last executing test programs: 9m1.556892275s ago: executing program 32 (id=883): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39d, 0x1, @perf_bp={0x0, 0x1}, 0x10c0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000140)='.\x00', 0x60000526) chdir(&(0x7f0000000180)='./bus\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20040841}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x116) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f00000006c0)=0x9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x40, 0x81, 0x9, 0x5}, {0x7fff, 0x1, 0x72, 0x5}, {0xddf1, 0x1, 0x6, 0x101}, {0x76, 0xc7, 0xb, 0xefc}, {0x4, 0xff, 0x8, 0x80}, {0x9f0, 0x5, 0xc, 0x683}, {0x4, 0xa, 0xd, 0x1}]}) sendto$inet6(r4, &(0x7f0000000780)="07e826", 0xfffd, 0xe0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8m40.282601781s ago: executing program 33 (id=963): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x8, 0xfa00, {0x5, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x33) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000ac0)='00:01', 0x5) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000b00)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @mcast2, 0x7fffffff}, r1}}, 0x30) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x800, 0x175) pipe2(&(0x7f0000000500), 0x800) r4 = memfd_create(&(0x7f0000000640)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8m34.209379239s ago: executing program 4 (id=1192): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39d, 0x1, @perf_bp={0x0, 0x1}, 0x10c0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000140)='.\x00', 0x60000526) chdir(&(0x7f0000000180)='./bus\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20040841}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x116) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f00000006c0)=0x9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x40, 0x81, 0x9, 0x5}, {0x7fff, 0x1, 0x72, 0x5}, {0xddf1, 0x1, 0x6, 0x101}, {0x76, 0xc7, 0xb, 0xefc}, {0x4, 0xff, 0x8, 0x80}, {0x9f0, 0x5, 0xc, 0x683}, {0x4, 0xa, 0xd, 0x1}]}) sendto$inet6(r4, &(0x7f0000000780)="07e826", 0xfffd, 0xe0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8m34.208632789s ago: executing program 4 (id=1193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 8m34.194851131s ago: executing program 4 (id=1194): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0xaa, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x650b1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x80) 8m33.861846244s ago: executing program 4 (id=1197): mkdir(0x0, 0x18b) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f0000000280)={[{@bh}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@commit={'commit', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000400)="$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") perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1d, &(0x7f0000000000)=0x7ff, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000980)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000ac0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000e40)='27', 0x2) lstat(&(0x7f0000000e80)='./proc/thread-self/fail-nth\x00', 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) 8m33.424618129s ago: executing program 4 (id=1199): perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffd}, 0x10acc8, 0x7, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) epoll_create1(0x656bee1c543864e) write$tun(r0, &(0x7f00000006c0)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000100), &(0x7f0000000140)='%ps \x00'}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000540)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x80080, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000005c0)={0x8}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe94f5f5c2dd1b71c4d5a6a0c41f9eff932b0b30e58dac", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000280)="$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") openat(r5, 0x0, 0x101800, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000004c0)='.\x00', 0xa4000160) read(r6, &(0x7f0000002800)=""/4086, 0xff6) 8m32.12841849s ago: executing program 4 (id=1208): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000f40)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '2\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) 8m32.090966974s ago: executing program 34 (id=1208): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000f40)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '2\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) 8m26.809038082s ago: executing program 7 (id=1209): mkdir(0x0, 0x18b) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f0000000280)={[{@bh}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@commit={'commit', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000400)="$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") perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1d, &(0x7f0000000000)=0x7ff, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000980)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000ac0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000e40)='27', 0x2) lstat(&(0x7f0000000e80)='./proc/thread-self/fail-nth\x00', 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) 8m26.120794692s ago: executing program 7 (id=1224): timerfd_create(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f00000004c0)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f00000005c0), &(0x7f0000000900), &(0x7f0000000940)) capset(0x0, &(0x7f0000000600)={0x200000, 0x200000, 0x98, 0x0, 0x400000}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./cgroup/pids.max\x00', 0x1010880, &(0x7f0000000080), 0xfe, 0x266, &(0x7f0000000640)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 8m25.780380257s ago: executing program 7 (id=1229): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000400"/28], 0x50) pipe(&(0x7f00000002c0)) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0xa4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, @perf_config_ext={0x2, 0x5}, 0x1800, 0x0, 0x80000000, 0x9, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000200), 0x5}, 0x108444, 0x1224, 0xfff7ffff, 0x0, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x7d7}, 0x0, 0x10008, 0xffffffffffffffff, 0xa) r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0xffffff2d, &(0x7f0000000180)=[{&(0x7f00000001c0)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}}}, 0x2e) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(&(0x7f00000003c0)=[{r2, 0x248}], 0x1, 0x0, 0x0, 0x0) 8m25.75141125s ago: executing program 35 (id=1229): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000400"/28], 0x50) pipe(&(0x7f00000002c0)) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0xa4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, @perf_config_ext={0x2, 0x5}, 0x1800, 0x0, 0x80000000, 0x9, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000200), 0x5}, 0x108444, 0x1224, 0xfff7ffff, 0x0, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x7d7}, 0x0, 0x10008, 0xffffffffffffffff, 0xa) r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0xffffff2d, &(0x7f0000000180)=[{&(0x7f00000001c0)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}}}, 0x2e) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(&(0x7f00000003c0)=[{r2, 0x248}], 0x1, 0x0, 0x0, 0x0) 7m57.412576895s ago: executing program 8 (id=1340): setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x100e, &(0x7f00000002c0)={[{@init_itable}, {@quota}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x459, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='0fc5:1227:b\nih', 0xe) 7m57.273420379s ago: executing program 8 (id=1341): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, @perf_config_ext={0x1, 0x3ff}, 0x100200, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) msgget$private(0x0, 0x7fc) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000440)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6}]}, &(0x7f0000000480)='GPL\x00', 0x4, 0x3e0, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x0, 0x10, &(0x7f0000000700), 0x76}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0xebd344ee5d826ebb, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000740), 0x4) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x101, 0x101}, 0x10e4c8, 0x7fffffffffffffff, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000a80)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000ac0)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r3, &(0x7f0000000b00)=[{&(0x7f0000000b40)='X', 0xfe04}], 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x1c, &(0x7f00000008c0)=ANY=[@ANYBLOB="180800001910e30ee4b641742c7a84a7aa34cb00", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000000007baaf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf9100000000000076080000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m56.881268389s ago: executing program 8 (id=1346): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x480000, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 1) 7m56.691443378s ago: executing program 8 (id=1347): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r0], 0x1, 0x3a2, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) mount_setattr(0xffffffffffffff9c, &(0x7f0000000b80)='.\x00', 0x8800, &(0x7f0000000bc0)={0xf, 0x0, 0x100000}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x480000, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="80fd05000000", 0x6}], 0x1, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m56.37972216s ago: executing program 8 (id=1352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 7m56.18267969s ago: executing program 8 (id=1355): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001380)='ext4\x00', &(0x7f00000013c0)='./file0\x00', 0x854, &(0x7f0000001400)={[{@errors_remount}, {@bsdgroups}]}, 0x8, 0x4fe, &(0x7f00000000c0)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001980)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f00000019c0)=""/141, &(0x7f0000001a80)=0x8d) 7m56.08728372s ago: executing program 36 (id=1355): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001380)='ext4\x00', &(0x7f00000013c0)='./file0\x00', 0x854, &(0x7f0000001400)={[{@errors_remount}, {@bsdgroups}]}, 0x8, 0x4fe, &(0x7f00000000c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001980)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f00000019c0)=""/141, &(0x7f0000001a80)=0x8d) 7m36.951632107s ago: executing program 6 (id=1495): open(0x0, 0x181042, 0x124) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/swaps\x00', 0x0, 0x2) pread64(r2, &(0x7f0000001bc0)=""/4096, 0x1000, 0x27) io_setup(0x8, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f00000010c0)="$eJzs289qE10Yx/Ff+/a1tbWd+K/agvigG90MbbyCIC2IAaU2ooLC1E40ZExKZqhExHbnVvAuikt3ingD3bjyAtx1I7jpQhzJZNombUS6sIP2+9mcp5z+wjk5T8JZZDbuvHpSLYdu2YvU32fql1a1KeVaVaovHfuT+og6rery62+fz926e+96oVicmTObLcxfyZvZ2PkPT5+/ufAxGrn9duzdoNZzDza+5r+sj69PbPyYf1wJrRJarR6ZZwv1euQtBL4tVsKqa3Yz8L3Qt0ot9Btd8+WgvrTUNK+2ODq81PDD0Lxa06p+06K6RY2meY+8Ss1c17XRYeF3Smtzc14h61Xgz2o0Ct6MpMk9M6W1TBYEAAAyxf3/MOP+fxi07v/3089vN+7/AAAAAAAAAAAAAAAAAAAAAAD8DTbj2Inj2Nka/5eSJ3zi9O+jkoYljUg6JmlU0pgkR1JO0nFJJySdlHRK0mlJ45LOSDoraaLjtbLeK/bi/A+3jgf3hqTg5XJpudQe2/OFsioK5GtKjr4nZ5lq17PXijNTlsjpfbCS5leWS/9156fltBqmV366nbfu/GDSd9v5vJxWg/XK53vmh3TpYkfelaNPD1VXoMWkJ3fyL6bNrt4o7spPJv/3r3NtW8/zc91fzbfz++iPXe/vgCYHst07pLD5rOoFgd+goKCg2C6y/mbCQdg59KxXAgAAAAAAAAAAAAAAAADYj4P4OWHWewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/AwAAP//cgEz4A==") r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x134}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0850}, 0x24040040) syz_mount_image$vfat(&(0x7f00000014c0), &(0x7f0000001500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000001600)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x1c0, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @remote, [0xff000000, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'netpci0\x00', 'vxcan1\x00', {0xff}, {}, 0x32, 0x1, 0x0, 0x40}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001b80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8812}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) preadv(r7, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/77, 0x4d}], 0x1, 0x100a, 0x56b) 7m36.719938791s ago: executing program 6 (id=1503): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x80002, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x70, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x25, 0x3, "47933579891d31bedeadc2d15f47092549d944c16a4237d11d04a2a5ee81c56b4f"}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048001}, 0x40074) r0 = socket(0x2, 0xa, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x188}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000280)={0x0, 0xffffffffffffffff}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000600)=0xe) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000000780), 0x2f, 0x40012012, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x1, 0x84) 7m36.566684597s ago: executing program 6 (id=1507): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0x9c1bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x12}, 0xf882, 0x8, 0x43a1bd76, 0x1, 0xb, 0xa, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x3) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xd8800080, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mq_unlink(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000380)=0xc) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000540)=@assoc_value={0x0}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000005c0)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r3, 0x84, 0x7a, &(0x7f0000000600)={r5, 0xffffffffffffffff, 0x80000}, &(0x7f0000000680)=0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000300)={0x3, "0378c1"}, 0x4) 7m33.58942806s ago: executing program 6 (id=1512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x5c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x48, 0x1, [@m_tunnel_key={0x44, 0x1, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x81848c, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRESOCT, @ANYRES32], 0x1, 0x392, &(0x7f00000009c0)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x45, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000e00)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='my_debugfs\x00', &(0x7f0000000e80)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='my_debugfs/asoc/dais\x00', 0x0, 0x0) read(r5, &(0x7f0000000f00)=""/10, 0xa) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000000f40)={0x0, r3, r4, 0x100000001, 0xe, '\x00', {0x61, 0x2, 0x5, 0xfd9, 0x8, 0x7, 0x5, 0x3, {0x6, 0x2}, {0x907d, 0x3}, {0x9, 0x3}, 0x0, 0xfffff0c6, 0x2, 0x1, 0x37, 0xdb12, 0x9, 0x2, 0x6, 0xf, '\x00', 0x4, 0x4, 0xc, 0x6903}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x16, 0xb, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4000}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r6, 0x0, 0xffffffffffffff81, 0x0, &(0x7f0000001200)="00000000ffffff0028", 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}, 0x2a) r7 = syz_open_dev$sg(&(0x7f0000001240), 0x0, 0x142000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$SG_IO(r7, 0x2285, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m32.79503321s ago: executing program 6 (id=1516): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000580)=@ethtool_gfeatures={0x48}}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x883, 0x0) brk(0x967e) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x400, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '2\x00'}}, [@crypt={0x0, 0x1488, 0x0, 0x88, 'crypt\x00', {'aes-ecb', 0x20, @hex16=[0x37, 0x33, 0x32, 0x31, 0x30, 0x63, 0x62, 0x63, 0x33, 0x62, 0x0, 0x36, 0x65, 0x63, 0x61, 0x61, 0x35, 0x36, 0x61, 0x34, 0x33, 0x38, 0x65, 0x31, 0x37, 0x35, 0x65, 0x64, 0x66, 0x30, 0x33, 0x64], 0x20, '128', 0x20, {@ram_num={'1:', 0x0}, 0x20, '1'}, ' 1 integrity:32:aead'}}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x7ffffffc, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f00000001c0)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e) close(r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 