): avc: denied { write } for pid=17496 comm="syz.8.3556" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.638469][T17501] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.653582][ T28] audit: type=1400 audit(1786229852.201:11196): avc: denied { write } for pid=17496 comm="syz.8.3556" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.691780][T17497] netlink: 'syz.4.3555': attribute type 4 has an invalid length. [ 274.708629][ T28] audit: type=1400 audit(1786229852.211:11197): avc: denied { write } for pid=17496 comm="syz.8.3556" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.722610][ T9444] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.731952][ T28] audit: type=1400 audit(1786229852.211:11198): avc: denied { write } for pid=17496 comm="syz.8.3556" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.765046][ T28] audit: type=1400 audit(1786229852.281:11199): avc: denied { map } for pid=17496 comm="syz.8.3556" path="/77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 274.819810][ T28] audit: type=1400 audit(1786229852.281:11200): avc: denied { write } for pid=17496 comm="syz.8.3556" path="/77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 274.944403][ T9444] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.973130][ T28] audit: type=1400 audit(1786229852.541:11201): avc: denied { write } for pid=17491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.075772][ T9444] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.115316][ T830] usb usb6-port1: unable to enumerate USB device [ 275.159835][ T28] audit: type=1400 audit(1786229852.731:11202): avc: denied { write } for pid=17519 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.217551][ T9444] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.242362][T17530] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3565'. [ 275.295656][T17530] loop4: detected capacity change from 0 to 1024 [ 275.373847][T17530] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 275.382090][T17530] System zones: 0-1, 3-36 [ 275.411445][ T28] audit: type=1400 audit(1786229852.942:11203): avc: denied { shutdown } for pid=17529 comm="syz.4.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 275.920199][ T9444] bridge_slave_1: left allmulticast mode [ 275.933655][T17562] loop4: detected capacity change from 0 to 512 [ 275.935289][ T9444] bridge_slave_1: left promiscuous mode [ 275.940523][T17562] ext2: Unknown parameter 'mask' [ 275.959650][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.036480][T17567] netlink: 'syz.9.3573': attribute type 4 has an invalid length. [ 276.079537][ T9444] bridge_slave_0: left allmulticast mode [ 276.085199][ T9444] bridge_slave_0: left promiscuous mode [ 276.090900][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.224194][ T9444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.248861][ T9444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.262872][ T9444] bond0 (unregistering): Released all slaves [ 276.289379][T17531] syzkaller0 speed is unknown, defaulting to 1000 [ 276.381453][T17578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=17578 comm=syz.9.3576 [ 276.585967][ T9444] hsr_slave_0: left promiscuous mode [ 276.602753][ T9444] hsr_slave_1: left promiscuous mode [ 276.630776][ T9444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.656757][ T9444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.677773][ T9444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.689590][ T9444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.731978][ T9444] veth1_macvtap: left promiscuous mode [ 276.748680][ T9444] veth1_vlan: left promiscuous mode [ 276.769990][ T9444] veth0_vlan: left promiscuous mode [ 276.785519][T17604] program syz.8.3582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.795776][T17604] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 276.867160][T17606] loop8: detected capacity change from 0 to 512 [ 276.924956][T17575] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 276.946234][ T9444] team0 (unregistering): Port device team_slave_1 removed [ 276.963197][ T9444] team0 (unregistering): Port device team_slave_0 removed [ 277.317958][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 277.319198][T17615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.336085][T17615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.451334][ T3411] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 277.462799][ T3411] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 277.512106][ T3411] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 277.547809][ T3411] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 277.608535][ T3411] rtc rtc0: __rtc_set_alarm: err=-22 [ 278.223648][T17531] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.249707][T17531] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.279133][T17531] bridge_slave_0: entered allmulticast mode [ 278.307483][T17531] bridge_slave_0: entered promiscuous mode [ 278.332994][T17531] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.346224][T17531] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.364794][T17531] bridge_slave_1: entered allmulticast mode [ 278.389582][T17531] bridge_slave_1: entered promiscuous mode [ 278.471212][T15624] EXT4-fs unmount: 11 callbacks suppressed [ 278.471231][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.553451][T17531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.590842][T17531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.678891][T17531] team0: Port device team_slave_0 added [ 278.707284][T17661] loop9: detected capacity change from 0 to 2048 [ 278.716214][T17531] team0: Port device team_slave_1 added [ 278.764258][T17661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.796195][T17661] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.810609][T17531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.840189][T17531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.866900][T17531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.883144][T17531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.896938][T17531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.924144][T17531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.008509][T17531] hsr_slave_0: entered promiscuous mode [ 279.016687][T17531] hsr_slave_1: entered promiscuous mode [ 279.023374][T17531] debugfs: 'hsr0' already exists in 'hsr' [ 279.029724][T17531] Cannot create hsr debugfs directory [ 279.079895][ T9991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.368284][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 279.668005][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 279.668023][ T28] audit: type=1400 audit(1786229857.232:11263): avc: denied { write } for pid=17692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.701976][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3602'. [ 279.840212][ T28] audit: type=1400 audit(1786229857.392:11264): avc: denied { write } for pid=17715 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.864958][T17531] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.883086][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.901780][T17531] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.926128][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.935796][T17531] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.962236][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.978843][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 280.005123][T17531] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.027156][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.217982][T17531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.264901][T17531] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.296613][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.303825][ T9452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.329276][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.336435][ T9454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.414637][ T28] audit: type=1400 audit(1786229857.982:11265): avc: denied { write } for pid=17725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.544312][ T28] audit: type=1400 audit(1786229858.102:11266): avc: denied { write } for pid=17741 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.624942][ T5935] usb usb6-port1: attempt power cycle [ 280.930273][T17531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.159121][ T28] audit: type=1400 audit(1786229858.722:11267): avc: denied { write } for pid=17752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.299739][T17531] veth0_vlan: entered promiscuous mode [ 281.336777][ T28] audit: type=1400 audit(1786229858.902:11268): avc: denied { write } for pid=17776 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.339665][T17531] veth1_vlan: entered promiscuous mode [ 281.432473][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 281.476330][T17531] veth0_macvtap: entered promiscuous mode [ 281.497579][T17531] veth1_macvtap: entered promiscuous mode [ 281.523364][T17531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.555638][T17531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.614271][ T9454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.629172][ T9454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.731862][ T28] audit: type=1400 audit(1786229859.272:11269): avc: denied { write } for pid=17782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.756478][ T9454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.778294][ T9457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.821918][ T28] audit: type=1400 audit(1786229859.382:11270): avc: denied { write } for pid=17800 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.000001][ T28] audit: type=1400 audit(1786229859.562:11271): avc: denied { mount } for pid=17813 comm="syz.3.3613" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 282.029390][T17816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 282.247864][T17837] loop3: detected capacity change from 0 to 512 [ 282.540883][ T5935] usb usb6-port1: unable to enumerate USB device [ 283.032898][T17877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3623'. [ 283.389078][T17912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.404265][T17912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.426557][T17917] FAULT_INJECTION: forcing a failure. [ 283.426557][T17917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.440714][T17917] CPU: 1 UID: 0 PID: 17917 Comm: syz.4.3636 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 283.440744][T17917] Tainted: [W]=WARN [ 283.440751][T17917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.440821][T17917] Call Trace: [ 283.440828][T17917] [ 283.440884][T17917] __dump_stack+0x1d/0x30 [ 283.440907][T17917] dump_stack_lvl+0x95/0xd0 [ 283.440926][T17917] dump_stack+0x15/0x1b [ 283.440944][T17917] should_fail_ex+0x25e/0x270 [ 283.440994][T17917] should_fail+0xb/0x20 [ 283.441019][T17917] should_fail_usercopy+0x1a/0x20 [ 283.441058][T17917] _copy_to_user+0x20/0xa0 [ 283.441146][T17917] simple_read_from_buffer+0xb5/0x130 [ 283.441172][T17917] proc_fail_nth_read+0x10e/0x150 [ 283.441250][T17917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.441274][T17917] vfs_read+0x18e/0x7c0 [ 283.441368][T17917] ? __rcu_read_unlock+0x4e/0x70 [ 283.441395][T17917] ? __fget_files+0x184/0x1c0 [ 283.441424][T17917] ? mutex_lock+0x57/0x90 [ 283.441448][T17917] ksys_read+0xdc/0x1a0 [ 283.441466][T17917] __x64_sys_read+0x40/0x50 [ 283.441559][T17917] x64_sys_call+0x2886/0x3020 [ 283.441584][T17917] do_syscall_64+0x136/0x3c0 [ 283.441614][T17917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.441671][T17917] RIP: 0033:0x7f38b2bee90e [ 283.441692][T17917] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 283.441717][T17917] RSP: 002b:00007f38b1686fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.441737][T17917] RAX: ffffffffffffffda RBX: 00007f38b16876c0 RCX: 00007f38b2bee90e [ 283.441754][T17917] RDX: 000000000000000f RSI: 00007f38b16870a0 RDI: 0000000000000004 [ 283.441830][T17917] RBP: 00007f38b1687090 R08: 0000000000000000 R09: 0000000000000000 [ 283.441846][T17917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.441870][T17917] R13: 00007f38b2eb6038 R14: 00007f38b2eb5fa0 R15: 00007ffc141445c8 [ 283.441891][T17917] [ 283.731707][T17925] program syz.4.3638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.016633][T17950] sctp: [Deprecated]: syz.3.3643 (pid 17950) Use of int in maxseg socket option. [ 284.016633][T17950] Use struct sctp_assoc_value instead [ 284.142447][T17964] tmpfs: Bad value for 'size' [ 284.157792][T17964] loop3: detected capacity change from 0 to 1024 [ 284.211183][T17964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.298599][T17976] loop2: detected capacity change from 0 to 1024 [ 284.341451][T17976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.522125][T14973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.552738][T17531] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.651583][T17987] netlink: 'syz.2.3649': attribute type 66 has an invalid length. [ 284.677919][ T28] kauditd_printk_skb: 200 callbacks suppressed [ 284.677954][ T28] audit: type=1400 audit(1786229862.242:11350): avc: denied { write } for pid=17980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.759258][ T28] audit: type=1400 audit(1786229862.322:11351): avc: denied { write } for pid=17998 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.045320][ T28] audit: type=1400 audit(1786229862.612:11352): avc: denied { write } for pid=18003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.122326][ T28] audit: type=1400 audit(1786229862.682:11353): avc: denied { write } for pid=18024 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.135622][T18026] FAULT_INJECTION: forcing a failure. [ 285.135622][T18026] name failslab, interval 1, probability 0, space 0, times 0 [ 285.158914][ T3376] usb usb6-port1: attempt power cycle [ 285.165439][T18026] CPU: 1 UID: 0 PID: 18026 Comm: syz.3.3658 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 285.165508][T18026] Tainted: [W]=WARN [ 285.165517][T18026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.165531][T18026] Call Trace: [ 285.165541][T18026] [ 285.165551][T18026] __dump_stack+0x1d/0x30 [ 285.165649][T18026] dump_stack_lvl+0x95/0xd0 [ 285.165668][T18026] dump_stack+0x15/0x1b [ 285.165684][T18026] should_fail_ex+0x25e/0x270 [ 285.165786][T18026] should_failslab+0x8c/0xb0 [ 285.165887][T18026] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 285.165912][T18026] ? skb_clone+0x151/0x1f0 [ 285.165931][T18026] ? skb_clone+0x151/0x1f0 [ 285.165999][T18026] skb_clone+0x151/0x1f0 [ 285.166019][T18026] __netlink_deliver_tap+0x2be/0x510 [ 285.166049][T18026] netlink_dump+0x803/0x870 [ 285.166146][T18026] __netlink_dump_start+0x435/0x520 [ 285.166214][T18026] nf_tables_getrule+0x137/0x6b0 [ 285.166305][T18026] ? trace_event_buffer_commit+0x174/0x590 [ 285.166329][T18026] ? __pfx_nf_tables_dump_rules_start+0x10/0x10 [ 285.166357][T18026] ? __pfx_nf_tables_dump_rules+0x10/0x10 [ 285.166375][T18026] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 285.166476][T18026] ? __pfx_nf_tables_getrule+0x10/0x10 [ 285.166503][T18026] nfnetlink_rcv_msg+0x3e5/0x5b0 [ 285.166533][T18026] netlink_rcv_skb+0x11e/0x220 [ 285.166606][T18026] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 285.166629][T18026] nfnetlink_rcv+0x15f/0x1740 [ 285.166724][T18026] ? trace_event_buffer_commit+0x174/0x590 [ 285.166748][T18026] ? trace_event_raw_event_net_dev_xmit+0x1af/0x230 [ 285.166783][T18026] ? dev_hard_start_xmit+0x34e/0x380 [ 285.166896][T18026] ? __dev_queue_xmit+0x1360/0x1e90 [ 285.166925][T18026] ? __dev_queue_xmit+0x151/0x1e90 [ 285.166989][T18026] ? ref_tracker_free+0x380/0x3f0 [ 285.167017][T18026] ? __netlink_deliver_tap+0x4e6/0x510 [ 285.167052][T18026] netlink_unicast+0x5a7/0x680 [ 285.167077][T18026] netlink_sendmsg+0x5be/0x6f0 [ 285.167141][T18026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.167167][T18026] ____sys_sendmsg+0x532/0x580 [ 285.167192][T18026] ___sys_sendmsg+0x195/0x1e0 [ 285.167279][T18026] __x64_sys_sendmsg+0xd4/0x160 [ 285.167332][T18026] x64_sys_call+0x194c/0x3020 [ 285.167393][T18026] do_syscall_64+0x136/0x3c0 [ 285.167481][T18026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.167502][T18026] RIP: 0033:0x7f69944fe0d9 [ 285.167520][T18026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.167587][T18026] RSP: 002b:00007f6992f57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.167612][T18026] RAX: ffffffffffffffda RBX: 00007f6994785fa0 RCX: 00007f69944fe0d9 [ 285.167629][T18026] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 285.167698][T18026] RBP: 00007f6992f57090 R08: 0000000000000000 R09: 0000000000000000 [ 285.167712][T18026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.167728][T18026] R13: 00007f6994786038 R14: 00007f6994785fa0 R15: 00007ffeda4bafc8 [ 285.167746][T18026] [ 285.519201][T18032] loop3: detected capacity change from 0 to 128 [ 285.527675][ T28] audit: type=1400 audit(1786229863.092:11354): avc: denied { getopt } for pid=18028 comm="syz.2.