7m32.234732967s ago: executing program 6 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032fbd7000fdb9df250800000008000300", @ANYRES8=r2, @ANYBLOB="05002d000100000008000600", @ANYRES8=r3, @ANYRES16=r0, @ANYBLOB="dd088cf33dc0c148d8e16d5544dbc0a68d33bfb422425f35c198ca5da43912792a1c6269acb81e52aa2bfe9654beca7f6980dade19dbece3825d181f95f642c1bf2d69", @ANYRES32=r3, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 7m31.965603665s ago: executing program 37 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032fbd7000fdb9df250800000008000300", @ANYRES8=r2, @ANYBLOB="05002d000100000008000600", @ANYRES8=r3, @ANYRES16=r0, @ANYBLOB="dd088cf33dc0c148d8e16d5544dbc0a68d33bfb422425f35c198ca5da43912792a1c6269acb81e52aa2bfe9654beca7f6980dade19dbece3825d181f95f642c1bf2d69", @ANYRES32=r3, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 6m29.379799586s ago: executing program 9 (id=1738): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) 6m29.379220016s ago: executing program 9 (id=1739): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x2004800, &(0x7f0000000580)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f00000009c0)="$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") (async) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x48) (async) perf_event_open(&(0x7f0000000d80)={0x709e54f27fe17a38, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x7, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async) ppoll(0x0, 0x0, 0x0, &(0x7f0000000240)={[0x800]}, 0x8) (async) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x80408, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x8e, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000300)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) (async) modify_ldt$write2(0x11, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20420, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x54c}, 0x10ecc8, 0xc, 0x40, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) connect$inet(r1, &(0x7f0000000680)={0x2, 0x4e24, @multicast2}, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000007c0)={0x1, &(0x7f0000000800)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) io_setup(0x8, &(0x7f0000000840)=0x0) io_pgetevents(r6, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'syzkaller0\x00'}) 6m25.911621629s ago: executing program 9 (id=1752): perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffd}, 0x10acc8, 0x7, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) epoll_create1(0x656bee1c543864e) write$tun(r0, &(0x7f00000006c0)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000100), &(0x7f0000000140)='%ps \x00'}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000540)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x80080, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000005c0)={0x8}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffffff, 0x0, 0x101800, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='.\x00', 0xa4000160) 6m25.712303779s ago: executing program 9 (id=1757): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x210000, &(0x7f0000000080)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000000140)="$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") setrlimit(0x1, 0x0) truncate(&(0x7f00000006c0)='./file1\x00', 0x40000000000) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x400, 0x8}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x8f0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x2, 0x5, 0x8, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x8, &(0x7f0000000a80)={0x0, 0x20, 0x800000000004, @tid=r1}, &(0x7f0000000ac0)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000b00)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b80)='veth0_to_batadv\x00', 0x7, 0x9, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040840) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f0000000c40)='smaps\x00') preadv(r4, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000dc0)=0x5, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001a002902"], 0x14}}, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6m24.905387061s ago: executing program 9 (id=1766): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000580)=@ethtool_gfeatures={0x48}}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x883, 0x0) brk(0x967e) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x400, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '2\x00'}}, [@crypt={0x0, 0x1488, 0x0, 0x88, 'crypt\x00', {'aes-ecb', 0x20, @hex16=[0x37, 0x33, 0x32, 0x31, 0x30, 0x63, 0x62, 0x63, 0x33, 0x62, 0x0, 0x36, 0x65, 0x63, 0x61, 0x61, 0x35, 0x36, 0x61, 0x34, 0x33, 0x38, 0x65, 0x31, 0x37, 0x35, 0x65, 0x64, 0x66, 0x30, 0x33, 0x64], 0x20, '128', 0x20, {@ram_num={'1:', 0x0}, 0x20, '1'}, ' 1 integrity:32:aead'}}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f00000001c0)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e) close(r2) openat(0xffffffffffffff9c, 0x0, 0x103402, 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 6m23.526338332s ago: executing program 9 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e74657200140001"], 0xdc}}, 0x0) (fail_nth: 3) 6m23.174169648s ago: executing program 38 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e74657200140001"], 0xdc}}, 0x0) (fail_nth: 3) 3.955759107s ago: executing program 2 (id=3895): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000000c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\xb6\xc1\xab,\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@report={0xbc, 0x29, 0x1, 0x70bd2b, 0x25dfdbfe, {0x33, {@in=@rand_addr=0x64010102, @in=@multicast1, 0x7ff, 0x6, 0x4e23, 0x0, 0x0, 0xb0, 0x80, 0x90}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @address_filter={0x28, 0x20, {@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x1, 0x7}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4008815}, 0x4000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500004089"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.248516999s ago: executing program 2 (id=3902): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="c3aaaaaaaaaa0180c200000086dd606410a60018040000000000000000000000000000000000ff0200"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000ac0)='p:_est/_vent1 ./file0:0x0 _r', 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x1108000, 0x0) shmctl$IPC_RMID(0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x54, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4285}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000440)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) unshare(0x4040480) fstatfs(0xffffffffffffffff, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x43, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000500)={0x3, 0x4, 0x0, 0x0, 0x7fffffff}) 2.927519272s ago: executing program 2 (id=3906): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x42, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000010401000000000300000000020000000500010001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0xc4}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="0011223344", 0x5, 0x0, &(0x7f0000000680)={0x2, 0x1234, @loopback}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000800)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r3 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000980)=@chain={'key_or_keyring:', r3}) add_key(&(0x7f00000009c0)='asymmetric\x00', 0x0, &(0x7f0000000a00)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee29", 0x1d7, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="14000000140001032db57000fedbdf250c"], 0x20}}, 0x20008080) accept$phonet_pipe(r0, &(0x7f0000000cc0), &(0x7f00000002c0)=0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./dev/console\x00', 0x234542, 0x1d6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x147) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000700)="334f94f6ecbee04caf090d", 0xb}], 0x1) 2.803534805s ago: executing program 5 (id=3907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f00000002c0)="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", 0x559, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000840)={r2}, &(0x7f0000000880)=ANY=[@ANYBLOB='enc=pkcs1 hash=%'], 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000180)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd2a, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xc8, r5}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c050}, 0x8004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000940)=0x4, 0x4) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x14, &(0x7f00000009c0)=[{&(0x7f0000000a00)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x2, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1.936595082s ago: executing program 5 (id=3912): mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000280), &(0x7f00000002c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f00000003c0)=0x0) io_submit(r3, 0x0, &(0x7f0000000400)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x82000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000004c0)=0x9, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f00000005c0)=0x9, 0x4) listen(r2, 0xfd3) bind$inet6(r5, &(0x7f0000000600)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000640)=[{&(0x7f0000000680)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x10000, 0x0) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000a00)={0x1, 0x4, [@broadcast, @remote, @local, @multicast]}) 1.315025736s ago: executing program 3 (id=3914): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 1.297743088s ago: executing program 3 (id=3915): r0 = socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x31) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c00000013006bcd9e3fe3dc4e48aa31086b8703010000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x10, 0x1, 0x24, 0x1}}], 0x10}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev\x00') read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) pread64(r3, &(0x7f00000192c0)=""/102356, 0x18fd4, 0xc2a) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x24, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000032300)={'ip6tnl0\x00', 0x6}) mkdirat$cgroup(r3, &(0x7f00000322c0)='syz0\x00', 0x1ff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x1, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 1.199137508s ago: executing program 3 (id=3916): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs\x00', 0x1ff) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000280), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000002c0)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195012, 0x0, 0x40, 0x0, &(0x7f0000000440)) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580), 0x4000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@mcast1, @local, [], [], 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff, 0x8}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0xfc, 0x2ef}}}, {{@ipv6={@local, @local, [0xff, 0xffffff00, 0xff, 0xff000080], [0xffffff00, 0xffffffff], 'veth1_vlan\x00', 'caif0\x00', {}, {0xff}, 0x4, 0x7, 0x1, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, {0x5, 0x4, 0x1, 0x2c, 0xfffd, 0x65, 0x5, 0xa9, 0xc, 0xa94b, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) mount(0x0, &(0x7f0000000680)='./tracefs\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r5, &(0x7f0000000740)='e:mygroup/myevent sched.sched_switch', 0x24) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './tracefs\x00'}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xa, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, @perf_config_ext={0x9, 0xf}, 0xecc8, 0x4c, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r7, &(0x7f0000000440), 0x0, 0x20000040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x2402, 0x2, 0x78d, 0x10001, 0x2}, 0x10) open(&(0x7f00000007c0)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) 1.186548249s ago: executing program 5 (id=3917): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xefffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000280), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000002c0)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195012, 0x0, 0x40, 0x0, &(0x7f0000000440)) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580), 0x4000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, &(0x7f0000000640)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@mcast1, @local, [], [], 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff, 0x8}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0xfc, 0x2ef}}}, {{@ipv6={@local, @local, [0xff, 0xffffff00, 0xff, 0xff000080], [0xffffff00, 0xffffffff], 'veth1_vlan\x00', 'caif0\x00', {}, {0xff}, 0x4, 0x7, 0x1, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, {0x5, 0x4, 0x1, 0x2c, 0xfffd, 0x65, 0x5, 0xa9, 0xc, 0xa94b, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) mount(0x0, &(0x7f0000000680)='./tracefs\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r5, &(0x7f0000000740)='e:mygroup/myevent sched.sched_switch', 0x24) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './tracefs\x00'}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xa, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, @perf_config_ext={0x9, 0xf}, 0xecc8, 0x4c, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000000440), 0x0, 0x20000040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000880)={0x2402, 0x2, 0x78d, 0x10001, 0x2}, 0x10) open(&(0x7f00000007c0)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) 1.185883589s ago: executing program 2 (id=3918): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4806}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000800)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)}}], 0x3, 0x1c000) ppoll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod(0x0, 0x8000, 0xd02) r2 = syz_create_resource$futex(&(0x7f00000005c0)=0x1) futex(r2, 0xd, 0x2, 0x0, 0x0, 0x2) futex(r2, 0x5, 0x2, 0x0, r2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000840)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000880), 0x4000000000000e4, 0x0) 1.171337241s ago: executing program 3 (id=3919): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x42, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000010401000000000300000000020000000500010001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0xc4}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="0011223344", 0x5, 0x0, &(0x7f0000000680)={0x2, 0x1234, @loopback}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000800)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r4 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000980)=@chain={'key_or_keyring:', r4}) add_key(&(0x7f00000009c0)='asymmetric\x00', 0x0, &(0x7f0000000a00)="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", 0x1d7, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="14000000140001032db57000fedbdf250c"], 0x20}}, 0x20008080) accept$phonet_pipe(r0, &(0x7f0000000cc0), &(0x7f00000002c0)=0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./dev/console\x00', 0x234542, 0x1d6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x147) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000700)="334f94f6ecbee04caf090d", 0xb}], 0x1) 1.127957215s ago: executing program 1 (id=3920): r0 = syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x10, &(0x7f0000000cc0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1cc4}}, {@nodioread_nolock}]}, 0x5, 0x7eb, &(0x7f0000000d00)="$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") r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="d1ca", 0x2}], 0x1) r2 = openat(r0, &(0x7f0000001500)='./file1\x00', 0x8c042, 0x122) lremovexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000a80)=@random={'system.', '){{\x00p\xa1\x91\xe8(Z\xf3\\\xb1\xde\xb91\xd0\x05\x00\x00\x00\xcc\x90\x92\xfeLg\x89\xc3\xba\x0efN\x98\xea\x9fF\xe9\x19\xfe;\xcc\x1eX4\xf7\xab\x89C=\xb4\xa6\xb1\xca\xde\xb5\xcc\xcd\xee{\x1a\xf9\xa4\xb4.v\xe9\xb6(\x90p\xc0\xa1\xde\xb0\x80;\xa1\xec\x81xP\x1d\xc2\xd7\xbb\b\x95\xe2\x00=;\x8c\xf3q\xe6\xa0\xe6\xfak\xfa\x8f^\x98\xe5\x04\x8d\b\xde)KTVD.