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 285.556451][T18029] loop2: detected capacity change from 0 to 128 [ 285.573557][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3659'. [ 285.614530][T18029] syzkaller0 speed is unknown, defaulting to 1000 [ 285.696161][T18037] netlink: 'syz.4.3661': attribute type 21 has an invalid length. [ 285.704176][T18037] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3661'. [ 285.714977][ T28] audit: type=1400 audit(1786229863.212:11355): avc: denied { setopt } for pid=18031 comm="syz.3.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 285.734701][ T28] audit: type=1400 audit(1786229863.262:11356): avc: denied { write } for pid=18031 comm="syz.3.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 285.754301][ T28] audit: type=1400 audit(1786229863.262:11357): avc: denied { write } for pid=18030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.781557][ T28] audit: type=1400 audit(1786229863.312:11358): avc: denied { getopt } for pid=18031 comm="syz.3.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 285.825460][ T28] audit: type=1400 audit(1786229863.372:11359): avc: denied { ioctl } for pid=18036 comm="syz.4.3661" path="socket:[56927]" dev="sockfs" ino=56927 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 286.113537][T18062] syzkaller0 speed is unknown, defaulting to 1000 [ 286.204153][T18073] syzkaller0 speed is unknown, defaulting to 1000 [ 286.375126][T18082] loop4: detected capacity change from 0 to 1024 [ 286.392283][T18082] EXT4-fs: inline encryption not supported [ 286.441699][T18082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 286.454986][T18082] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.537945][T18082] netlink: 'syz.4.3670': attribute type 4 has an invalid length. [ 286.554485][T18082] netlink: 'syz.4.3670': attribute type 4 has an invalid length. [ 286.651214][T18106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3672'. [ 286.651830][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 286.829406][T18116] loop4: detected capacity change from 0 to 1024 [ 286.841168][T18116] EXT4-fs: inline encryption not supported [ 286.880521][T18116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 286.924969][T18116] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.937721][ T9454] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.950966][T18120] loop2: detected capacity change from 0 to 1024 [ 286.972507][T18120] EXT4-fs: inline encryption not supported [ 286.993659][T18116] netlink: 'syz.4.3673': attribute type 4 has an invalid length. [ 287.029941][T18120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 287.064580][T18120] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.075385][T18116] netlink: 'syz.4.3673': attribute type 4 has an invalid length. [ 287.102617][ T9454] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.166799][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 287.180250][T14973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 287.201486][ T9454] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.264943][ T3376] usb usb6-port1: unable to enumerate USB device [ 287.283130][ T9454] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.381979][T18155] syzkaller0 speed is unknown, defaulting to 1000 [ 287.531854][T18136] syzkaller0 speed is unknown, defaulting to 1000 [ 287.653138][ T9454] bridge_slave_1: left allmulticast mode [ 287.658454][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'. [ 287.670671][ T9454] bridge_slave_1: left promiscuous mode [ 287.678422][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.711382][ T9454] bridge_slave_0: left allmulticast mode [ 287.718563][ T9454] bridge_slave_0: left promiscuous mode [ 287.725120][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.823566][ T9454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.837112][ T9454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.850030][ T9454] bond0 (unregistering): Released all slaves [ 287.885998][T18192] loop8: detected capacity change from 0 to 1024 [ 287.893204][T18192] EXT4-fs: inline encryption not supported [ 287.908205][T18192] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 287.925949][T18192] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.971288][ T9454] hsr_slave_0: left promiscuous mode [ 287.981710][ T9454] hsr_slave_1: left promiscuous mode [ 287.993558][ T9454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.995291][T18186] netlink: 'syz.8.3687': attribute type 4 has an invalid length. [ 288.002324][ T9454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.019867][ T9454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.027854][ T9454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.046110][T18192] netlink: 'syz.8.3687': attribute type 4 has an invalid length. [ 288.071641][ T9454] veth1_macvtap: left promiscuous mode [ 288.082987][ T9454] veth0_macvtap: left promiscuous mode [ 288.089546][ T9454] veth1_vlan: left promiscuous mode [ 288.099601][ T9454] veth0_vlan: left promiscuous mode [ 288.316312][ T9454] team0 (unregistering): Port device team_slave_1 removed [ 288.333238][ T9454] team0 (unregistering): Port device team_slave_0 removed [ 288.491899][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 288.526419][T18224] syzkaller0 speed is unknown, defaulting to 1000 [ 288.872646][T18136] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.883220][T18252] loop4: detected capacity change from 0 to 8192 [ 288.891515][T18136] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.912932][T18253] loop2: detected capacity change from 0 to 1024 [ 288.923891][T18136] bridge_slave_0: entered allmulticast mode [ 288.924221][T18253] EXT4-fs: inline encryption not supported [ 288.931469][T18136] bridge_slave_0: entered promiscuous mode [ 288.946501][T18252] loop4: p1 p2 p4 [ 288.947936][T18136] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.962903][T18136] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.971373][T18136] bridge_slave_1: entered allmulticast mode [ 288.973132][T18252] loop4: p4 start 167772160 is beyond EOD, truncated [ 288.995615][T18136] bridge_slave_1: entered promiscuous mode [ 289.041114][T18253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 289.070520][T18253] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.123161][T18245] netlink: 'syz.2.3697': attribute type 4 has an invalid length. [ 289.126748][T18136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.162162][T18252] bond2: entered promiscuous mode [ 289.177742][T18252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.184629][ T3398] usb usb6-port1: attempt power cycle [ 289.202672][T18136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.336187][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 289.343174][T18273] loop8: detected capacity change from 0 to 8192 [ 289.362869][T18252] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 289.388013][T18136] team0: Port device team_slave_0 added [ 289.411257][T14973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 289.429756][T18136] team0: Port device team_slave_1 added [ 289.532512][T18136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.540698][T18136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.578642][T18136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.603142][T18136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.615730][T18136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.691756][T18136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.809251][T18279] syzkaller0 speed is unknown, defaulting to 1000 [ 289.859230][T18136] hsr_slave_0: entered promiscuous mode [ 289.866623][T18136] hsr_slave_1: entered promiscuous mode [ 289.873298][T18136] debugfs: 'hsr0' already exists in 'hsr' [ 289.879024][T18136] Cannot create hsr debugfs directory [ 289.926909][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 289.926927][ T28] audit: type=1400 audit(1786229867.492:11428): avc: denied { write } for pid=18284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.060893][ T28] audit: type=1400 audit(1786229867.622:11429): avc: denied { write } for pid=18310 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.169073][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 290.403679][T18333] syzkaller0 speed is unknown, defaulting to 1000 [ 290.581594][T18352] loop8: detected capacity change from 0 to 128 [ 290.643813][ T28] audit: type=1400 audit(1786229868.162:11430): avc: denied { write } for