\x939\x98\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xd5L\x06[\x7f\xa5$\"\x19\xcd&'}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x2, 0xc, 0x7, 0x2}, &(0x7f0000000580)=0x10) open(&(0x7f0000000a40)='./file1\x00', 0x8002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f00000005c0)={r3, 0xffffffffffffffff, 0x80800}, &(0x7f0000000600)=0xc) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x3, 0x1, {0x515a08e1, @usage=0x80000001, 0x0, 0x6, 0x4, 0xffffffff, 0x1, 0x9, 0x4, @usage=0x7, 0x4, 0xffffffff, [0x0, 0x5, 0x9, 0x4, 0x10001, 0x2]}, {0x5, @usage=0x1, 0x0, 0xfffffffffffeffff, 0x9, 0x0, 0x1, 0x4, 0x80, @struct={0x3, 0xfffffffa}, 0x0, 0xfffffffd, [0x7, 0xffffffff80000000, 0x1, 0x7d, 0x4, 0xd0f4]}, {0x401, @struct={0x40, 0x400}, 0x0, 0x8, 0x2, 0x785, 0x471, 0x3, 0x84, @struct={0x54, 0x9}, 0x0, 0xb, [0x1, 0x9, 0x4bf8, 0x3, 0x2, 0xfff]}, {0x7, 0x0, 0x3}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001540)={0x0, 0x8000000000000000, @start={r4, 0x0, "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", "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"}, [0x5, 0x1ff, 0x8, 0x3, 0x7f, 0x8, 0x840, 0x1, 0x9, 0x7, 0x800, 0x3000000, 0xc47b, 0x7ff, 0x0, 0x100010000, 0x100, 0x6, 0x1000, 0xfffffffffffffff7, 0x1, 0x3, 0x8, 0x9, 0x6, 0x4a4f752b, 0x7, 0x3, 0x7fffffffffffffff, 0x1, 0x100, 0x2, 0x100000001, 0x9, 0x5, 0x1000000000000000, 0x9, 0x4, 0x7, 0x7fff, 0x8000000000000000, 0x10000, 0xb, 0xfff, 0xf9, 0x8, 0xe06000000, 0xffffffff00000000, 0xf, 0x100000000, 0x401, 0x2a7, 0xffffffffffffba5e, 0x3, 0x8, 0x6, 0x80000001, 0x3, 0x200, 0x3, 0x6, 0x8, 0x5, 0x79]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd0141, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20015, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009a00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000780)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r6, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000800)={0x16, 0x98, 0xfa00, {0x0, 0x4, r6, 0x1c, 0x1, @in6={0xa, 0x4e24, 0x102, @mcast2, 0x5}}}, 0xa0) sendfile(r2, r2, 0x0, 0x8000000f3aa6ea) 1.044232954s ago: executing program 5 (id=3921): accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getuid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000007c0)={@fallback, 0xffffffffffffffff, 0x2c, 0x2c}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff000000000000000105000000100000000000000000000004"], 0x0, 0x4e}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) r3 = dup(0xffffffffffffffff) capset(&(0x7f0000000400)={0x19980330}, &(0x7f0000000440)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) r4 = syz_open_dev$sg(&(0x7f00000006c0), 0x0, 0x88003) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000700)={0x0, 0x7ff, 0xbf}) write$P9_RSTATFS(r3, 0x0, 0x0) 969.782921ms ago: executing program 1 (id=3922): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="c3aaaaaaaaaa0180c200000086dd606410a60018040000000000000000000000000000000000ff0200"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000ac0)='p:_est/_vent1 ./file0:0x0 _r', 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x1108000, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x54, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4285}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000440)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) unshare(0x4040480) fstatfs(0xffffffffffffffff, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x43, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) 625.644676ms ago: executing program 1 (id=3923): mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000280), &(0x7f00000002c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f00000003c0)=0x0) io_submit(r3, 0x0, &(0x7f0000000400)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x82000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000004c0)=0x9, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f00000005c0)=0x9, 0x4) listen(r2, 0xfd3) bind$inet6(r5, &(0x7f0000000600)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000640)=[{&(0x7f0000000680)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) (fail_nth: 3) socket$rxrpc(0x21, 0x2, 0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x10000, 0x0) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000a00)={0x1, 0x4, [@broadcast, @remote, @local, @multicast]}) 547.177995ms ago: executing program 0 (id=3924): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x200000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r1, 0x0, 0x0, 0x4004000, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f0000000100)=0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time_for_children\x00') open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000f100000006"], 0x40cf41) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) 520.416757ms ago: executing program 0 (id=3925): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x5, 0xb88, 0x0, &(0x7f00000008c0)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x9000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x8001, 0x37}, 0x1112, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000980)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56a9, &(0x7f0000000a40)={0x0, 0x371, 0xc000, 0x40b, 0x4a0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x2000000000000263, 0x0, &(0x7f0000000b80)='syzkaller\x00', 0x80000000, 0xfffffffffffffeec, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x13, 0x3, &(0x7f0000000580)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5a}}, &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x280080, 0x0) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/192, 0xc0) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x60, 0x0, 0x0) r6 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0x7ffffffff000, 0x1002) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 519.565707ms ago: executing program 1 (id=3926): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000380)={r0}, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6c, 0x40c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x7, 0x9c, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, '\x00', "1e0900", 'K\x00', "e4156c3254a52bee"}, 0x28) sendto$inet6(r2, 0x0, 0x0, 0x2402c080, 0x0, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r5) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r7, @ANYBLOB="e05138086c842eee86c754619732653394e2b55eaacc14bdc90898e708b1fd50712f8cb06ca4aee4af9b9479a478934b888cbc0adcfed60b67f3d2434823d922f3a3f1d548d8d462cffd25e9ca"], 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) fcntl$lock(r1, 0x24, &(0x7f0000000880)={0x1, 0x4, 0x7, 0xfff}) syz_open_procfs(0x0, &(0x7f0000000640)='fd/3\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r8, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f00000000c0)=0xff13) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2100000000000000000000002700000100000200", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="04000000000200000000"], 0x50) syz_clone3(&(0x7f0000000780)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0xa8) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000800)={0x0, "c694ef4b3792828d9d7d67e4e3ea7f4993d2127c4a92cb1e61f64b18f1f110afb027899e2d01c12e67367fa6cca9b88dcfc9d15a3a271b34351c934d95487d7e", 0x3a}, 0x48, 0xfffffffffffffffd) close(r1) 426.199487ms ago: executing program 0 (id=3927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) 425.437857ms ago: executing program 0 (id=3928): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x43005, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b40), 0x8}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x50f, &(0x7f00000002c0)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000800)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000840)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xe761}, 0x1061, 0x1, 0xbd6, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x180d, &(0x7f0000000940)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000009c0)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000a00)={&(0x7f0000000a40)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000a80)=[{0x0}], 0x1}, 0x4048043) r5 = dup(r3) sendmmsg$inet(r4, 0x0, 0x0, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000ac0)='bond_slave_1\x00', 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6(0xa, 0x4, 0x3a) bind$inet6(r6, &(0x7f0000000b00)={0xa, 0x0, 0x8000, @mcast1, 0x8000}, 0x1c) syz_emit_ethernet(0x6c, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/314], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000bc0)={0x6, @loopback, 0x15, 0x0, 'sh\x00'}, 0x2c) write(r0, &(0x7f00000001c0)="383c2412cc7b09135ec2bac879bcd2c59af6cd951c4d6e2bf83c11a4", 0x1c) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000100)={r0, &(0x7f0000000000)='{%\\\x00', 0x400, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x7]}, {0x8, 0xffff, 0x3, 0x7}}, 0x200, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x4}) 327.431507ms ago: executing program 1 (id=3929): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs\x00', 0x1ff) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000280), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000002c0)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195012, 0x0, 0x40, 0x0, &(0x7f0000000440)) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580), 0x4000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@mcast1, @local, [], [], 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff, 0x8}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0xfc, 0x2ef}}}, {{@ipv6={@local, @local, [0xff, 0xffffff00, 0xff, 0xff000080], [0xffffff00, 0xffffffff], 'veth1_vlan\x00', 'caif0\x00', {}, {0xff}, 0x4, 0x7, 0x1, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, {0x5, 0x4, 0x1, 0x2c, 0xfffd, 0x65, 0x5, 0xa9, 0xc, 0xa94b, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) mount(0x0, &(0x7f0000000680)='./tracefs\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r5, &(0x7f0000000740)='e:mygroup/myevent sched.sched_switch', 0x24) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './tracefs\x00'}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xa, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, @perf_config_ext={0x9, 0xf}, 0xecc8, 0x4c, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r7, &(0x7f0000000440), 0x0, 0x20000040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000880)={0x2402, 0x2, 0x78d, 0x10001, 0x2}, 0x10) open(&(0x7f00000007c0)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) 318.059418ms ago: executing program 2 (id=3930): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0xa, 0x804, @multicast2}}, 0x5, 0x6d0}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)='0', 0x1, 0x4000054, &(0x7f0000000140)={0xa, 0x4e21, 0x17e, @loopback, 0x800000c0}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0xa, 0x804, @multicast2}}, 0x5, 0x6d0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) (async) sendto$inet6(r0, &(0x7f0000000100)='0', 0x1, 0x4000054, &(0x7f0000000140)={0xa, 0x4e21, 0x17e, @loopback, 0x800000c0}, 0x1c) (async) 316.018118ms ago: executing program 0 (id=3931): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000ac0)='p:_est/_vent1 ./file0:0x0 _r', 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x1108000, 0x0) shmctl$IPC_RMID(0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x54, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4285}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000440)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) unshare(0x4040480) fstatfs(0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x43, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) 267.730033ms ago: executing program 0 (id=3932): pipe(0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x50000, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x72}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg(r2, &(0x7f00000005c0), 0x4ff, 0x0) 235.251966ms ago: executing program 2 (id=3933): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="c3aaaaaaaaaa0180c200000086dd606410a60018040000000000000000000000000000000000ff0200"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000ac0)='p:_est/_vent1 ./file0:0x0 _r', 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x1108000, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x54, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4285}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000440)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) unshare(0x4040480) fstatfs(0xffffffffffffffff, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x43, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) 234.317446ms ago: executing program 3 (id=3934): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./proc\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@nogrpid}, {@nobarrier}]}, 0x1, 0x512, &(0x7f0000000ac0)="$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") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xa96) sendto$inet(r0, 0x0, 0x0, 0x2004c000, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x100000000, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 136.739566ms ago: executing program 1 (id=3935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000440)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000d00)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x10, 0x0, "4810562bd9d585dddcd78cb15b32763742dd6e7dea3a08e3766f36a0fc3ecbc9808f7ebeeb1dccc173303e088dc2e0774b608e01784f10471ac4479965fa93c9f093bfe9733f535458fd1466bec3681a"}, 0xd8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x2, 0x7fffffffffffffff, 0x2, 0x7, 0x8, 0x8001}) connect$inet6(r0, &(0x7f0000000d40)={0xa, 0x4e23, 0xa4e0, @remote, 0x3}, 0x1c) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700070005"], 0xfe33) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x8000, 0x3ff}) syz_emit_ethernet(0x42, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08f2440000340000000000019078ac1e0001ac1414aa0b009078030000004500000000000000002f0000ac14140aac1414aa04006558e5652ce2f81fe320adb6c3d67e99aeeaeb8a3c183832d07bd2077a0c5e02c38bd34fc19071584027d8a33bfa4ae565ac725cfcc5d66708da584f49d809db77c94a3f3ac661516f8ccd017d480db87f79aba7788a10fc25ca5e02179565433af8320e65972f1cc27fbe5ca170df24046b485fe03408c44f0e6cd2696d450f198f2d585e47b9d110ae0d6bc7a6a304748007edb5f6833e10b3fe0246"], 0x0) socket$inet6(0xa, 0x80003, 0x6) perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x7ffffffc, 0x0, 0x1, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) iopl(0x3) r3 = creat(&(0x7f0000000b80)='./file0\x00', 0xdafbe5d6891b6e4) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000bc0)='.