pid=18334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.703954][ T28] audit: type=1400 audit(1786229868.162:11431): avc: denied { write } for pid=18357 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.734765][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 290.905962][T18371] syzkaller0 speed is unknown, defaulting to 1000 [ 290.990996][T18375] loop8: detected capacity change from 0 to 1024 [ 291.025597][T18136] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.033822][T18375] EXT4-fs: inline encryption not supported [ 291.046708][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.055954][T18136] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.066573][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.075244][T18136] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 291.085470][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.093498][T18136] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 291.119702][T18375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 291.133390][ T3398] usb usb6-port1: unable to enumerate USB device [ 291.141672][ T28] audit: type=1400 audit(1786229868.702:11432): avc: denied { write } for pid=18376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.154232][T18375] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.209610][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.220336][ T28] audit: type=1400 audit(1786229868.792:11433): avc: denied { write } for pid=18396 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.331191][T18375] netlink: 'syz.8.3736': attribute type 4 has an invalid length. [ 291.388772][T18409] loop4: detected capacity change from 0 to 1024 [ 291.395772][T18409] EXT4-fs: inline encryption not supported [ 291.400528][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 291.401609][T18409] EXT4-fs: Ignoring removed bh option [ 291.402632][T18409] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 291.451206][T18391] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 291.482339][T18409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.495768][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 291.544339][T18136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.564473][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.594002][ T28] audit: type=1400 audit(1786229869.152:11434): avc: denied { write } for pid=18408 comm="syz.4.3742" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.627468][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.634618][ T9457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.634709][ T28] audit: type=1400 audit(1786229869.162:11435): avc: denied { write } for pid=18408 comm="syz.4.3742" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 291.690825][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.732493][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.735631][ T28] audit: type=1400 audit(1786229869.162:11436): avc: denied { add_name } for pid=18408 comm="syz.4.3742" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 291.739678][ T9457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.878973][T18435] loop9: detected capacity change from 0 to 512 [ 291.900431][T18435] EXT4-fs: Ignoring removed nobh option [ 291.900497][T18440] syzkaller0 speed is unknown, defaulting to 1000 [ 291.950644][ T28] audit: type=1400 audit(1786229869.512:11437): avc: denied { write } for pid=18416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.043115][T18435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.057554][T18435] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.118218][T18435] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 3: comm syz.9.3749: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 292.580963][T18136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.712710][ T9991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.882578][T18136] veth0_vlan: entered promiscuous mode [ 292.924068][T18136] veth1_vlan: entered promiscuous mode [ 292.975242][T18519] syzkaller0 speed is unknown, defaulting to 1000 [ 293.048724][T18136] veth0_macvtap: entered promiscuous mode [ 293.091824][T18136] veth1_macvtap: entered promiscuous mode [ 293.130226][T18535] loop8: detected capacity change from 0 to 1024 [ 293.144904][T18535] EXT4-fs: inline encryption not supported [ 293.168955][T18136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.170866][T18535] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 293.224981][T18535] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.314437][T18545] loop9: detected capacity change from 0 to 512 [ 293.321516][T18545] EXT4-fs: Ignoring removed nobh option [ 293.327415][T18530] netlink: 'syz.8.3766': attribute type 4 has an invalid length. [ 293.369844][T18136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.409056][T18545] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.428837][T18545] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.450003][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 293.459376][ T9446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.480508][T18555] loop4: detected capacity change from 0 to 512 [ 293.487608][T18555] EXT4-fs: Ignoring removed nobh option [ 293.523611][T18545] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 3: comm syz.9.3767: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 293.548524][ T9457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.587696][ T9456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.597008][ T9446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.620956][T18555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.633517][T18555] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.729037][T18555] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.3770: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 293.748962][T18572] loop0: detected capacity change from 0 to 1024 [ 293.750058][ T9] usb usb6-port1: attempt power cycle [ 293.757650][T18572] EXT4-fs: inline encryption not supported [ 293.871085][T18580] RDS: rds_bind could not find a transport for ::ffff:172.20.20.50, load rds_tcp or rds_rdma? [ 293.873060][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.893656][T18572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 293.914232][T18572] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.978410][T18580] ipip0: entered promiscuous mode [ 294.006960][T18580] ipip0: entered allmulticast mode [ 294.022899][T18572] netlink: 'syz.0.3677': attribute type 4 has an invalid length. [ 294.077979][T18572] netlink: 'syz.0.3677': attribute type 4 has an invalid length. [ 294.159023][T18136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 294.181903][ T9991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.292067][T18602] loop9: detected capacity change from 0 to 512 [ 294.308648][T18602] EXT4-fs (loop9): orphan cleanup on readonly fs [ 294.315779][T18602] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3777: invalid indirect mapped block 11 (level 0) [ 294.329223][T18602] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 294.330119][T18602] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3777: attempt to clear invalid blocks 1024 len 1 [ 294.339340][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 294.339357][ C0] EXT4-fs (loop9): initial error at time 1786229871: ext4_free_branches:1023: inode 13 [ 294.339414][ C0] EXT4-fs (loop9): last error at time 1786229871: ext4_free_branches:1023: inode 13 [ 294.378455][T18602] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 294.380520][T18602] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 294.404646][T18602] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3777: invalid indirect mapped block 1819239214 (level 0) [ 294.419045][T18602] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 294.430427][T18602] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3777: invalid indirect mapped block 33554432 (level 2) [ 294.453788][T18602] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 294.456402][T18602] EXT4-fs (loop9): 1 truncate cleaned up [ 294.459183][T18607] syzkaller0 speed is unknown, defaulting to 1000 [ 294.466295][T18602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 294.569159][ T9991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.808925][T18623] IPv6: addrconf: prefix option has invalid lifetime [ 294.977448][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 294.977535][ T28] audit: type=1400 audit(1786229872.542:11496): avc: denied { write } for pid=18620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.032588][T18632] netlink: 'syz.0.3784': attribute type 4 has an invalid length. [ 295.074044][T18640] loop4: detected capacity change from 0 to 512 [ 295.080938][T18640] EXT4-fs: Ignoring removed nobh option [ 295.099209][T18643] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3788'. [ 295.109902][ T28] audit: type=1400 audit(1786229872.622:11497): avc: denied { write } for pid=18642 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.192245][ T28] audit: type=1400 audit(1786229872.682:11498): avc: denied { ioctl } for pid=18644 comm="syz.9.3789" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58353 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 295.218239][ T28] audit: type=1400 audit(1786229872.742:11499): avc: denied { map } for pid=18644 comm="syz.9.3789" path="socket:[58351]" dev="sockfs" ino=58351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 295.242183][ T28] audit: type=1400 audit(1786229872.742:11500): avc: denied { read } for pid=18644 comm="syz.9.3789" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 295.266339][ T28] audit: type=1400 audit(1786229872.742:11501): avc: denied { open } for pid=18644 comm="syz.9.3789" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 295.402523][T18662] loop8: detected capacity change from 0 to 1024 [ 295.414177][T18640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.426757][T18640] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.451999][ T28] audit: type=1400 audit(1786229872.962:11502): avc: denied { create } for pid=18654 comm="syz.0.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 295.486037][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 295.551192][ T28] audit: type=1400 audit(1786229873.082:11503): avc: denied { write } for pid=18653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.582695][ T28] audit: type=1400 audit(1786229873.082:11504): avc: denied { write } for pid=18678 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.635010][T18662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.660754][ T28] audit: type=1400 audit(1786229873.222:11505): avc: denied { write } for pid=18638 comm="syz.4.3787" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.682987][T18640] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.3787: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 295.742051][T18692] FAULT_INJECTION: forcing a failure. [ 295.742051][T18692] name failslab, interval 1, probability 0, space 0, times 0 [ 295.766063][ T9] usb usb6-port1: unable to enumerate USB device [ 295.772571][T18692] CPU: 1 UID: 0 PID: 18692 Comm: syz.9.3796 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 295.772629][T18692] Tainted: [W]=WARN [ 295.772639][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.772653][T18692] Call Trace: [ 295.772661][T18692] [ 295.772673][T18692] __dump_stack+0x1d/0x30 [ 295.772698][T18692] dump_stack_lvl+0x95/0xd0 [ 295.772781][T18692] dump_stack+0x15/0x1b [ 295.772797][T18692] should_fail_ex+0x25e/0x270 [ 295.772827][T18692] ? __pfx_iter_file_splice_write+0x10/0x10 [ 295.772849][T18692] should_failslab+0x8c/0xb0 [ 295.772873][T18692] __kmalloc_noprof+0xd4/0x4a0 [ 295.772973][T18692] ? iter_file_splice_write+0x105/0xa60 [ 295.772997][T18692] ? iter_file_splice_write+0x105/0xa60 [ 295.773074][T18692] ? __pfx_iter_file_splice_write+0x10/0x10 [ 295.773094][T18692] iter_file_splice_write+0x105/0xa60 [ 295.773180][T18692] ? __pfx_iter_file_splice_write+0x10/0x10 [ 295.773247][T18692] direct_splice_actor+0x156/0x280 [ 295.773272][T18692] ? __pfx_filemap_splice_read+0x10/0x10 [ 295.773357][T18692] splice_direct_to_actor+0x2f9/0x680 [ 295.773432][T18692] ? __pfx_direct_splice_actor+0x10/0x10 [ 295.773455][T18692] do_splice_direct+0x119/0x1a0 [ 295.773552][T18692] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 295.773576][T18692] do_sendfile+0x37d/0x640 [ 295.773655][T18692] __x64_sys_sendfile64+0x105/0x150 [ 295.773677][T18692] x64_sys_call+0x2dc4/0x3020 [ 295.773700][T18692] do_syscall_64+0x136/0x3c0 [ 295.773725][T18692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.773827][T18692] RIP: 0033:0x7f220fa2e0d9 [ 295.773891][T18692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.773907][T18692] RSP: 002b:00007f220e487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 295.773928][T18692] RAX: ffffffffffffffda RBX: 00007f220fcb5fa0 RCX: 00007f220fa2e0d9 [ 295.773942][T18692] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a [ 295.773953][T18692] RBP: 00007f220e487090 R08: 0000000000000000 R09: 0000000000000000 [ 295.774042][T18692] R10: 000000007fffffff R11: 0000000000000246 R12: 0000000000000001 [ 295.774056][T18692] R13: 00007f220fcb6038 R14: 00007f220fcb5fa0 R15: 00007ffda2760b68 [ 295.774087][T18692] [ 296.013335][T15624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.186021][T18712] netlink: 'syz.8.3803': attribute type 4 has an invalid length. [ 296.258279][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.400466][T18734] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3808'. [ 296.442531][T18737] netlink: 'syz.0.3810': attribute type 4 has an invalid length. [ 296.452745][T18736] netlink: 'syz.8.3809': attribute type 4 has an invalid length. [ 296.589068][T18747] FAULT_INJECTION: forcing a failure. [ 296.589068][T18747] name failslab, interval 1, probability 0, space 0, times 0 [ 296.614295][T18747] CPU: 0 UID: 0 PID: 18747 Comm: syz.8.3812 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 296.614378][T18747] Tainted: [W]=WARN [ 296.614386][T18747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.614458][T18747] Call Trace: [ 296.614468][T18747] [ 296.614477][T18747] __dump_stack+0x1d/0x30 [ 296.614499][T18747] dump_stack_lvl+0x95/0xd0 [ 296.614600][T18747] dump_stack+0x15/0x1b [ 296.614618][T18747] should_fail_ex+0x25e/0x270 [ 296.614665][T18747] should_failslab+0x8c/0xb0 [ 296.614684][T18747] __kmalloc_noprof+0xd4/0x4a0 [ 296.614705][T18747] ? set_mcast_msfilter+0x3c/0x180 [ 296.614791][T18747] ? set_mcast_msfilter+0x3c/0x180 [ 296.614818][T18747] set_mcast_msfilter+0x3c/0x180 [ 296.614917][T18747] ip_set_mcast_msfilter+0x239/0x280 [ 296.615016][T18747] do_ip_setsockopt+0x1720/0x22f0 [ 296.615044][T18747] ip_setsockopt+0x58/0x110 [ 296.615072][T18747] udp_setsockopt+0x89/0xa0 [ 296.615125][T18747] sock_common_setsockopt+0x69/0x80 [ 296.615148][T18747] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 296.615218][T18747] __sys_setsockopt+0x184/0x200 [ 296.615251][T18747] __x64_sys_setsockopt+0x64/0x80 [ 296.615283][T18747] x64_sys_call+0x2327/0x3020 [ 296.615318][T18747] do_syscall_64+0x136/0x3c0 [ 296.615347][T18747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.615372][T18747] RIP: 0033:0x7f1fb24ae0d9 [ 296.615391][T18747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.615443][T18747] RSP: 002b:00007f1fb0f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 296.615469][T18747] RAX: ffffffffffffffda RBX: 00007f1fb2735fa0 RCX: 00007f1fb24ae0d9 [ 296.615489][T18747] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 296.615569][T18747] RBP: 00007f1fb0f07090 R08: 0000000000000110 R09: 0000000000000000 [ 296.615586][T18747] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 296.615601][T18747] R13: 00007f1fb2736038 R14: 00007f1fb2735fa0 R15: 00007ffeeb7b6688 [ 296.615657][T18747] [ 296.846997][T18759] loop4: detected capacity change from 0 to 512 [ 296.853843][T18759] EXT4-fs: Ignoring removed nobh option [ 297.022413][T18777] loop8: detected capacity change from 0 to 128 [ 297.030214][T18777] EXT4-fs: Mount option(s) incompatible with ext2 [ 297.042899][T18759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.055531][T18759] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.090106][T18759] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.3816: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 297.270643][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.419672][T18790] netlink: 'syz.2.3822': attribute type 4 has an invalid length. [ 297.621913][T18812] loop4: detected capacity change from 0 to 1024 [ 297.628727][T18815] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3829'. [ 297.644870][T18812] EXT4-fs: inline encryption not supported [ 297.681096][T18812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 297.717366][T18812] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.764550][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 298.078456][T18838] netlink: 'syz.4.3838': attribute type 4 has an invalid length. [ 298.181865][T18845] netlink: 95 bytes leftover after parsing attributes in process `syz.2.3842'. [ 