\x00', 0x20000000) write$binfmt_elf32(r3, 0x0, 0x69) close(r3) clock_getres(0x8, 0x0) execve(&(0x7f0000000c00)='./file0\x00', 0x0, &(0x7f0000000c40)={[&(0x7f0000000c80)='c', 0x0, &(0x7f0000000dc0)='\r\x19\x00\x00s\xb2r\xde\x94\x85k\xa7\x8e\x81\x82c\'\x96b\xc8^\xdc\xd0\xe4g\xc5\xf0\xe9z(jg\x1e\xe2\xc0&&/\xde:9n\x81Ri\xc4R\xae\xf6\x80\a\x90{\x9e\x8bN\xdc\x9aX\x1f\x1c\x84y\x01O\xae\x1b\x81lT\xd0Cm\xcd\xc6B\"\x99\xcdK\xae\xb1X7B\x00'/98]}) syz_mount_image$ext4(&(0x7f0000000e40)='ext4\x00', &(0x7f0000000e80)='./file0\x00', 0x2804f1e, &(0x7f0000000ec0)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f0000000f00)="$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") file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000013c0)={0x1201, 0x4aeeb, 0x8001, 0x2, 0x1}, 0x18, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='memory.numa_stat\x00', 0x275a, 0x0) 136.316096ms ago: executing program 5 (id=3936): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f00000001c0)="383c2412cc7b09135ec2bac879bcd2c59af6cd951c4d6e2bf83c11a4", 0x1c) (fail_nth: 3) 135.573917ms ago: executing program 3 (id=3937): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="c3aaaaaaaaaa0180c200000086dd606410a6001804000000000000"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000ac0)='p:_est/_vent1 ./file0:0x0 _r', 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x1108000, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x54, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4285}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000440)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) unshare(0x4040480) fstatfs(0xffffffffffffffff, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x43, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) 0s ago: executing program 5 (id=3938): accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getuid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000007c0)={@fallback, 0xffffffffffffffff, 0x2c, 0x2c}, 0x20) socket$inet6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff000000000000000105000000100000000000000000000004"], 0x0, 0x4e}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f00000006c0), 0x0, 0x88003) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000700)={0x0, 0x7ff, 0xbf}) write$P9_RSTATFS(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): 1: left promiscuous mode [ 551.853223][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.854954][ T66] bridge_slave_0: left allmulticast mode [ 551.854969][ T66] bridge_slave_0: left promiscuous mode [ 551.855198][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.096077][T16745] FAULT_INJECTION: forcing a failure. [ 552.096077][T16745] name failslab, interval 1, probability 0, space 0, times 0 [ 552.096187][T16745] CPU: 1 UID: 0 PID: 16745 Comm: syz.1.3445 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 552.096218][T16745] Tainted: [W]=WARN [ 552.096225][T16745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 552.096239][T16745] Call Trace: [ 552.096245][T16745] [ 552.096253][T16745] __dump_stack+0x1d/0x30 [ 552.096307][T16745] dump_stack_lvl+0x95/0xd0 [ 552.096329][T16745] dump_stack+0x15/0x1b [ 552.096409][T16745] should_fail_ex+0x259/0x270 [ 552.096454][T16745] should_failslab+0x8c/0xb0 [ 552.096484][T16745] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 552.096513][T16745] ? bdev_alloc_inode+0x35/0xb0 [ 552.096589][T16745] ? bdev_alloc_inode+0x35/0xb0 [ 552.096621][T16745] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 552.096721][T16745] bdev_alloc_inode+0x35/0xb0 [ 552.096752][T16745] alloc_inode+0x40/0x170 [ 552.096779][T16745] new_inode+0x1d/0xe0 [ 552.096872][T16745] bdev_alloc+0x2e/0x1f0 [ 552.096900][T16745] __alloc_disk_node+0xbb/0x2f0 [ 552.097036][T16745] __blk_alloc_disk+0x68/0xd0 [ 552.097062][T16745] dm_create+0x36d/0x850 [ 552.097137][T16745] dev_create+0x141/0x290 [ 552.097163][T16745] dm_ctl_ioctl+0x80b/0xad0 [ 552.097188][T16745] ? __pfx_dev_create+0x10/0x10 [ 552.097223][T16745] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 552.097268][T16745] __se_sys_ioctl+0xce/0x140 [ 552.097299][T16745] __x64_sys_ioctl+0x43/0x50 [ 552.097328][T16745] x64_sys_call+0x239d/0x2550 [ 552.097389][T16745] do_syscall_64+0x112/0x360 [ 552.097419][T16745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.097539][T16745] RIP: 0033:0x7f70a735f559 [ 552.097555][T16745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.097574][T16745] RSP: 002b:00007f70a5db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.097594][T16745] RAX: ffffffffffffffda RBX: 00007f70a75e5fa0 RCX: 00007f70a735f559 [ 552.097608][T16745] RDX: 0000200000000580 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 552.097621][T16745] RBP: 00007f70a73f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 552.097659][T16745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.097671][T16745] R13: 00007f70a75e6038 R14: 00007f70a75e5fa0 R15: 00007ffe4b9af1e8 [ 552.097691][T16745] [ 552.118191][T16746] --map-set only usable from mangle table [ 552.132362][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3444'. [ 552.445341][T16758] program syz.2.3447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.758081][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.780100][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.784091][ T66] bond0 (unregistering): Released all slaves [ 553.513873][T16770] --map-set only usable from mangle table [ 553.959917][T16782] program syz.5.3451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.297130][T16786] FAULT_INJECTION: forcing a failure. [ 554.297130][T16786] name failslab, interval 1, probability 0, space 0, times 0 [ 554.297312][T16786] CPU: 0 UID: 0 PID: 16786 Comm: syz.2.3456 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 554.297356][T16786] Tainted: [W]=WARN [ 554.297364][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 554.297377][T16786] Call Trace: [ 554.297447][T16786] [ 554.297537][T16786] __dump_stack+0x1d/0x30 [ 554.297573][T16786] dump_stack_lvl+0x95/0xd0 [ 554.297642][T16786] dump_stack+0x15/0x1b [ 554.297667][T16786] should_fail_ex+0x259/0x270 [ 554.297706][T16786] ? mempool_alloc_slab+0x1a/0x30 [ 554.297819][T16786] should_failslab+0x8c/0xb0 [ 554.297861][T16786] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 554.297959][T16786] ? mempool_alloc_slab+0x1a/0x30 [ 554.297995][T16786] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 554.298104][T16786] mempool_alloc_slab+0x1a/0x30 [ 554.298146][T16786] mempool_init_node+0x139/0x260 [ 554.298194][T16786] ? __pfx_mempool_free_slab+0x10/0x10 [ 554.298251][T16786] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 554.298449][T16786] mempool_init_noprof+0x3a/0x50 [ 554.298489][T16786] bioset_init+0x177/0x480 [ 554.298526][T16786] ? __alloc_disk_node+0x3c/0x2f0 [ 554.298585][T16786] __alloc_disk_node+0x59/0x2f0 [ 554.298615][T16786] __blk_alloc_disk+0x68/0xd0 [ 554.298714][T16786] dm_create+0x36d/0x850 [ 554.298736][T16786] dev_create+0x141/0x290 [ 554.298772][T16786] dm_ctl_ioctl+0x80b/0xad0 [ 554.298810][T16786] ? __pfx_dev_create+0x10/0x10 [ 554.298908][T16786] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 554.299010][T16786] __se_sys_ioctl+0xce/0x140 [ 554.299047][T16786] __x64_sys_ioctl+0x43/0x50 [ 554.299077][T16786] x64_sys_call+0x239d/0x2550 [ 554.299102][T16786] do_syscall_64+0x112/0x360 [ 554.299191][T16786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.299265][T16786] RIP: 0033:0x7fb5c60df559 [ 554.299287][T16786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.299312][T16786] RSP: 002b:00007fb5c4b2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.299340][T16786] RAX: ffffffffffffffda RBX: 00007fb5c6365fa0 RCX: 00007fb5c60df559 [ 554.299357][T16786] RDX: 0000200000000580 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 554.299374][T16786] RBP: 00007fb5c6176b50 R08: 0000000000000000 R09: 0000000000000000 [ 554.299448][T16786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.299460][T16786] R13: 00007fb5c6366038 R14: 00007fb5c6365fa0 R15: 00007ffc25a5d3c8 [ 554.299491][T16786] [ 554.799978][T16794] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3461'. [ 554.848756][ T5689] wacom 0003:056A:0043.0037: Unknown device_type for 'syz0'. Assuming pen. [ 554.851127][ T5689] wacom 0003:056A:0043.0037: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 554.851808][ T5689] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0037/input/input160 [ 554.973386][T16802] fido_id[16802]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 554.988823][T16798] loop5: detected capacity change from 0 to 128 [ 555.213625][T16798] xt_ecn: cannot match TCP bits for non-tcp packets [ 556.387651][ T66] hsr_slave_0: left promiscuous mode [ 556.390205][ T66] hsr_slave_1: left promiscuous mode [ 556.390712][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.390727][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.393958][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.393974][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.449842][T16813] program syz.2.3457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.452663][ T66] veth1_macvtap: left promiscuous mode [ 556.452743][ T66] veth0_macvtap: left promiscuous mode [ 556.452790][ T66] veth1_vlan: left promiscuous mode [ 556.452882][ T66] veth0_vlan: left promiscuous mode [ 556.917445][ T66] team0 (unregistering): Port device team_slave_1 removed [ 556.962255][ T66] team0 (unregistering): Port device team_slave_0 removed [ 556.999525][ T29] audit: type=1326 audit(557.145:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.0.3467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73e0e6f559 code=0x0 [ 557.034571][ T29] audit: type=1326 audit(557.165:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.3.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac355f559 code=0x0 [ 557.125865][T16828] loop5: detected capacity change from 0 to 128 [ 557.219829][T16828] xt_ecn: cannot match TCP bits for non-tcp packets [ 557.277125][T16830] --map-set only usable from mangle table [ 557.524734][T16842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3473'. [ 557.796231][ T28] wacom 0003:056A:0043.0038: Unknown device_type for 'syz0'. Assuming pen. [ 557.800173][ T28] wacom 0003:056A:0043.0038: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 557.801666][ T28] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0038/input/input163 [ 557.861690][T16850] fido_id[16850]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 558.257770][ T9] wacom 0003:056A:0043.0039: Unknown device_type for 'syz0'. Assuming pen. [ 558.258479][ T9] wacom 0003:056A:0043.0039: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 558.259103][ T9] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0039/input/input166 [ 559.729144][T16866] --map-set only usable from mangle table [ 560.219796][T16883] --map-set only usable from mangle table [ 561.059633][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3487'. [ 561.084842][ T66] bridge_slave_1: left allmulticast mode [ 561.084866][ T66] bridge_slave_1: left promiscuous mode [ 561.085163][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.107158][ T66] bridge_slave_0: left allmulticast mode [ 561.107189][ T66] bridge_slave_0: left promiscuous mode [ 561.107280][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.126070][ T29] audit: type=1326 audit(561.267:10833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16891 comm="syz.1.3482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a735f559 code=0x0 [ 561.233014][T16901] FAULT_INJECTION: forcing a failure. [ 561.233014][T16901] name failslab, interval 1, probability 0, space 0, times 0 [ 561.233048][T16901] CPU: 1 UID: 0 PID: 16901 Comm: syz.5.3490 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 561.233126][T16901] Tainted: [W]=WARN [ 561.233132][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 561.233147][T16901] Call Trace: [ 561.233154][T16901] [ 561.233219][T16901] __dump_stack+0x1d/0x30 [ 561.233252][T16901] dump_stack_lvl+0x95/0xd0 [ 561.233279][T16901] dump_stack+0x15/0x1b [ 561.233308][T16901] should_fail_ex+0x259/0x270 [ 561.233358][T16901] ? mempool_init_node+0xb3/0x260 [ 561.233391][T16901] should_failslab+0x8c/0xb0 [ 561.233445][T16901] __kmalloc_node_noprof+0xb8/0x4d0 [ 561.233484][T16901] ? pcpu_alloc_area+0x49c/0x4c0 [ 561.233518][T16901] ? mempool_init_node+0xb3/0x260 [ 561.233551][T16901] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 561.233586][T16901] mempool_init_node+0xb3/0x260 [ 561.233618][T16901] ? __rcu_read_unlock+0x4e/0x70 [ 561.233725][T16901] ? __pfx_mempool_free_slab+0x10/0x10 [ 561.233816][T16901] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 561.233851][T16901] mempool_init_noprof+0x3a/0x50 [ 561.233907][T16901] bioset_init+0x177/0x480 [ 561.233941][T16901] ? __alloc_disk_node+0x3c/0x2f0 [ 561.234025][T16901] __alloc_disk_node+0x59/0x2f0 [ 561.234144][T16901] __blk_alloc_disk+0x68/0xd0 [ 561.234178][T16901] dm_create+0x36d/0x850 [ 561.234273][T16901] dev_create+0x141/0x290 [ 561.234377][T16901] dm_ctl_ioctl+0x80b/0xad0 [ 561.234407][T16901] ? __pfx_dev_create+0x10/0x10 [ 561.234483][T16901] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 561.234515][T16901] __se_sys_ioctl+0xce/0x140 [ 561.234553][T16901] __x64_sys_ioctl+0x43/0x50 [ 561.234590][T16901] x64_sys_call+0x239d/0x2550 [ 561.234729][T16901] do_syscall_64+0x112/0x360 [ 561.234786][T16901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.234815][T16901] RIP: 0033:0x7f595f32f559 [ 561.234843][T16901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.234866][T16901] RSP: 002b:00007f595dd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.234908][T16901] RAX: ffffffffffffffda RBX: 00007f595f5b5fa0 RCX: 00007f595f32f559 [ 561.234940][T16901] RDX: 0000200000000580 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 561.234957][T16901] RBP: 00007f595f3c6b50 R08: 0000000000000000 R09: 0000000000000000 [ 561.234973][T16901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.234989][T16901] R13: 00007f595f5b6038 R14: 00007f595f5b5fa0 R15: 00007ffd5dda4ef8 [ 561.235010][T16901] [ 561.287130][ T29] audit: type=1326 audit(561.437:10834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16902 comm="syz.0.3491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73e0e6f559 code=0x0 [ 562.574549][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.580115][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.581123][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3494'. [ 562.582169][ T66] bond0 (unregistering): Released all slaves [ 562.648813][T16930] loop5: detected capacity change from 0 to 512 [ 562.660152][T16930] vfat: Unknown parameter ' [ 562.660152][T16930] ' [ 563.601010][ T66] hsr_slave_0: left promiscuous mode [ 563.602980][ T66] hsr_slave_1: left promiscuous mode [ 563.603634][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.624912][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.625482][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.625500][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.625888][ T66] batman_adv: batadv0: Interface deactivated: veth0 [ 563.625905][ T66] batman_adv: batadv0: Removing interface: veth0 [ 563.630646][ T66] veth1_macvtap: left promiscuous mode [ 563.630681][ T66] veth0_macvtap: left promiscuous mode [ 563.630789][ T66] veth1_vlan: left promiscuous mode [ 563.630845][ T66] veth0_vlan: left promiscuous mode [ 563.760207][ T66] team0 (unregistering): Port device team_slave_1 removed [ 563.763459][ T66] team0 (unregistering): Port device team_slave_0 removed [ 563.893577][T16966] --map-set only usable from mangle table [ 565.156834][T16984] --map-set only usable from mangle table 3OL [ 565.366441][ T3380] wacom 0003:056A:0043.003A: Unknown device_type for 'syz0'. Assuming pen. [ 565.368329][ T3380] wacom 0003:056A:0043.003A: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 565.370180][ T3380] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.003A/input/input169 [ 565.544535][T16996] fido_id[16996]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 565.615236][T17002] FAULT_INJECTION: forcing a failure. [ 565.615236][T17002] name failslab, interval 1, probability 0, space 0, times 0 [ 565.615265][T17002] CPU: 0 UID: 0 PID: 17002 Comm: syz.0.3512 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 565.615369][T17002] Tainted: [W]=WARN [ 565.615379][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 565.615395][T17002] Call Trace: [ 565.615405][T17002] [ 565.615414][T17002] __dump_stack+0x1d/0x30 [ 565.615498][T17002] dump_stack_lvl+0x95/0xd0 [ 565.615519][T17002] dump_stack+0x15/0x1b [ 565.615560][T17002] should_fail_ex+0x259/0x270 [ 565.615623][T17002] ? mempool_init_node+0xb3/0x260 [ 565.615726][T17002] should_failslab+0x8c/0xb0 [ 565.615763][T17002] __kmalloc_node_noprof+0xb8/0x4d0 [ 565.615800][T17002] ? mempool_init_node+0xb3/0x260 [ 565.615893][T17002] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 565.615918][T17002] mempool_init_node+0xb3/0x260 [ 565.615943][T17002] ? __rcu_read_unlock+0x4e/0x70 [ 565.615973][T17002] ? __pfx_mempool_free_slab+0x10/0x10 [ 565.616068][T17002] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 565.616092][T17002] mempool_init_noprof+0x3a/0x50 [ 565.616123][T17002] bioset_init+0x177/0x480 [ 565.616155][T17002] ? __alloc_disk_node+0x3c/0x2f0 [ 565.616289][T17002] __alloc_disk_node+0x59/0x2f0 [ 565.616307][T17002] __blk_alloc_disk+0x68/0xd0 [ 565.616329][T17002] dm_create+0x36d/0x850 [ 565.616472][T17002] dev_create+0x141/0x290 [ 565.616495][T17002] dm_ctl_ioctl+0x80b/0xad0 [ 565.616523][T17002] ? __pfx_dev_create+0x10/0x10 [ 565.616631][T17002] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 565.616657][T17002] __se_sys_ioctl+0xce/0x140 [ 565.616695][T17002] __x64_sys_ioctl+0x43/0x50 [ 565.616809][T17002] x64_sys_call+0x239d/0x2550 [ 565.616838][T17002] do_syscall_64+0x112/0x360 [ 565.616909][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.616930][T17002] RIP: 0033:0x7f73e0e6f559 [ 565.616945][T17002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.616962][T17002] RSP: 002b:00007f73df8c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.617005][T17002] RAX: ffffffffffffffda RBX: 00007f73e10f5fa0 RCX: 00007f73e0e6f559 [ 565.617139][T17002] RDX: 0000200000000580 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 565.617156][T17002] RBP: 00007f73e0f06b50 R08: 0000000000000000 R09: 0000000000000000 [ 565.617174][T17002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.617192][T17002] R13: 00007f73e10f6038 R14: 00007f73e10f5fa0 R15: 00007ffe8344ae48 [ 565.617264][T17002] [ 566.005563][ T66] bridge_slave_1: left promiscuous mode [ 566.005719][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.006478][ T66] bridge_slave_0: left allmulticast mode [ 566.006496][ T66] bridge_slave_0: left promiscuous mode [ 566.006637][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.144211][T17011] --map-set only usable from mangle table [ 566.198920][T17014] loop5: detected capacity change from 0 to 512 [ 566.209189][T17014] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 566.341160][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'. 3OL [ 566.510468][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.524355][ T66] bond0 (unregistering): Released all slaves [ 566.727359][T17027] FAULT_INJECTION: forcing a failure. [ 566.727359][T17027] name failslab, interval 1, probability 0, space 0, times 0 [ 566.727487][T17027] CPU: 1 UID: 0 PID: 17027 Comm: syz.1.3520 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 566.727524][T17027] Tainted: [W]=WARN [ 566.727532][T17027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 566.727616][T17027] Call Trace: [ 566.727629][T17027] [ 566.727636][T17027] __dump_stack+0x1d/0x30 [ 566.727667][T17027] dump_stack_lvl+0x95/0xd0 [ 566.727710][T17027] dump_stack+0x15/0x1b [ 566.727728][T17027] should_fail_ex+0x259/0x270 [ 566.727755][T17027] ? kvrealloc_node_align_noprof+0x7b/0xe0 [ 566.727923][T17027] should_failslab+0x8c/0xb0 [ 566.727966][T17027] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 566.727996][T17027] ? kvrealloc_node_align_noprof+0x7b/0xe0 [ 566.728112][T17027] krealloc_node_align_noprof+0x11d/0x310 [ 566.728154][T17027] kvrealloc_node_align_noprof+0x7b/0xe0 [ 566.728186][T17027] bpf_iarray_realloc+0x34/0x70 [ 566.728255][T17027] bpf_check+0xf55/0x20e0 [ 566.728284][T17027] bpf_prog_load+0xf52/0x10b0 [ 566.728320][T17027] __sys_bpf+0xbce/0xc50 [ 566.728347][T17027] ? do_futex+0x380/0x460 [ 566.728456][T17027] __x64_sys_bpf+0x69/0x80 [ 566.728478][T17027] x64_sys_call+0xf26/0x2550 [ 566.728528][T17027] do_syscall_64+0x112/0x360 [ 566.728560][T17027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.728619][T17027] RIP: 0033:0x7f70a735f559 [ 566.728636][T17027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.728658][T17027] RSP: 002b:00007f70a5db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.728681][T17027] RAX: ffffffffffffffda RBX: 00007f70a75e5fa0 RCX: 00007f70a735f559 [ 566.728717][T17027] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 566.728800][T17027] RBP: 00007f70a73f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 566.728816][T17027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.728827][T17027] R13: 00007f70a75e6038 R14: 00007f70a75e5fa0 R15: 00007ffe4b9af1e8 [ 566.728847][T17027] [ 566.907145][T17031] loop5: detected capacity change from 0 to 164 [ 568.309181][ T66] hsr_slave_0: left promiscuous mode [ 568.371010][T17042] loop5: detected capacity change from 0 to 164 [ 568.374542][ T29] audit: type=1326 audit(568.521:10835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.0.3527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73e0e6f559 code=0x0 [ 568.462382][ T66] hsr_slave_1: left promiscuous mode [ 568.478167][ T66] veth1_macvtap: left promiscuous mode [ 568.478195][ T66] veth0_macvtap: left promiscuous mode [ 568.478290][ T66] veth1_vlan: left promiscuous mode [ 568.478327][ T66] veth0_vlan: left promiscuous mode [ 569.495907][ T29] audit: type=1400 audit(569.652:10836): avc: denied { write } for pid=17050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.597663][ T66] team0 (unregistering): Port device team_slave_1 removed [ 569.612236][ T66] team0 (unregistering): Port device team_slave_0 removed [ 569.637572][ T29] audit: type=1400 audit(569.792:10837): avc: denied { write } for pid=17073 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 3OL [ 570.067284][ T29] audit: type=1400 audit(570.222:10838): avc: denied { write } for pid=17081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.130151][ T29] audit: type=1400 audit(570.282:10839): avc: denied { write } for pid=17092 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.301886][ T29] audit: type=1400 audit(570.462:10840): avc: denied { write } for pid=17094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.349615][ T29] audit: type=1400 audit(570.502:10841): avc: denied { write } for pid=17105 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.508100][ T29] audit: type=1400 audit(570.662:10842): avc: denied { write } for pid=17107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.563390][ T29] audit: type=1400 audit(570.722:10843): avc: denied { write } for pid=17118 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.723678][ T29] audit: type=1400 audit(570.882:10844): avc: denied { write } for pid=17120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.758950][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3531'. [ 572.865642][T17180] --map-set only usable from mangle table [ 573.419784][T17192] loop5: detected capacity change from 0 to 164 [ 573.946423][ T3373] wacom 0003:056A:0043.003B: Unknown device_type for 'syz0'. Assuming pen. [ 573.952633][ T3373] wacom 0003:056A:0043.003B: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 573.953604][ T3373] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.003B/input/input172 [ 574.093567][ T66] bridge_slave_1: left allmulticast mode [ 574.093602][ T66] bridge_slave_1: left promiscuous mode [ 574.093891][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.118299][ T66] bridge_slave_0: left allmulticast mode [ 574.118317][ T66] bridge_slave_0: left promiscuous mode [ 574.130545][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.251611][T17214] fido_id[17214]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 574.322557][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.326875][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.361428][ T66] bond0 (unregistering): Released all slaves [ 574.445068][ T66] hsr_slave_0: left promiscuous mode [ 574.445371][ T66] hsr_slave_1: left promiscuous mode [ 574.445748][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.445774][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.446334][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.446352][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.453881][ T66] veth1_macvtap: left promiscuous mode [ 574.453982][ T66] veth0_macvtap: left promiscuous mode [ 574.454037][ T66] veth1_vlan: left promiscuous mode [ 574.454075][ T66] veth0_vlan: left promiscuous mode [ 574.547642][T17225] loop5: detected capacity change from 0 to 512 [ 574.555688][T17225] vfat: Unknown parameter ' ' [ 574.602647][T17230] FAULT_INJECTION: forcing a failure. [ 574.602647][T17230] name fail_futex, interval 1, probability 0, space 0, times 1 [ 574.602689][T17230] CPU: 1 UID: 0 PID: 17230 Comm: syz.2.3545 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 574.602732][T17230] Tainted: [W]=WARN [ 574.602743][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 574.602762][T17230] Call Trace: [ 574.602814][T17230] [ 574.602825][T17230] __dump_stack+0x1d/0x30 [ 574.602860][T17230] dump_stack_lvl+0x95/0xd0 [ 574.602949][T17230] dump_stack+0x15/0x1b [ 574.602978][T17230] should_fail_ex+0x259/0x270 [ 574.603092][T17230] should_fail+0xb/0x20 [ 574.603197][T17230] get_futex_key+0x12c/0xc40 [ 574.603226][T17230] ? finish_task_switch+0x121/0x340 [ 574.603334][T17230] ? __css_rstat_updated+0xbb/0x280 [ 574.603378][T17230] futex_wait_setup+0x49/0x3e0 [ 574.603416][T17230] ? __rb_insert_augmented+0x76/0x2c0 [ 574.603465][T17230] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 574.603501][T17230] ? hrtimer_active+0xe7/0x110 [ 574.603600][T17230] __futex_wait+0xb2/0x2a0 [ 574.603654][T17230] ? __pfx_futex_wake_mark+0x10/0x10 [ 574.603755][T17230] futex_wait+0x98/0x1c0 [ 574.603817][T17230] do_futex+0x391/0x460 [ 574.603848][T17230] __se_sys_futex+0x2f6/0x370 [ 574.603883][T17230] __x64_sys_futex+0x78/0x90 [ 574.603965][T17230] x64_sys_call+0x22e2/0x2550 [ 574.604000][T17230] do_syscall_64+0x112/0x360 [ 574.604109][T17230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.604137][T17230] RIP: 0033:0x7fb5c60df559 [ 574.604155][T17230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.604179][T17230] RSP: 002b:00007fb5c4b2f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 574.604247][T17230] RAX: ffffffffffffffda RBX: 00007fb5c6365fa8 RCX: 00007fb5c60df559 [ 574.604264][T17230] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb5c6365fa8 [ 574.604279][T17230] RBP: 00007fb5c6365fa0 R08: 0000000000000000 R09: 0000000000000000 [ 574.604294][T17230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.604310][T17230] R13: 00007fb5c6366038 R14: 00007ffc25a5d2e0 R15: 00007ffc25a5d3c8 [ 574.604386][T17230] [ 574.878597][ T66] team0 (unregistering): Port device team_slave_1 removed [ 574.887098][ T66] team0 (unregistering): Port device team_slave_0 removed [ 574.949613][T17235] --map-set only usable from mangle table [ 574.973969][T17231] loop5: detected capacity change from 0 to 32768 [ 574.996325][T17231] loop5: p1 p3 < > [ 575.103335][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 575.495222][T17257] FAULT_INJECTION: forcing a failure. [ 575.495222][T17257] name failslab, interval 1, probability 0, space 0, times 0 [ 575.495253][T17257] CPU: 0 UID: 0 PID: 17257 Comm: syz.5.3554 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 575.495286][T17257] Tainted: [W]=WARN [ 575.495293][T17257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 575.495366][T17257] Call Trace: [ 575.495406][T17257] [ 575.495417][T17257] __dump_stack+0x1d/0x30 [ 575.495477][T17257] dump_stack_lvl+0x95/0xd0 [ 575.495509][T17257] dump_stack+0x15/0x1b [ 575.495531][T17257] should_fail_ex+0x259/0x270 [ 575.495594][T17257] ? mempool_init_node+0xb3/0x260 [ 575.495652][T17257] should_failslab+0x8c/0xb0 [ 575.495689][T17257] __kmalloc_node_noprof+0xb8/0x4d0 [ 575.495731][T17257] ? pcpu_alloc_area+0x49c/0x4c0 [ 575.495769][T17257] ? mempool_init_node+0xb3/0x260 [ 575.495818][T17257] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 575.495846][T17257] mempool_init_node+0xb3/0x260 [ 575.495875][T17257] ? __rcu_read_unlock+0x4e/0x70 [ 575.495925][T17257] ? __pfx_mempool_free_slab+0x10/0x10 [ 575.495975][T17257] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 575.496013][T17257] mempool_init_noprof+0x3a/0x50 [ 575.496068][T17257] bioset_init+0x177/0x480 [ 575.496104][T17257] ? __alloc_disk_node+0x3c/0x2f0 [ 575.496141][T17257] __alloc_disk_node+0x59/0x2f0 [ 575.496197][T17257] __blk_alloc_disk+0x68/0xd0 [ 575.496235][T17257] dm_create+0x36d/0x850 [ 575.496326][T17257] dev_create+0x141/0x290 [ 575.496355][T17257] dm_ctl_ioctl+0x80b/0xad0 [ 575.496389][T17257] ? __pfx_dev_create+0x10/0x10 [ 575.496428][T17257] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 575.496500][T17257] __se_sys_ioctl+0xce/0x140 [ 575.496542][T17257] __x64_sys_ioctl+0x43/0x50 [ 575.496585][T17257] x64_sys_call+0x239d/0x2550 [ 575.496623][T17257] do_syscall_64+0x112/0x360 [ 575.496665][T17257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.496691][T17257] RIP: 0033:0x7f595f32f559 [ 575.496753][T17257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.496780][T17257] RSP: 002b:00007f595dd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.496809][T17257] RAX: ffffffffffffffda RBX: 00007f595f5b5fa0 RCX: 00007f595f32f559 [ 575.496827][T17257] RDX: 0000200000000580 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 575.496841][T17257] RBP: 00007f595f3c6b50 R08: 0000000000000000 R09: 0000000000000000 [ 575.496855][T17257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.496913][T17257] R13: 00007f595f5b6038 R14: 00007f595f5b5fa0 R15: 00007ffd5dda4ef8 [ 575.496935][T17257] [ 575.725656][T17252] --map-set only usable from mangle table [ 576.971904][T17272] --map-set only usable from mangle table 3OL [ 577.226088][T17289] FAULT_INJECTION: forcing a failure. [ 577.226088][T17289] name failslab, interval 1, probability 0, space 0, times 0 [ 577.226147][T17289] CPU: 0 UID: 0 PID: 17289 Comm: syz.5.3564 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 577.226182][T17289] Tainted: [W]=WARN [ 577.226190][T17289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 577.226226][T17289] Call Trace: [ 577.226232][T17289] [ 577.226239][T17289] __dump_stack+0x1d/0x30 [ 577.226264][T17289] dump_stack_lvl+0x95/0xd0 [ 577.226366][T17289] dump_stack+0x15/0x1b [ 577.226390][T17289] should_fail_ex+0x259/0x270 [ 577.226424][T17289] should_failslab+0x8c/0xb0 [ 577.226520][T17289] __kvmalloc_node_noprof+0x14f/0x5b0 [ 577.226561][T17289] ? bpf_check+0x10ae/0x20e0 [ 577.226585][T17289] ? bpf_check+0x10ae/0x20e0 [ 577.226606][T17289] bpf_check+0x10ae/0x20e0 [ 577.226702][T17289] bpf_prog_load+0xf52/0x10b0 [ 577.226729][T17289] __sys_bpf+0xbce/0xc50 [ 577.226752][T17289] ? do_futex+0x380/0x460 [ 577.226787][T17289] __x64_sys_bpf+0x69/0x80 [ 577.226813][T17289] x64_sys_call+0xf26/0x2550 [ 577.226844][T17289] do_syscall_64+0x112/0x360 [ 577.226873][T17289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.226893][T17289] RIP: 0033:0x7f595f32f559 [ 577.226954][T17289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.226971][T17289] RSP: 002b:00007f595dd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.226988][T17289] RAX: ffffffffffffffda RBX: 00007f595f5b5fa0 RCX: 00007f595f32f559 [ 577.227068][T17289] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 577.227080][T17289] RBP: 00007f595f3c6b50 R08: 0000000000000000 R09: 0000000000000000 [ 577.227103][T17289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.227119][T17289] R13: 00007f595f5b6038 R14: 00007f595f5b5fa0 R15: 00007ffd5dda4ef8 [ 577.227139][T17289] [ 577.281705][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 577.441110][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 577.441127][ T29] audit: type=1326 audit(577.605:10852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17295 comm="syz.5.3566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f595f32f559 code=0x0 [ 578.141860][ T29] audit: type=1326 audit(578.296:10853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17309 comm="syz.1.3570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a735f559 code=0x0 [ 580.821329][ T5685] wacom 0003:056A:0043.003C: Unknown device_type for 'syz0'. Assuming pen. [ 580.823459][ T5685] wacom 0003:056A:0043.003C: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 580.824150][ T5685] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.003C/input/input175 [ 580.943639][ T3373] wacom 0003:056A:0043.003D: Unknown device_type for 'syz0'. Assuming pen. [ 580.944080][ T3373] wacom 0003:056A:0043.003D: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 580.944583][ T3373] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.003D/input/input178 [ 581.020080][T17323] fido_id[17323]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 581.111537][T17332] fido_id[17332]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 581.134033][T17336] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3576'. [ 