298.354826][ T830] usb usb6-port1: attempt power cycle [ 298.408495][T18865] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3848'. [ 298.541752][T18875] futex_wake_op: syz.0.3855 tries to shift op by -1; fix this program [ 298.624041][T18877] syzkaller0 speed is unknown, defaulting to 1000 [ 298.989009][T18903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3868'. [ 299.008615][T18903] loop4: detected capacity change from 0 to 512 [ 299.020113][T18903] EXT4-fs: Ignoring removed nobh option [ 299.038367][T18903] EXT4-fs (loop4): orphan cleanup on readonly fs [ 299.045600][T18903] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.3868: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 299.060553][T18903] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 299.070267][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 299.085907][ C0] EXT4-fs (loop4): initial error at time 1786229876: ext4_xattr_inode_update_ref:1037: inode 11 [ 299.086309][T18908] loop2: detected capacity change from 0 to 1024 [ 299.096437][ C0] EXT4-fs (loop4): last error at time 1786229876: ext4_xattr_inode_update_ref:1037: inode 11 [ 299.119716][T18908] EXT4-fs: inline encryption not supported [ 299.126039][T18903] EXT4-fs (loop4): Remounting filesystem read-only [ 299.132548][T18903] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.3868: ea_inode dec ref err=-117 [ 299.145407][T18903] EXT4-fs (loop4): 1 orphan inode deleted [ 299.152412][T18903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 299.188031][T18908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 299.200197][T18908] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.211364][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.225048][T18908] netlink: 'syz.2.3870': attribute type 4 has an invalid length. [ 299.234939][T18908] netlink: 'syz.2.3870': attribute type 4 has an invalid length. [ 299.282182][T14973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 299.389902][T18918] syzkaller0 speed is unknown, defaulting to 1000 [ 299.612199][T18937] FAULT_INJECTION: forcing a failure. [ 299.612199][T18937] name failslab, interval 1, probability 0, space 0, times 0 [ 299.630493][T18939] vhci_hcd vhci_hcd.0: invalid port number 88 [ 299.638499][T18937] CPU: 1 UID: 0 PID: 18937 Comm: syz.4.3882 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 299.638531][T18937] Tainted: [W]=WARN [ 299.638538][T18937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.638634][T18937] Call Trace: [ 299.638644][T18937] [ 299.638654][T18937] __dump_stack+0x1d/0x30 [ 299.638713][T18937] dump_stack_lvl+0x95/0xd0 [ 299.638735][T18937] dump_stack+0x15/0x1b [ 299.638779][T18937] should_fail_ex+0x25e/0x270 [ 299.638839][T18937] should_failslab+0x8c/0xb0 [ 299.638859][T18937] __kmalloc_noprof+0xd4/0x4a0 [ 299.638878][T18937] ? set_mcast_msfilter+0x3c/0x180 [ 299.639003][T18937] ? set_mcast_msfilter+0x3c/0x180 [ 299.639036][T18937] set_mcast_msfilter+0x3c/0x180 [ 299.639066][T18937] ip_set_mcast_msfilter+0x239/0x280 [ 299.639133][T18937] do_ip_setsockopt+0x1720/0x22f0 [ 299.639192][T18937] ip_setsockopt+0x58/0x110 [ 299.639229][T18937] udp_setsockopt+0x89/0xa0 [ 299.639257][T18937] sock_common_setsockopt+0x69/0x80 [ 299.639323][T18937] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 299.639345][T18937] __sys_setsockopt+0x184/0x200 [ 299.639470][T18937] __x64_sys_setsockopt+0x64/0x80 [ 299.639501][T18937] x64_sys_call+0x2327/0x3020 [ 299.639526][T18937] do_syscall_64+0x136/0x3c0 [ 299.639578][T18937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.639601][T18937] RIP: 0033:0x7f38b2c2e0d9 [ 299.639620][T18937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.639683][T18937] RSP: 002b:00007f38b1687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 299.639709][T18937] RAX: ffffffffffffffda RBX: 00007f38b2eb5fa0 RCX: 00007f38b2c2e0d9 [ 299.639725][T18937] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 299.639737][T18937] RBP: 00007f38b1687090 R08: 0000000000000110 R09: 0000000000000000 [ 299.639750][T18937] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 299.639762][T18937] R13: 00007f38b2eb6038 R14: 00007f38b2eb5fa0 R15: 00007ffc141445c8 [ 299.639853][T18937] [ 299.655483][T18939] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 300.155098][T18963] loop0: detected capacity change from 0 to 4096 [ 300.162225][T18963] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.211173][T18965] syzkaller0 speed is unknown, defaulting to 1000 [ 300.221945][T18963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.285537][ T830] usb usb6-port1: unable to enumerate USB device [ 300.320099][T18136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.547110][T18976] loop0: detected capacity change from 0 to 1024 [ 300.575509][T18976] EXT4-fs: inline encryption not supported [ 300.618135][T18976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 300.634705][T18976] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.680349][T18136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 300.699136][T18987] loop9: detected capacity change from 0 to 1024 [ 300.753103][T18987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.808883][ T9991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.912746][T19005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.935053][T19005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.956314][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3909'. [ 300.996247][T19005] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3909'. [ 301.034968][T19005] bond0 (unregistering): Released all slaves [ 301.215752][T19031] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3918'. [ 301.232245][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 301.232260][ T28] audit: type=1400 audit(1786229878.802:11599): avc: denied { write } for pid=19030 comm="syz.9.3918" name="functions" dev="configfs" ino=8631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 301.267240][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3918'. [ 301.289520][T19031] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3918'. [ 301.310203][ T28] audit: type=1400 audit(1786229878.872:11600): avc: denied { recv } for pid=19030 comm="syz.9.3918" saddr=10.128.0.163 src=30036 daddr=10.128.1.145 dest=51980 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 301.570459][T19061] FAULT_INJECTION: forcing a failure. [ 301.570459][T19061] name failslab, interval 1, probability 0, space 0, times 0 [ 301.583164][T19061] CPU: 1 UID: 0 PID: 19061 Comm: syz.4.3931 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 301.583271][T19061] Tainted: [W]=WARN [ 301.583280][T19061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.583295][T19061] Call Trace: [ 301.583305][T19061] [ 301.583314][T19061] __dump_stack+0x1d/0x30 [ 301.583365][T19061] dump_stack_lvl+0x95/0xd0 [ 301.583386][T19061] dump_stack+0x15/0x1b [ 301.583402][T19061] should_fail_ex+0x25e/0x270 [ 301.583461][T19061] should_failslab+0x8c/0xb0 [ 301.583485][T19061] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 301.583507][T19061] ? security_file_alloc+0x32/0xf0 [ 301.583533][T19061] ? security_file_alloc+0x32/0xf0 [ 301.583612][T19061] security_file_alloc+0x32/0xf0 [ 301.583628][T19061] init_file+0x5b/0x1b0 [ 301.583691][T19061] alloc_empty_file+0x85/0x1e0 [ 301.583706][T19061] alloc_file_pseudo+0x92/0x120 [ 301.583728][T19061] __shmem_file_setup+0x226/0x260 [ 301.583743][T19061] shmem_file_setup+0x3b/0x50 [ 301.583756][T19061] memfd_alloc_file+0x4e/0x300 [ 301.583775][T19061] __se_sys_memfd_create+0x2e1/0x3b0 [ 301.583869][T19061] __x64_sys_memfd_create+0x31/0x40 [ 301.583888][T19061] x64_sys_call+0x1f22/0x3020 [ 301.583901][T19061] do_syscall_64+0x136/0x3c0 [ 301.583990][T19061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.584032][T19061] RIP: 0033:0x7f38b2c2e0d9 [ 301.584043][T19061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.584055][T19061] RSP: 002b:00007f38b1686e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 301.584075][T19061] RAX: ffffffffffffffda RBX: 0000000000000461 RCX: 00007f38b2c2e0d9 [ 301.584152][T19061] RDX: 00007f38b1686ee0 RSI: 0000000000000000 RDI: 00007f38b2cc5204 [ 301.584160][T19061] RBP: 0000200000001840 R08: 00000000ffffffff R09: 0000000000000000 [ 301.584194][T19061] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 301.584203][T19061] R13: 00007f38b1686ee0 R14: 00007f38b1686ea0 R15: 00002000000000c0 [ 301.584214][T19061] [ 301.835658][T19063] loop4: detected capacity change from 0 to 1024 [ 301.842594][T19063] EXT4-fs: inline encryption not supported [ 