584.054661][T17341] FAULT_INJECTION: forcing a failure. [ 584.054661][T17341] name failslab, interval 1, probability 0, space 0, times 0 [ 584.054698][T17341] CPU: 1 UID: 0 PID: 17341 Comm: syz.5.3579 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 584.054784][T17341] Tainted: [W]=WARN [ 584.054794][T17341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 584.054812][T17341] Call Trace: [ 584.054820][T17341] [ 584.054829][T17341] __dump_stack+0x1d/0x30 [ 584.054893][T17341] dump_stack_lvl+0x95/0xd0 [ 584.054920][T17341] dump_stack+0x15/0x1b [ 584.054946][T17341] should_fail_ex+0x259/0x270 [ 584.055054][T17341] ? __get_vm_area_node+0x125/0x1f0 [ 584.055091][T17341] should_failslab+0x8c/0xb0 [ 584.055128][T17341] __kmalloc_cache_node_noprof+0x5f/0x3f0 [ 584.055252][T17341] ? __alloc_frozen_pages_noprof+0x1fd/0x3d0 [ 584.055289][T17341] ? __get_vm_area_node+0x125/0x1f0 [ 584.055327][T17341] __get_vm_area_node+0x125/0x1f0 [ 584.055391][T17341] __vmalloc_node_range_noprof+0x2aa/0x10e0 [ 584.055451][T17341] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 584.055594][T17341] ? __account_obj_stock+0x27f/0x2d0 [ 584.055627][T17341] ? __rcu_read_unlock+0x4e/0x70 [ 584.055667][T17341] ? __memcg_slab_post_alloc_hook+0x35e/0x8c0 [ 584.055712][T17341] ? __account_obj_stock+0x27f/0x2d0 [ 584.055747][T17341] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 584.055828][T17341] __vmalloc_noprof+0xa4/0xf0 [ 584.055868][T17341] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 584.055912][T17341] bpf_prog_calc_tag+0x3b/0x1e0 [ 584.056072][T17341] ? bpf_check_btf_info+0x372/0xe30 [ 584.056116][T17341] check_and_resolve_insns+0x48/0x1900 [ 584.056148][T17341] ? check_subprogs+0x2a4/0x380 [ 584.056192][T17341] bpf_check+0x12c6/0x20e0 [ 584.056229][T17341] bpf_prog_load+0xf52/0x10b0 [ 584.056274][T17341] __sys_bpf+0xbce/0xc50 [ 584.056316][T17341] ? do_futex+0x380/0x460 [ 584.056353][T17341] __x64_sys_bpf+0x69/0x80 [ 584.056378][T17341] x64_sys_call+0xf26/0x2550 [ 584.056413][T17341] do_syscall_64+0x112/0x360 [ 584.056610][T17341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.056636][T17341] RIP: 0033:0x7f595f32f559 [ 584.056672][T17341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.056696][T17341] RSP: 002b:00007f595dd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.056789][T17341] RAX: ffffffffffffffda RBX: 00007f595f5b5fa0 RCX: 00007f595f32f559 [ 584.056856][T17341] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 584.056872][T17341] RBP: 00007f595f3c6b50 R08: 0000000000000000 R09: 0000000000000000 [ 584.056888][T17341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.056901][T17341] R13: 00007f595f5b6038 R14: 00007f595f5b5fa0 R15: 00007ffd5dda4ef8 [ 584.056960][T17341] [ 584.059568][T17341] syz.5.3579: vmalloc error: size 64, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 584.059694][T17341] CPU: 1 UID: 0 PID: 17341 Comm: syz.5.3579 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 584.059728][T17341] Tainted: [W]=WARN [ 584.059738][T17341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 584.059753][T17341] Call Trace: [ 584.059816][T17341] [ 584.059826][T17341] __dump_stack+0x1d/0x30 [ 584.059855][T17341] dump_stack_lvl+0x95/0xd0 [ 584.059966][T17341] dump_stack+0x15/0x1b [ 584.059992][T17341] warn_alloc+0x146/0x1c0 [ 584.060109][T17341] __vmalloc_node_range_noprof+0x2d2/0x10e0 [ 584.060152][T17341] ? __account_obj_stock+0x27f/0x2d0 [ 584.060185][T17341] ? __rcu_read_unlock+0x4e/0x70 [ 584.060247][T17341] ? __memcg_slab_post_alloc_hook+0x35e/0x8c0 [ 584.060281][T17341] ? __account_obj_stock+0x27f/0x2d0 [ 584.060311][T17341] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 584.060399][T17341] __vmalloc_noprof+0xa4/0xf0 [ 584.060436][T17341] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 584.060545][T17341] bpf_prog_calc_tag+0x3b/0x1e0 [ 584.060624][T17341] ? bpf_check_btf_info+0x372/0xe30 [ 584.060665][T17341] check_and_resolve_insns+0x48/0x1900 [ 584.060767][T17341] ? check_subprogs+0x2a4/0x380 [ 584.060804][T17341] bpf_check+0x12c6/0x20e0 [ 584.060889][T17341] bpf_prog_load+0xf52/0x10b0 [ 584.060934][T17341] __sys_bpf+0xbce/0xc50 [ 584.060967][T17341] ? do_futex+0x380/0x460 [ 584.061005][T17341] __x64_sys_bpf+0x69/0x80 [ 584.061032][T17341] x64_sys_call+0xf26/0x2550 [ 584.061210][T17341] do_syscall_64+0x112/0x360 [ 584.061256][T17341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.061290][T17341] RIP: 0033:0x7f595f32f559 [ 584.061312][T17341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.061408][T17341] RSP: 002b:00007f595dd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.061436][T17341] RAX: ffffffffffffffda RBX: 00007f595f5b5fa0 RCX: 00007f595f32f559 [ 584.061457][T17341] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 584.061477][T17341] RBP: 00007f595f3c6b50 R08: 0000000000000000 R09: 0000000000000000 [ 584.061568][T17341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.061586][T17341] R13: 00007f595f5b6038 R14: 00007f595f5b5fa0 R15: 00007ffd5dda4ef8 [ 584.061617][T17341] [ 584.075942][T17341] Mem-Info: [ 584.075979][T17341] active_anon:11099 inactive_anon:9 isolated_anon:0 [ 584.075979][T17341] active_file:792 inactive_file:14865 isolated_file:0 [ 584.075979][T17341] unevictable:0 dirty:267 writeback:0 [ 584.075979][T17341] slab_reclaimable:4261 slab_unreclaimable:30973 [ 584.075979][T17341] mapped:30313 shmem:3065 pagetables:3880 [ 584.075979][T17341] sec_pagetables:0 bounce:0 [ 584.075979][T17341] kernel_misc_reclaimable:0 [ 584.075979][T17341] free:1867376 free_pcp:1950 free_cma:0 [ 584.076343][T17341] Node 0 active_anon:44396kB inactive_anon:36kB active_file:3168kB inactive_file:59460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121252kB dirty:1068kB writeback:0kB shmem:12260kB kernel_stack:4816kB pagetables:15520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 584.076609][T17341] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.076907][T17341] lowmem_reserve[]: 0 2877 7856 7856 [ 584.077014][T17341] Node 0 DMA32 free:2942976kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946500kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 584.077230][T17341] lowmem_reserve[]: 0 0 4978 4978 [ 584.077301][T17341] Node 0 Normal free:4511168kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44396kB inactive_anon:36kB active_file:3168kB inactive_file:59460kB unevictable:0kB writepending:1068kB zspages:0kB present:5242880kB managed:5098212kB mlocked:0kB bounce:0kB free_pcp:4276kB local_pcp:1252kB free_cma:0kB [ 584.086095][T17341] lowmem_reserve[]: 0 0 0 0 [ 584.086256][T17341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 584.086707][T17341] Node 0 DMA32: 4*4kB (M) 0*8kB 3*16kB (M) 4*32kB (M) 1*64kB (M) 2*128kB (M) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2942976kB [ 584.087112][T17341] Node 0 Normal: 2355*4kB (UME) 1260*8kB (UME) 866*16kB (UME) 659*32kB (UME) 392*64kB (UME) 148*128kB (UM) 43*256kB (UM) 21*512kB (UME) 24*1024kB (UM) 12*2048kB (UME) 1060*4096kB (UM) = 4511148kB [ 584.091523][T17341] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 584.091584][T17341] 18707 total pagecache pages [ 584.091696][T17341] 0 pages in swap cache [ 584.091721][T17341] Free swap = 124996kB [ 584.091734][T17341] Total swap = 124996kB [ 584.091776][T17341] 2097051 pages RAM [ 584.091782][T17341] 0 pages HighMem/MovableOnly [ 584.091797][T17341] 82033 pages reserved [ 584.122203][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'. [ 584.134021][ T29] audit: type=1326 audit(584.299:10854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17343 comm="syz.2.3580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5c60df559 code=0x0 [ 584.606775][ T29] audit: type=1326 audit(584.779:10855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17352 comm="syz.0.3581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73e0e6f559 code=0x0 [ 584.616883][T17355] loop5: detected capacity change from 0 to 164 [ 585.365208][T17362] FAULT_INJECTION: forcing a failure. [ 585.365208][T17362] name fail_futex, interval 1, probability 0, space 0, times 0 [ 585.365246][T17362] CPU: 0 UID: 0 PID: 17362 Comm: syz.3.3586 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 585.365302][T17362] Tainted: [W]=WARN [ 585.365309][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 585.365321][T17362] Call Trace: [ 585.365328][T17362] [ 585.365336][T17362] __dump_stack+0x1d/0x30 [ 585.365368][T17362] dump_stack_lvl+0x95/0xd0 [ 585.365396][T17362] dump_stack+0x15/0x1b [ 585.365457][T17362] should_fail_ex+0x259/0x270 [ 585.365481][T17362] should_fail+0xb/0x20 [ 585.365529][T17362] get_futex_key+0x12c/0xc40 [ 585.365553][T17362] ? put_fs_context+0x4d6/0x530 [ 585.365690][T17362] ? put_fs_context+0x4d6/0x530 [ 585.365769][T17362] futex_wake+0x89/0x400 [ 585.365804][T17362] do_futex+0x3f8/0x460 [ 585.365825][T17362] __se_sys_futex+0x2f6/0x370 [ 585.365923][T17362] ? __se_sys_mount+0x2b0/0x2e0 [ 585.365990][T17362] __x64_sys_futex+0x78/0x90 [ 585.366019][T17362] x64_sys_call+0x22e2/0x2550 [ 585.366050][T17362] do_syscall_64+0x112/0x360 [ 585.366126][T17362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.366217][T17362] RIP: 0033:0x7f8ac355f559 [ 585.366275][T17362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.366291][T17362] RSP: 002b:00007f8ac1fb70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 585.366308][T17362] RAX: ffffffffffffffda RBX: 00007f8ac37e5fa8 RCX: 00007f8ac355f559 [ 585.366322][T17362] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ac37e5fac [ 585.366338][T17362] RBP: 00007f8ac37e5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 585.366419][T17362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.366434][T17362] R13: 00007f8ac37e6038 R14: 00007ffeca62d070 R15: 00007ffeca62d158 [ 585.366458][T17362] [ 585.776521][ T3380] wacom 0003:056A:0043.003E: Unknown device_type for 'syz0'. Assuming pen. [ 585.792719][ T3380] wacom 0003:056A:0043.003E: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 585.793382][ T3380] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.003E/input/input181 [ 585.873899][ T3373] wacom 0003:056A:0043.003F: Unknown device_type for 'syz0'. Assuming pen. [ 585.879520][T17377] fido_id[17377]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 585.905403][ T3373] wacom 0003:056A:0043.003F: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 585.906204][ T3373] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.003F/input/input184 [ 585.980112][T17381] fido_id[17381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 586.101878][T17389] loop5: detected capacity change from 0 to 128 [ 586.143712][T17389] xt_ecn: cannot match TCP bits for non-tcp packets [ 586.665337][T17398] xt_ecn: cannot match TCP bits for non-tcp packets [ 588.012374][T17412] --map-set only usable from mangle table 3OL [ 589.347083][T17433] --map-set only usable from mangle table [ 590.182671][T17447] loop5: detected capacity change from 0 to 512 [ 590.189679][T17447] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 590.276251][ T5700] wacom 0003:056A:0043.0040: Unknown device_type for 'syz0'. Assuming pen. [ 590.278202][ T5700] wacom 0003:056A:0043.0040: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 590.278748][ T5700] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0040/input/input187 [ 590.351219][T17455] program syz.5.3611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.893505][T17459] xt_ecn: cannot match TCP bits for non-tcp packets [ 591.197543][T17461] --map-set only usable from mangle table [ 591.274201][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3609'. [ 591.866159][T17472] --map-set only usable from mangle table [ 591.926438][ T29] audit: type=1326 audit(592.093:10856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17476 comm="syz.2.3619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5c60df559 code=0x0 [ 591.983999][T17482] loop5: detected capacity change from 0 to 512 [ 591.984311][T17482] vfat: Unknown parameter ' [ 591.984311][T17482] ' [ 592.158756][T17482] loop5: detected capacity change from 0 to 32768 [ 592.171159][T17482] loop5: p1 p3 < > 3OL [ 593.134395][T17497] loop5: detected capacity change from 0 to 128 [ 593.218137][ T5685] wacom 0003:056A:0043.0041: Unknown device_type for 'syz0'. Assuming pen. [ 593.296786][T17327] udevd[17327]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 593.298581][ T5685] wacom 0003:056A:0043.0041: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 593.299063][ T5685] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0041/input/input190 [ 593.349714][T17320] udevd[17320]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 593.423367][ T29] audit: type=1326 audit(593.593:10857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.3.3623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac355f559 code=0x0 [ 593.468824][ T5685] wacom 0003:056A:0043.0042: Unknown device_type for 'syz0'. Assuming pen. [ 593.472085][ T5685] wacom 0003:056A:0043.0042: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 593.472618][ T5685] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0042/input/input193 [ 593.523752][T17512] fido_id[17512]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 594.616169][T17516] --map-set only usable from mangle table [ 594.648737][T17520] xt_ecn: cannot match TCP bits for non-tcp packets [ 594.686373][T17524] --map-set only usable from mangle table [ 595.260104][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3627'. [ 595.384320][T17531] --map-set only usable from mangle table [ 595.591872][T17538] loop5: detected capacity change from 0 to 128 [ 595.910785][T17537] xt_ecn: cannot match TCP bits for non-tcp packets [ 596.481076][T17547] --map-set only usable from mangle table [ 597.029504][ T5700] wacom 0003:056A:0043.0043: Unknown device_type for 'syz0'. Assuming pen. [ 597.030868][ T5700] wacom 0003:056A:0043.0043: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 597.032693][ T5700] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0043/input/input196 [ 597.165589][T17562] fido_id[17562]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 597.211532][T17567] FAULT_INJECTION: forcing a failure. [ 597.211532][T17567] name failslab, interval 1, probability 0, space 0, times 0 [ 597.211569][T17567] CPU: 1 UID: 0 PID: 17567 Comm: syz.1.3643 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 597.211690][T17567] Tainted: [W]=WARN [ 597.211700][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 597.211715][T17567] Call Trace: [ 597.211721][T17567] [ 597.211729][T17567] __dump_stack+0x1d/0x30 [ 597.211767][T17567] dump_stack_lvl+0x95/0xd0 [ 597.211795][T17567] dump_stack+0x15/0x1b [ 597.211822][T17567] should_fail_ex+0x259/0x270 [ 597.211869][T17567] ? __get_vm_area_node+0x125/0x1f0 [ 597.211902][T17567] should_failslab+0x8c/0xb0 [ 597.212032][T17567] __kmalloc_cache_node_noprof+0x5f/0x3f0 [ 597.212071][T17567] ? __alloc_frozen_pages_noprof+0x1fd/0x3d0 [ 597.212187][T17567] ? __get_vm_area_node+0x125/0x1f0 [ 597.212231][T17567] __get_vm_area_node+0x125/0x1f0 [ 597.212327][T17567] __vmalloc_node_range_noprof+0x2aa/0x10e0 [ 597.212368][T17567] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 597.212454][T17567] ? __account_obj_stock+0x27f/0x2d0 [ 597.212484][T17567] ? __rcu_read_unlock+0x4e/0x70 [ 597.212544][T17567] ? __memcg_slab_post_alloc_hook+0x35e/0x8c0 [ 597.212578][T17567] ? __account_obj_stock+0x27f/0x2d0 [ 597.212656][T17567] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 597.212736][T17567] __vmalloc_noprof+0xa4/0xf0 [ 597.212853][T17567] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 597.212897][T17567] bpf_prog_calc_tag+0x3b/0x1e0 [ 597.212946][T17567] ? bpf_check_btf_info+0x372/0xe30 [ 597.213058][T17567] check_and_resolve_insns+0x48/0x1900 [ 597.213085][T17567] ? check_subprogs+0x2a4/0x380 [ 597.213117][T17567] bpf_check+0x12c6/0x20e0 [ 597.213206][T17567] bpf_prog_load+0xf52/0x10b0 [ 597.213245][T17567] __sys_bpf+0xbce/0xc50 [ 597.213347][T17567] ? do_futex+0x380/0x460 [ 597.213379][T17567] __x64_sys_bpf+0x69/0x80 [ 597.213403][T17567] x64_sys_call+0xf26/0x2550 [ 597.213434][T17567] do_syscall_64+0x112/0x360 [ 