301.856121][T19063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 301.868728][T19063] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.890899][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 301.953038][T19067] loop2: detected capacity change from 0 to 512 [ 301.966753][T19069] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3933'. [ 301.978307][T19067] EXT4-fs: Ignoring removed nobh option [ 301.991652][ T28] audit: type=1400 audit(1786229879.552:11601): avc: denied { map } for pid=19070 comm="syz.9.3935" path="socket:[60206]" dev="sockfs" ino=60206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.994898][T19069] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3933'. [ 302.023850][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3933'. [ 302.061218][T19069] loop4: detected capacity change from 0 to 512 [ 302.119365][T19069] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3933: invalid indirect mapped block 11 (level 0) [ 302.132638][T19069] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 302.133455][T19069] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3933: attempt to clear invalid blocks 1024 len 1 [ 302.155576][T19069] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 302.156939][T19069] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 302.180605][T19069] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3933: invalid indirect mapped block 1819239214 (level 0) [ 302.194494][T19069] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 302.195211][T19069] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3933: invalid indirect mapped block 33554432 (level 2) [ 302.218344][ C0] EXT4-fs (loop4): error count since last fsck: 4 [ 302.218365][ C0] EXT4-fs (loop4): initial error at time 1786229879: ext4_free_branches:1023: inode 13 [ 302.218449][ C0] EXT4-fs (loop4): last error at time 1786229879: ext4_free_branches:1023: inode 13 [ 302.245704][T19069] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 302.259036][T19067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.280643][T19067] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.291263][T19069] EXT4-fs (loop4): 1 truncate cleaned up [ 302.297639][T19069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.301405][T19067] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.3934: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 302.311851][ T28] audit: type=1400 audit(1786229879.822:11602): avc: denied { write } for pid=19066 comm="syz.2.3934" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.334397][T19067] xt_hashlimit: max too large, truncated to 1048576 [ 302.357585][T19067] xt_hashlimit: size too large, truncated to 1048576 [ 302.369748][T19067] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 302.371195][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.471843][ T9] usb usb6-port1: attempt power cycle [ 302.509255][T14973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.690349][T19093] syzkaller0 speed is unknown, defaulting to 1000 [ 302.778531][T19099] loop2: detected capacity change from 0 to 1024 [ 302.785711][T19099] EXT4-fs: inline encryption not supported [ 302.806744][T19099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 302.830357][T19099] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.868503][T19099] netlink: 'syz.2.3944': attribute type 4 has an invalid length. [ 302.910533][T19104] loop4: detected capacity change from 0 to 256 [ 302.932627][T14973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 303.060808][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3948'. [ 303.202496][ T28] audit: type=1400 audit(1786229880.762:11603): avc: denied { mounton } for pid=19110 comm="syz.4.3948" path="/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=60947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 303.209259][T19109] tun0: tun_chr_ioctl cmd 2147767507 [ 303.283717][T19115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 303.308287][T19115] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.548820][T19124] 9p: Bad value for 'wfdno' [ 303.697160][T19135] EXT4-fs: inline encryption not supported [ 303.737725][T19135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 303.760225][T19135] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.821326][T14973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 303.840119][T19142] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.269493][ T28] audit: type=1400 audit(1786229881.832:11604): avc: denied { egress } for pid=3370 comm="kworker/0:2" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 304.314816][ T28] audit: type=1400 audit(1786229881.832:11605): avc: denied { sendto } for pid=3370 comm="kworker/0:2" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 304.354488][ T9] usb usb6-port1: unable to enumerate USB device [ 304.476700][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3963'. [ 304.532611][T19156] set_capacity_and_notify: 3 callbacks suppressed [ 304.532700][T19156] loop4: detected capacity change from 0 to 4096 [ 304.571326][T19156] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.598358][T19156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.604974][T19162] syzkaller0 speed is unknown, defaulting to 1000 [ 304.944193][T19183] loop9: detected capacity change from 0 to 512 [ 304.997239][ T28] audit: type=1326 audit(1786229882.492:11606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19189 comm="syz.8.3977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 304.997279][ T28] audit: type=1326 audit(1786229882.492:11607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19189 comm="syz.8.3977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 304.997379][ T28] audit: type=1326 audit(1786229882.492:11608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19189 comm="syz.8.3977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb24ae0d9 code=0x7ffc0000 [ 305.176501][T19199] loop8: detected capacity change from 0 to 128 [ 305.202573][T19199] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.221327][T19202] FAULT_INJECTION: forcing a failure. [ 305.221327][T19202] name failslab, interval 1, probability 0, space 0, times 0 [ 305.234382][T19202] CPU: 1 UID: 0 PID: 19202 Comm: syz.4.3981 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 305.234487][T19202] Tainted: [W]=WARN [ 305.234497][T19202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.234510][T19202] Call Trace: [ 305.234517][T19202] [ 305.234525][T19202] __dump_stack+0x1d/0x30 [ 305.234608][T19202] dump_stack_lvl+0x95/0xd0 [ 305.234631][T19202] dump_stack+0x15/0x1b [ 305.234652][T19202] should_fail_ex+0x25e/0x270 [ 305.234715][T19202] should_failslab+0x8c/0xb0 [ 305.234739][T19202] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 305.234818][T19202] ? skb_clone+0x151/0x1f0 [ 305.234839][T19202] ? skb_clone+0x151/0x1f0 [ 305.234861][T19202] skb_clone+0x151/0x1f0 [ 305.234882][T19202] __netlink_deliver_tap+0x2be/0x510 [ 305.234928][T19202] netlink_sendskb+0x126/0x150 [ 305.234953][T19202] netlink_unicast+0x285/0x680 [ 305.234979][T19202] netlink_ack+0x4fe/0x530 [ 305.235042][T19202] netlink_rcv_skb+0x18d/0x220 [ 305.235063][T19202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.235088][T19202] rtnetlink_rcv+0x1c/0x30 [ 305.235106][T19202] netlink_unicast+0x5a7/0x680 [ 305.235204][T19202] netlink_sendmsg+0x5be/0x6f0 [ 305.235229][T19202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.235308][T19202] ____sys_sendmsg+0x532/0x580 [ 305.235333][T19202] ___sys_sendmsg+0x195/0x1e0 [ 305.235361][T19202] __x64_sys_sendmsg+0xd4/0x160 [ 305.235461][T19202] x64_sys_call+0x194c/0x3020 [ 305.235516][T19202] do_syscall_64+0x136/0x3c0 [ 305.235561][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.235584][T19202] RIP: 0033:0x7f38b2c2e0d9 [ 305.235610][T19202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.235693][T19202] RSP: 002b:00007f38b1687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.235714][T19202] RAX: ffffffffffffffda RBX: 00007f38b2eb5fa0 RCX: 00007f38b2c2e0d9 [ 305.235729][T19202] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000005 [ 305.235840][T19202] RBP: 00007f38b1687090 R08: 0000000000000000 R09: 0000000000000000 [ 305.235854][T19202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.235868][T19202] R13: 00007f38b2eb6038 R14: 00007f38b2eb5fa0 R15: 00007ffc141445c8 [ 305.235942][T19202] [ 305.497077][T19183] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.553992][T19183] EXT4-fs (loop9): shut down requested (2) [ 305.592224][T19183] syzkaller0 speed is unknown, defaulting to 1000 [ 305.685765][T19212] syzkaller0 speed is unknown, defaulting to 1000 [ 305.702971][T19214] loop4: detected capacity change from 0 to 1024 [ 305.710038][T19214] EXT4-fs: inline encryption not supported [ 305.797731][T19214] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.836513][T19221] loop8: detected capacity change from 0 to 1024 [ 305.843494][T19221] EXT4-fs: inline encryption not supported [ 305.898071][T19221] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.270457][T19245] netlink: 'syz.8.3994': attribute type 4 has an invalid length. [ 306.294643][T19264] netlink: 'syz.2.4000': attribute type 4 has an invalid length. [ 306.315584][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 306.315601][ T28] audit: type=1400 audit(1786229883.882:11638): avc: denied { write } for pid=19265 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.351001][T19260] syzkaller0 speed is unknown, defaulting to 1000 [ 306.363984][T19266] loop9: detected capacity change from 0 to 1024 [ 306.396697][T19266] EXT4-fs: inline encryption not supported [ 306.438907][T19266] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.462688][ T28] audit: type=1400 audit(1786229884.022:11639): avc: denied { bind } for pid=19274 comm="syz.2.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.526408][T19275] __nla_validate_parse: 4 callbacks suppressed [ 306.526423][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4004'. [ 306.537606][ T28] audit: type=1400 audit(1786229884.052:11640): avc: denied { read } for pid=19274 comm="syz.2.4004" name="set_event" dev="tracefs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 306.565064][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4004'. [ 306.805378][ T5932] usb usb6-port1: attempt power cycle [ 306.905849][T19303] loop8: detected capacity change from 0 to 1024 [ 306.922255][T19303] EXT4-fs: inline encryption not supported [ 306.969129][T19303] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.074519][T19321] syzkaller0 speed is unknown, defaulting to 1000 [ 307.091374][T19319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4021'. [ 307.102745][T19319] netlink: 'syz.4.4021': attribute type 14 has an invalid length. [ 307.114022][ T28] audit: type=1400 audit(1786229884.652:11641): avc: denied { attach_queue } for pid=19318 comm="syz.4.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 307.461079][T19344] syzkaller0 speed is unknown, defaulting to 1000 [ 307.473297][T19342] loop4: detected capacity change from 0 to 1024 [ 307.484454][T19342] EXT4-fs: inline encryption not supported [ 307.512488][T19342] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.729613][T19361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4040'. [ 307.869323][T19369] netlink: 'syz.4.4044': attribute type 4 has an invalid length. [ 307.890396][T19371] syzkaller0 speed is unknown, defaulting to 1000 [ 308.280283][T19395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4055'. [ 308.336334][ T28] audit: type=1400 audit(1786229885.902:11642): avc: denied { mount } for pid=19397 comm="syz.8.4057" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 308.367439][T19398] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4057'. [ 308.394622][ T28] audit: type=1400 audit(1786229885.952:11643): avc: denied { setattr } for pid=19383 comm="syz.4.4051" name="arp" dev="proc" ino=4026533059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 308.583962][ T28] audit: type=1400 audit(1786229886.012:11644): avc: denied { read write } for pid=19397 comm="syz.8.4057" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 308.819969][T19388] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 308.929203][ T28] audit: type=1400 audit(1786229886.012:11645): avc: denied { open } for pid=19397 comm="syz.8.4057" path="/165/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 309.039481][ T28] audit: type=1400 audit(1786229886.022:11646): avc: denied { ioctl } for pid=19397 comm="syz.8.4057" path="/165/dev/mapper/control" dev="devtmpfs" ino=248 ioctlcmd=0xfd04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 309.141576][T19417] netlink: 'syz.9.4061': attribute type 4 has an invalid length. [ 309.180104][ T28] audit: type=1400 audit(1786229886.192:11647): avc: denied { unmount } for pid=15624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 309.330754][T19415] syzkaller0 speed is unknown, defaulting to 1000 [ 309.394785][T19429] FAULT_INJECTION: forcing a failure. [ 309.394785][T19429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.409206][ T3411] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 309.459743][ T3411] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 309.500046][T19429] CPU: 0 UID: 0 PID: 19429 Comm: syz.8.4065 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 309.500194][T19429] Tainted: [W]=WARN [ 309.500204][T19429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.500218][T19429] Call Trace: [ 309.500261][T19429] [ 309.500272][T19429] __dump_stack+0x1d/0x30 [ 309.500296][T19429] dump_stack_lvl+0x95/0xd0 [ 309.500313][T19429] dump_stack+0x15/0x1b [ 309.500371][T19429] should_fail_ex+0x25e/0x270 [ 309.500396][T19429] should_fail+0xb/0x20 [ 309.500416][T19429] should_fail_usercopy+0x1a/0x20 [ 309.500457][T19429] _copy_to_user+0x20/0xa0 [ 309.500475][T19429] bpf_verifier_vlog+0x36e/0x5a0 [ 309.500523][T19429] __btf_verifier_log+0x7f/0xb0 [ 309.500548][T19429] ? btf_parse_hdr+0x224/0x440 [ 309.500649][T19429] btf_parse_hdr+0x237/0x440 [ 309.500752][T19429] btf_new_fd+0x258/0x670 [ 309.500831][T19429] bpf_btf_load+0x116/0x130 [ 309.500850][T19429] __sys_bpf+0xbce/0xc30 [ 309.500944][T19429] __x64_sys_bpf+0x69/0x80 [ 309.500972][T19429] x64_sys_call+0x10cb/0x3020 [ 309.500997][T19429] do_syscall_64+0x136/0x3c0 [ 309.501071][T19429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.501091][T19429] RIP: 0033:0x7f1fb24ae0d9 [ 309.501109][T19429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.501183][T19429] RSP: 002b:00007f1fb0f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.501204][T19429] RAX: ffffffffffffffda RBX: 00007f1fb2735fa0 RCX: 00007f1fb24ae0d9 [ 309.501263][T19429] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 309.501297][T19429] RBP: 00007f1fb0f07090 R08: 0000000000000000 R09: 0000000000000000 [ 309.501310][T19429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.501335][T19429] R13: 00007f1fb2736038 R14: 00007f1fb2735fa0 R15: 00007ffeeb7b6688 [ 309.501357][T19429] [ 309.699160][ T3411] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 309.717458][ T3411] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 309.737205][ T3411] rtc rtc0: __rtc_set_alarm: err=-22 [ 309.796196][T19435] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4066'. [ 310.009120][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4067'. [ 310.044418][ T5932] usb usb6-port1: unable to enumerate USB device [ 310.051863][ T2983] ================================================================== [ 310.059956][ T2983] BUG: KCSAN: data-race in dont_mount / path_lookupat [ 310.066718][ T2983] [ 310.069033][ T2983] read-write to 0xffff888106156840 of 4 bytes by task 4621 on cpu 1: [ 310.077081][ T2983] dont_mount+0x2a/0x40 [ 310.081230][ T2983] vfs_unlink+0x202/0x490 [ 310.085552][ T2983] filename_unlinkat+0x1dc/0x410 [ 310.090482][ T2983] __se_sys_unlink+0x2b/0xe0 [ 310.095061][ T2983] __x64_sys_unlink+0x1f/0x30 [ 310.099725][ T2983] x64_sys_call+0x2eb6/0x3020 [ 310.104391][ T2983] do_syscall_64+0x136/0x3c0 [ 310.108978][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.114865][ T2983] [ 310.117180][ T2983] read to 0xffff888106156840 of 4 bytes by task 2983 on cpu 0: [ 310.124707][ T2983] path_lookupat+0x19b/0x4c0 [ 310.129286][ T2983] filename_lookup+0x18f/0x390 [ 310.134038][ T2983] do_readlinkat+0x74/0x2f0 [ 310.138532][ T2983] __x64_sys_readlink+0x47/0x60 [ 310.143373][ T2983] x64_sys_call+0x2b51/0x3020 [ 310.148045][ T2983] do_syscall_64+0x136/0x3c0 [ 310.152626][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.158509][ T2983] [ 310.160815][ T2983] value changed: 0x00300080 -> 0x00004080 [ 310.166512][ T2983] [ 310.168818][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 310.174953][ T2983] CPU: 0 UID: 0 PID: 2983 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 310.185358][ T2983] Tainted: [W]=WARN [ 310.189143][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.199187][ T2983] ================================================================== [ 310.278256][T19424] syz.9.4064 (19424) used greatest stack depth: 8720 bytes left