597.213482][T17567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.213510][T17567] RIP: 0033:0x7f70a735f559 [ 597.213532][T17567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.213556][T17567] RSP: 002b:00007f70a5db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.213640][T17567] RAX: ffffffffffffffda RBX: 00007f70a75e5fa0 RCX: 00007f70a735f559 [ 597.213659][T17567] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 597.213677][T17567] RBP: 00007f70a73f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 597.213693][T17567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.213725][T17567] R13: 00007f70a75e6038 R14: 00007f70a75e5fa0 R15: 00007ffe4b9af1e8 [ 597.213795][T17567] [ 597.213842][T17567] syz.1.3643: vmalloc error: size 24, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 597.213935][T17567] CPU: 1 UID: 0 PID: 17567 Comm: syz.1.3643 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 597.214047][T17567] Tainted: [W]=WARN [ 597.214054][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 597.214104][T17567] Call Trace: [ 597.214112][T17567] [ 597.214120][T17567] __dump_stack+0x1d/0x30 [ 597.214228][T17567] dump_stack_lvl+0x95/0xd0 [ 597.214257][T17567] dump_stack+0x15/0x1b [ 597.214343][T17567] warn_alloc+0x146/0x1c0 [ 597.214393][T17567] __vmalloc_node_range_noprof+0x2d2/0x10e0 [ 597.214434][T17567] ? __account_obj_stock+0x27f/0x2d0 [ 597.214471][T17567] ? __rcu_read_unlock+0x4e/0x70 [ 597.214503][T17567] ? __memcg_slab_post_alloc_hook+0x35e/0x8c0 [ 597.214536][T17567] ? __account_obj_stock+0x27f/0x2d0 [ 597.214572][T17567] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 597.214677][T17567] __vmalloc_noprof+0xa4/0xf0 [ 597.214720][T17567] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 597.214762][T17567] bpf_prog_calc_tag+0x3b/0x1e0 [ 597.214876][T17567] ? bpf_check_btf_info+0x372/0xe30 [ 597.214925][T17567] check_and_resolve_insns+0x48/0x1900 [ 597.215043][T17567] ? check_subprogs+0x2a4/0x380 [ 597.215098][T17567] bpf_check+0x12c6/0x20e0 [ 597.215136][T17567] bpf_prog_load+0xf52/0x10b0 [ 597.215178][T17567] __sys_bpf+0xbce/0xc50 [ 597.215233][T17567] ? do_futex+0x380/0x460 [ 597.215272][T17567] __x64_sys_bpf+0x69/0x80 [ 597.215298][T17567] x64_sys_call+0xf26/0x2550 [ 597.215397][T17567] do_syscall_64+0x112/0x360 [ 597.215433][T17567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.215463][T17567] RIP: 0033:0x7f70a735f559 [ 597.215497][T17567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 3OL [ 597.215521][T17567] RSP: 002b:00007f70a5db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.215547][T17567] RAX: ffffffffffffffda RBX: 00007f70a75e5fa0 RCX: 00007f70a735f559 [ 597.215562][T17567] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 597.215605][T17567] RBP: 00007f70a73f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 597.215623][T17567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.215639][T17567] R13: 00007f70a75e6038 R14: 00007f70a75e5fa0 R15: 00007ffe4b9af1e8 [ 597.215664][T17567] [ 597.223572][T17567] Mem-Info: [ 597.223593][T17567] active_anon:9413 inactive_anon:9 isolated_anon:0 [ 597.223593][T17567] active_file:792 inactive_file:14871 isolated_file:0 [ 597.223593][T17567] unevictable:1308 dirty:306 writeback:0 [ 597.223593][T17567] slab_reclaimable:4261 slab_unreclaimable:31001 [ 597.223593][T17567] mapped:30377 shmem:196 pagetables:3846 [ 597.223593][T17567] sec_pagetables:0 bounce:0 [ 597.223593][T17567] kernel_misc_reclaimable:0 [ 597.223593][T17567] free:1858159 free_pcp:11579 free_cma:0 [ 597.223798][T17567] Node 0 active_anon:37652kB inactive_anon:36kB active_file:3168kB inactive_file:59484kB unevictable:5232kB isolated(anon):0kB isolated(file):0kB mapped:121508kB dirty:1224kB writeback:0kB shmem:784kB kernel_stack:4880kB pagetables:15384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 597.224039][T17567] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 597.224263][T17567] lowmem_reserve[]: 0 2877 7856 7856 [ 597.224293][T17567] Node 0 DMA32 free:2942976kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946500kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 597.224474][T17567] lowmem_reserve[]: 0 0 4978 4978 [ 597.224605][T17567] Node 0 Normal free:4474300kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37652kB inactive_anon:36kB active_file:3168kB inactive_file:59484kB unevictable:5232kB writepending:1224kB zspages:0kB present:5242880kB managed:5098212kB mlocked:5232kB bounce:0kB free_pcp:42792kB local_pcp:23300kB free_cma:0kB [ 597.224876][T17567] lowmem_reserve[]: 0 0 0 0 [ 597.230706][T17567] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 597.231136][T17567] Node 0 DMA32: 4*4kB (M) 0*8kB 3*16kB (M) 4*32kB (M) 1*64kB (M) 2*128kB (M) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2942976kB [ 597.231695][T17567] Node 0 Normal: 685*4kB (UME) 317*8kB (UME) 196*16kB (UE) 285*32kB (UME) 393*64kB (UME) 148*128kB (UM) 43*256kB (UM) 21*512kB (UME) 24*1024kB (UM) 12*2048kB (UME) 1060*4096kB (UM) = 4474300kB [ 597.244913][T17567] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 597.244994][T17567] 15842 total pagecache pages [ 597.245018][T17567] 0 pages in swap cache [ 597.245036][T17567] Free swap = 124996kB [ 597.245055][T17567] Total swap = 124996kB [ 597.245080][T17567] 2097051 pages RAM [ 597.245098][T17567] 0 pages HighMem/MovableOnly [ 597.245117][T17567] 82033 pages reserved [ 597.372105][T17570] FAULT_INJECTION: forcing a failure. [ 597.372105][T17570] name failslab, interval 1, probability 0, space 0, times 0 [ 597.372137][T17570] CPU: 1 UID: 0 PID: 17570 Comm: syz.5.3644 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 597.372217][T17570] Tainted: [W]=WARN [ 597.372225][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 597.372239][T17570] Call Trace: [ 597.372246][T17570] [ 597.372254][T17570] __dump_stack+0x1d/0x30 [ 597.372282][T17570] dump_stack_lvl+0x95/0xd0 [ 597.372358][T17570] dump_stack+0x15/0x1b [ 597.372438][T17570] should_fail_ex+0x259/0x270 [ 597.372470][T17570] ? __get_vm_area_node+0x125/0x1f0 [ 597.372503][T17570] should_failslab+0x8c/0xb0 [ 597.372600][T17570] __kmalloc_cache_node_noprof+0x5f/0x3f0 [ 597.372707][T17570] ? __alloc_frozen_pages_noprof+0x1fd/0x3d0 [ 597.372765][T17570] ? __get_vm_area_node+0x125/0x1f0 [ 597.372803][T17570] __get_vm_area_node+0x125/0x1f0 [ 597.372963][T17570] __vmalloc_node_range_noprof+0x2aa/0x10e0 [ 597.372999][T17570] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 597.373137][T17570] ? __account_obj_stock+0x27f/0x2d0 [ 597.373167][T17570] ? __rcu_read_unlock+0x4e/0x70 [ 597.373197][T17570] ? __memcg_slab_post_alloc_hook+0x35e/0x8c0 [ 597.373229][T17570] ? __account_obj_stock+0x27f/0x2d0 [ 597.373308][T17570] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 597.373346][T17570] __vmalloc_noprof+0xa4/0xf0 [ 597.373406][T17570] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 597.373446][T17570] bpf_prog_calc_tag+0x3b/0x1e0 [ 597.373503][T17570] ? bpf_check_btf_info+0x372/0xe30 [ 597.373542][T17570] check_and_resolve_insns+0x48/0x1900 [ 597.373573][T17570] ? check_subprogs+0x2a4/0x380 [ 597.373605][T17570] bpf_check+0x12c6/0x20e0 [ 597.373675][T17570] bpf_prog_load+0xf52/0x10b0 [ 597.373708][T17570] __sys_bpf+0xbce/0xc50 [ 597.373734][T17570] ? do_futex+0x380/0x460 [ 597.373770][T17570] __x64_sys_bpf+0x69/0x80 [ 597.373791][T17570] x64_sys_call+0xf26/0x2550 [ 597.373821][T17570] do_syscall_64+0x112/0x360 [ 597.373858][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.373953][T17570] RIP: 0033:0x7f595f32f559 [ 597.373970][T17570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.373991][T17570] RSP: 002b:00007f595dd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.374051][T17570] RAX: ffffffffffffffda RBX: 00007f595f5b5fa0 RCX: 00007f595f32f559 [ 597.374068][T17570] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 597.374082][T17570] RBP: 00007f595f3c6b50 R08: 0000000000000000 R09: 0000000000000000 [ 597.374097][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.374118][T17570] R13: 00007f595f5b6038 R14: 00007f595f5b5fa0 R15: 00007ffd5dda4ef8 [ 597.374140][T17570] [ 599.220773][T17591] --map-set only usable from mangle table [ 599.496856][T17599] --map-set only usable from mangle table [ 599.524832][T17603] xt_ecn: cannot match TCP bits for non-tcp packets [ 599.602257][T17609] program syz.2.3655 is using a deprecated SCSI ioctl, please convert it to SG_IO 3OL [ 599.861506][T17613] loop5: detected capacity change from 0 to 512 [ 599.862512][T17613] vfat: Unknown parameter ' [ 599.862512][T17613] ' [ 600.091466][T17603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3654'. [ 600.402826][T17621] --map-set only usable from mangle table [ 600.549654][T17613] loop5: detected capacity change from 0 to 32768 [ 601.178232][T17613] loop5: p1 p3 < > [ 601.409908][ T5685] wacom 0003:056A:0043.0044: Unknown device_type for 'syz0'. Assuming pen. [ 601.410402][ T5685] wacom 0003:056A:0043.0044: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 601.410870][ T5685] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0044/input/input199 [ 601.470677][T17633] fido_id[17633]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 601.949975][T17644] xt_ecn: cannot match TCP bits for non-tcp packets [ 602.770662][T17659] --map-set only usable from mangle table [ 602.843302][T17663] program syz.0.3670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.103595][T17686] --map-set only usable from mangle table [ 604.905775][T17702] program syz.0.3679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 605.895060][ T3380] wacom 0003:056A:0043.0045: Unknown device_type for 'syz0'. Assuming pen. [ 605.897106][ T3380] wacom 0003:056A:0043.0045: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 605.897597][ T3380] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0045/input/input202 [ 606.141010][T17726] program syz.2.3683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.283610][T17730] program syz.1.3684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.704039][T17734] loop5: detected capacity change from 0 to 164 [ 606.781127][T17732] --map-set only usable from mangle table [ 607.148665][ T5700] wacom 0003:056A:0043.0046: Unknown device_type for 'syz0'. Assuming pen. [ 607.149515][ T5700] wacom 0003:056A:0043.0046: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 607.149981][ T5700] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0046/input/input205 [ 607.609222][T17743] --map-set only usable from mangle table [ 608.248957][T17752] xt_ecn: cannot match TCP bits for non-tcp packets [ 608.842830][T17752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3691'. [ 609.222882][T17771] loop5: detected capacity change from 0 to 128 [ 609.611887][T17771] xt_ecn: cannot match TCP bits for non-tcp packets [ 610.877496][T17771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3695'. [ 612.429493][T17789] program syz.1.3698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.218397][ T3373] wacom 0003:056A:0043.0047: Unknown device_type for 'syz0'. Assuming pen. [ 613.218754][ T3373] wacom 0003:056A:0043.0047: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 613.219583][ T3373] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0047/input/input208 [ 613.277584][T17800] fido_id[17800]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 613.600232][T17809] program syz.5.3700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.796106][T17815] FAULT_INJECTION: forcing a failure. [ 613.796106][T17815] name failslab, interval 1, probability 0, space 0, times 0 [ 613.796142][T17815] CPU: 1 UID: 0 PID: 17815 Comm: syz.0.3705 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 613.796249][T17815] Tainted: [W]=WARN [ 613.796257][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 613.796270][T17815] Call Trace: [ 613.796276][T17815] [ 613.796286][T17815] __dump_stack+0x1d/0x30 [ 613.796322][T17815] dump_stack_lvl+0x95/0xd0 [ 613.796344][T17815] dump_stack+0x15/0x1b [ 613.796386][T17815] should_fail_ex+0x259/0x270 [ 613.796421][T17815] ? kvrealloc_node_align_noprof+0x7b/0xe0 [ 613.796484][T17815] should_failslab+0x8c/0xb0 [ 613.796544][T17815] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 613.796609][T17815] ? kvrealloc_node_align_noprof+0x7b/0xe0 [ 613.796654][T17815] krealloc_node_align_noprof+0x11d/0x310 [ 613.796699][T17815] kvrealloc_node_align_noprof+0x7b/0xe0 [ 613.796739][T17815] bpf_iarray_realloc+0x34/0x70 [ 613.796785][T17815] bpf_check+0xf55/0x20e0 [ 613.796830][T17815] bpf_prog_load+0xf52/0x10b0 [ 613.796863][T17815] __sys_bpf+0xbce/0xc50 [ 613.796894][T17815] ? do_futex+0x380/0x460 [ 613.796989][T17815] __x64_sys_bpf+0x69/0x80 [ 613.797009][T17815] x64_sys_call+0xf26/0x2550 [ 613.797036][T17815] do_syscall_64+0x112/0x360 [ 613.797080][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.797108][T17815] RIP: 0033:0x7f73e0e6f559 [ 613.797136][T17815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.797160][T17815] RSP: 002b:00007f73df8c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 613.797233][T17815] RAX: ffffffffffffffda RBX: 00007f73e10f5fa0 RCX: 00007f73e0e6f559 [ 613.797253][T17815] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 613.797272][T17815] RBP: 00007f73e0f06b50 R08: 0000000000000000 R09: 0000000000000000 [ 613.797290][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.797308][T17815] R13: 00007f73e10f6038 R14: 00007f73e10f5fa0 R15: 00007ffe8344ae48 [ 613.797334][T17815] [ 614.390735][T17832] --map-set only usable from mangle table [ 614.806242][T17845] --map-set only usable from mangle table [ 614.973419][T17849] xt_ecn: cannot match TCP bits for non-tcp packets [ 615.501496][T17863] program syz.5.3719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.995514][T17868] program syz.2.3720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.426064][T17871] loop5: detected capacity change from 0 to 164 [ 616.729350][ T5704] wacom 0003:056A:0043.0048: Unknown device_type for 'syz0'. Assuming pen. [ 616.730219][ T5704] wacom 0003:056A:0043.0048: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 616.730828][ T5704] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0048/input/input211 [ 616.939487][T17849] netlink: 'syz.3.3715': attribute type 8 has an invalid length. [ 616.939696][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3715'. [ 616.941152][T17888] loop5: detected capacity change from 0 to 512 [ 616.942309][T17882] --map-set only usable from mangle table [ 616.978344][T17888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 616.984367][T17888] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.3728: iget: bad i_size value: 38620345925642 [ 616.984404][T17888] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 616.984587][T17888] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.3728: couldn't read orphan inode 15 (err -117) [ 616.984659][T17888] loop5: lost filesystem error report for type 5 error -117 [ 616.985130][T17888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.053611][ T29] audit: type=1400 audit(617.235:10858): avc: denied { write } for pid=17887 comm="syz.5.3728" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.107022][T17888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3728'. [ 617.107287][T17893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3728'. [ 617.112777][T17888] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.3728: bg 0: block 5: invalid block bitmap [ 617.113554][T17888] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 617.113757][T17888] EXT4-fs (loop5): This should not happen!! Data will be lost [ 617.113757][T17888] [ 617.113794][T17888] EXT4-fs (loop5): Total free blocks count 0 [ 617.113855][T17888] EXT4-fs (loop5): Free/Dirty block details [ 617.113889][T17888] EXT4-fs (loop5): free_blocks=0 [ 617.113950][T17888] EXT4-fs (loop5): dirty_blocks=1 [ 617.113983][T17888] EXT4-fs (loop5): Block reservation details [ 617.114011][T17888] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 617.162149][T17897] FAULT_INJECTION: forcing a failure. [ 617.162149][T17897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.162282][T17897] CPU: 0 UID: 0 PID: 17897 Comm: syz.2.3729 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 617.162433][T17897] Tainted: [W]=WARN [ 617.162477][T17897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 617.162525][T17897] Call Trace: [ 617.162551][T17897] [ 617.162580][T17897] __dump_stack+0x1d/0x30 [ 617.162662][T17897] dump_stack_lvl+0x95/0xd0 [ 617.162788][T17897] dump_stack+0x15/0x1b [ 617.162863][T17897] should_fail_ex+0x259/0x270 [ 617.162946][T17897] should_fail+0xb/0x20 [ 617.163080][T17897] should_fail_usercopy+0x1a/0x20 [ 617.163186][T17897] _copy_to_user+0x20/0xa0 [ 617.163343][T17897] simple_read_from_buffer+0xb5/0x130 [ 617.163423][T17897] proc_fail_nth_read+0x10e/0x150 [ 617.163502][T17897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 617.163661][T17897] vfs_read+0x18e/0x7c0 [ 617.163807][T17897] ? __rcu_read_unlock+0x4e/0x70 [ 617.163882][T17897] ? __fget_files+0x184/0x1c0 [ 617.163936][T17897] ? mutex_lock+0x52/0x90 [ 617.163959][T17897] ksys_read+0xdc/0x1a0 [ 617.164081][T17897] __x64_sys_read+0x40/0x50 [ 617.164199][T17897] x64_sys_call+0x2135/0x2550 [ 617.164281][T17897] do_syscall_64+0x112/0x360 [ 617.164394][T17897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.164459][T17897] RIP: 0033:0x7fb5c609fd8e [ 617.164534][T17897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 617.164589][T17897] RSP: 002b:00007fb5c4b2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 617.164652][T17897] RAX: ffffffffffffffda RBX: 00007fb5c4b2f6c0 RCX: 00007fb5c609fd8e [ 617.164698][T17897] RDX: 000000000000000f RSI: 00007fb5c4b2f0a0 RDI: 0000000000000006 [ 617.164736][T17897] RBP: 00007fb5c4b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 617.164774][T17897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.164811][T17897] R13: 00007fb5c6366038 R14: 00007fb5c6365fa0 R15: 00007ffc25a5d3c8 [ 617.164950][T17897] [ 617.192619][ T8794] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.504762][ T3373] wacom 0003:056A:0043.0049: Unknown device_type for 'syz0'. Assuming pen. [ 617.505303][ T3373] wacom 0003:056A:0043.0049: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 617.505839][ T3373] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0049/input/input214 [ 617.872843][ T3373] wacom 0003:056A:0043.004A: Unknown device_type for 'syz0'. Assuming pen. [ 617.873403][ T3373] wacom 0003:056A:0043.004A: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 617.874256][ T3373] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.004A/input/input217 [ 617.936112][T17915] fido_id[17915]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 618.054547][T17921] loop5: detected capacity change from 0 to 164 [ 618.159626][ T5685] wacom 0003:056A:0043.004B: Unknown device_type for 'syz0'. Assuming pen. [ 618.185768][ T5685] wacom 0003:056A:0043.004B: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 618.186470][ T5685] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.004B/input/input220 [ 618.248871][T17924] fido_id[17924]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 618.315086][T17930] program syz.2.3737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.758954][T17936] --map-set only usable from mangle table [ 619.987797][T17949] xt_ecn: cannot match TCP bits for non-tcp packets 3OL [ 620.234281][T17954] loop5: detected capacity change from 0 to 512 [ 620.256018][T17954] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 620.296649][ T5704] wacom 0003:056A:0043.004C: Unknown device_type for 'syz0'. Assuming pen. [ 620.297653][ T5704] wacom 0003:056A:0043.004C: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 620.298342][ T5704] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.004C/input/input223 [ 620.314386][T17960] --map-set only usable from mangle table [ 620.381816][T17963] fido_id[17963]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 620.536981][T17967] loop5: detected capacity change from 0 to 164 [ 620.749806][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3742'. 3OL [ 622.155723][T17980] loop5: detected capacity change from 0 to 512 [ 622.156187][T17980] vfat: Unknown parameter ' [ 622.156187][T17980] ' [ 622.223668][T17984] program syz.0.3752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.859646][T17986] loop5: detected capacity change from 0 to 32768 [ 623.378493][ T28] wacom 0003:056A:0043.004D: Unknown device_type for 'syz0'. Assuming pen. [ 623.380511][ T28] wacom 0003:056A:0043.004D: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 623.381099][ T28] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.004D/input/input226 [ 623.442152][T18004] fido_id[18004]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 625.152146][T17986] loop5: p1 p3 < > [ 625.234959][T18011] --map-set only usable from mangle table [ 625.254628][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3762'. 3OL [ 625.533341][T18022] loop5: detected capacity change from 0 to 1024 [ 625.550705][T18022] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 625.589267][T18022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.694816][T18027] syzkaller0: left promiscuous mode [ 625.694838][T18027] syzkaller0: left allmulticast mode [ 625.792066][ T29] audit: type=1400 audit(625.810:10859): avc: denied { write } for pid=18021 comm="syz.5.3763" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 625.792098][ T29] audit: type=1400 audit(625.810:10860): avc: denied { write } for pid=18021 comm="syz.5.3763" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 625.859871][T18005] udevd[18005]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 625.861355][T17801] udevd[17801]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 625.924841][T18034] team0: Port device dummy0 removed [ 626.087689][T18044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=18044 comm=syz.0.3768 [ 626.207844][T18051] ip_tables: iptables: counters copy to user failed while replacing table [ 626.368650][ T29] audit: type=1400 audit(626.550:10861): avc: denied { write } for pid=18042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.398870][ T8794] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.542186][ T29] audit: type=1400 audit(626.690:10862): avc: denied { write } for pid=18062 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.089737][T18067] loop5: detected capacity change from 0 to 512 [ 627.106230][T18067] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 627.184201][T18071] program syz.3.3773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 627.693687][T18075] FAULT_INJECTION: forcing a failure. [ 627.693687][T18075] name failslab, interval 1, probability 0, space 0, times 0 [ 627.693778][T18075] CPU: 1 UID: 0 PID: 18075 Comm: syz.2.3772 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 627.693810][T18075] Tainted: [W]=WARN [ 627.693818][T18075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 627.693830][T18075] Call Trace: [ 627.693839][T18075] [ 627.693850][T18075] __dump_stack+0x1d/0x30 [ 627.693916][T18075] dump_stack_lvl+0x95/0xd0 [ 627.694026][T18075] dump_stack+0x15/0x1b [ 627.694054][T18075] should_fail_ex+0x259/0x270 [ 627.694091][T18075] ? kvrealloc_node_align_noprof+0x7b/0xe0 [ 627.694163][T18075] should_failslab+0x8c/0xb0 [ 627.694240][T18075] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 627.694368][T18075] ? kvrealloc_node_align_noprof+0x7b/0xe0 [ 627.694424][T18075] krealloc_node_align_noprof+0x11d/0x310 [ 627.694486][T18075] kvrealloc_node_align_noprof+0x7b/0xe0 [ 627.694552][T18075] bpf_iarray_realloc+0x34/0x70 [ 627.694580][T18075] bpf_check+0xf55/0x20e0 [ 627.694683][T18075] bpf_prog_load+0xf52/0x10b0 [ 627.694714][T18075] __sys_bpf+0xbce/0xc50 [ 627.694737][T18075] ? do_futex+0x380/0x460 [ 627.694813][T18075] __x64_sys_bpf+0x69/0x80 [ 627.694839][T18075] x64_sys_call+0xf26/0x2550 [ 627.694875][T18075] do_syscall_64+0x112/0x360 [ 627.694940][T18075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.694962][T18075] RIP: 0033:0x7fb5c60df559 [ 627.694979][T18075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.695052][T18075] RSP: 002b:00007fb5c4b2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 627.695072][T18075] RAX: ffffffffffffffda RBX: 00007fb5c6365fa0 RCX: 00007fb5c60df559 [ 627.695090][T18075] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 627.695108][T18075] RBP: 00007fb5c6176b50 R08: 0000000000000000 R09: 0000000000000000 [ 627.695158][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.695173][T18075] R13: 00007fb5c6366038 R14: 00007fb5c6365fa0 R15: 00007ffc25a5d3c8 [ 627.695206][T18075] [ 627.982419][T18084] x_tables: duplicate underflow at hook 1 [ 628.053781][T18078] --map-set only usable from mangle table [ 628.204850][ T3373] wacom 0003:056A:0043.004E: Unknown device_type for 'syz0'. Assuming pen. [ 628.207624][ T3373] wacom 0003:056A:0043.004E: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 628.208179][ T3373] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.004E/input/input229 [ 628.281275][T18087] fido_id[18087]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 629.053676][T18096] random: crng reseeded on system resumption [ 629.061009][T18096] Restarting kernel threads ... [ 629.061794][T18096] Done restarting kernel threads. [ 629.063833][T18092] --map-set only usable from mangle table [ 629.716720][T18117] program syz.3.3785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.718479][T18113] program syz.2.3784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.837428][T18120] FAULT_INJECTION: forcing a failure. [ 629.837428][T18120] name failslab, interval 1, probability 0, space 0, times 0 [ 629.837452][T18120] CPU: 0 UID: 0 PID: 18120 Comm: syz.5.3786 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 629.837477][T18120] Tainted: [W]=WARN [ 629.837482][T18120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 629.837493][T18120] Call Trace: [ 629.837499][T18120] [ 629.837512][T18120] __dump_stack+0x1d/0x30 [ 629.837533][T18120] dump_stack_lvl+0x95/0xd0 [ 629.837553][T18120] dump_stack+0x15/0x1b [ 629.837608][T18120] should_fail_ex+0x259/0x270 [ 629.837631][T18120] ? __get_vm_area_node+0x125/0x1f0 [ 629.837675][T18120] should_failslab+0x8c/0xb0 [ 629.837778][T18120] __kmalloc_cache_node_noprof+0x5f/0x3f0 [ 629.837806][T18120] ? __alloc_frozen_pages_noprof+0x1fd/0x3d0 [ 629.837840][T18120] ? __get_vm_area_node+0x125/0x1f0 [ 629.837866][T18120] __get_vm_area_node+0x125/0x1f0 [ 629.837891][T18120] __vmalloc_node_range_noprof+0x2aa/0x10e0 [ 629.837988][T18120] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 629.838026][T18120] ? __account_obj_stock+0x27f/0x2d0 [ 629.838047][T18120] ? __rcu_read_unlock+0x4e/0x70 [ 629.838130][T18120] ? __memcg_slab_post_alloc_hook+0x35e/0x8c0 [ 629.838223][T18120] ? __account_obj_stock+0x27f/0x2d0 [ 629.838244][T18120] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 629.838357][T18120] __vmalloc_noprof+0xa4/0xf0 [ 629.838397][T18120] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 629.838494][T18120] bpf_prog_calc_tag+0x3b/0x1e0 [ 629.838561][T18120] ? bpf_check_btf_info+0x372/0xe30 [ 629.838587][T18120] check_and_resolve_insns+0x48/0x1900 [ 629.838608][T18120] ? check_subprogs+0x2a4/0x380 [ 629.838633][T18120] bpf_check+0x12c6/0x20e0 [ 629.838655][T18120] bpf_prog_load+0xf52/0x10b0 [ 629.838757][T18120] __sys_bpf+0xbce/0xc50 [ 629.838777][T18120] ? do_futex+0x380/0x460 [ 629.838802][T18120] __x64_sys_bpf+0x69/0x80 [ 629.838818][T18120] x64_sys_call+0xf26/0x2550 [ 629.838871][T18120] do_syscall_64+0x112/0x360 [ 629.838976][T18120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.839002][T18120] RIP: 0033:0x7f595f32f559 [ 629.839024][T18120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.839040][T18120] RSP: 002b:00007f595dd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 629.839058][T18120] RAX: ffffffffffffffda RBX: 00007f595f5b5fa0 RCX: 00007f595f32f559 [ 629.839072][T18120] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 629.839189][T18120] RBP: 00007f595f3c6b50 R08: 0000000000000000 R09: 0000000000000000 [ 629.839201][T18120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.839212][T18120] R13: 00007f595f5b6038 R14: 00007f595f5b5fa0 R15: 00007ffd5dda4ef8 [ 629.839229][T18120] [ 629.839259][T18120] warn_alloc: 1 callbacks suppressed [ 629.839268][T18120] syz.5.3786: vmalloc error: size 64, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 629.839336][T18120] CPU: 0 UID: 0 PID: 18120 Comm: syz.5.3786 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 629.839412][T18120] Tainted: [W]=WARN [ 629.839421][T18120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 629.839437][T18120] Call Trace: [ 629.839463][T18120] [ 629.839469][T18120] __dump_stack+0x1d/0x30 [ 629.839567][T18120] dump_stack_lvl+0x95/0xd0 [ 629.839586][T18120] dump_stack+0x15/0x1b [ 629.839604][T18120] warn_alloc+0x146/0x1c0 [ 629.839634][T18120] __vmalloc_node_range_noprof+0x2d2/0x10e0 [ 629.839700][T18120] ? __account_obj_stock+0x27f/0x2d0 [ 629.839722][T18120] ? __rcu_read_unlock+0x4e/0x70 [ 629.839749][T18120] ? __memcg_slab_post_alloc_hook+0x35e/0x8c0 [ 629.839772][T18120] ? __account_obj_stock+0x27f/0x2d0 [ 629.839842][T18120] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 629.839881][T18120] __vmalloc_noprof+0xa4/0xf0 [ 629.839905][T18120] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 629.839998][T18120] bpf_prog_calc_tag+0x3b/0x1e0 [ 629.840031][T18120] ? bpf_check_btf_info+0x372/0xe30 [ 629.840067][T18120] check_and_resolve_insns+0x48/0x1900 [ 629.840088][T18120] ? check_subprogs+0x2a4/0x380 [ 629.840188][T18120] bpf_check+0x12c6/0x20e0 [ 629.840210][T18120] bpf_prog_load+0xf52/0x10b0 [ 629.840235][T18120] __sys_bpf+0xbce/0xc50 [ 629.840257][T18120] ? do_futex+0x380/0x460 [ 629.840319][T18120] __x64_sys_bpf+0x69/0x80 [ 629.840402][T18120] x64_sys_call+0xf26/0x2550 [ 629.840435][T18120] do_syscall_64+0x112/0x360 [ 629.840492][T18120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.840523][T18120] RIP: 0033:0x7f595f32f559 [ 629.840544][T18120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.840575][T18120] RSP: 002b:00007f595dd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 629.840666][T18120] RAX: ffffffffffffffda RBX: 00007f595f5b5fa0 RCX: 00007f595f32f559 [ 629.840681][T18120] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 629.840693][T18120] RBP: 00007f595f3c6b50 R08: 0000000000000000 R09: 0000000000000000 [ 629.840706][T18120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.840774][T18120] R13: 00007f595f5b6038 R14: 00007f595f5b5fa0 R15: 00007ffd5dda4ef8 [ 629.840793][T18120] [ 629.850801][T18120] Mem-Info: [ 629.850839][T18120] active_anon:13219 inactive_anon:9 isolated_anon:0 [ 629.850839][T18120] active_file:792 inactive_file:14885 isolated_file:0 [ 629.850839][T18120] unevictable:0 dirty:313 writeback:0 [ 629.850839][T18120] slab_reclaimable:4261 slab_unreclaimable:30996 [ 629.850839][T18120] mapped:33211 shmem:3040 pagetables:3859 [ 629.850839][T18120] sec_pagetables:0 bounce:0 [ 629.850839][T18120] kernel_misc_reclaimable:0 [ 629.850839][T18120] free:1864895 free_pcp:4387 free_cma:0 [ 629.851062][T18120] Node 0 active_anon:52876kB inactive_anon:36kB active_file:3168kB inactive_file:59540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132844kB dirty:1252kB writeback:0kB shmem:12160kB kernel_stack:4944kB pagetables:15436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 629.851368][T18120] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.851684][T18120] lowmem_reserve[]: 0 2877 7856 7856 [ 629.851780][T18120] Node 0 DMA32 free:2942976kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946500kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 629.852034][T18120] lowmem_reserve[]: 0 0 4978 4978 [ 629.853662][T18120] Node 0 Normal free:4501244kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52876kB inactive_anon:36kB active_file:3168kB inactive_file:59540kB unevictable:0kB writepending:1252kB zspages:0kB present:5242880kB managed:5098212kB mlocked:0kB bounce:0kB free_pcp:14024kB local_pcp:5644kB free_cma:0kB [ 629.854321][T18120] lowmem_reserve[]: 0 0 0 0 [ 629.854442][T18120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 629.856454][T18120] Node 0 DMA32: 4*4kB (M) 0*8kB 3*16kB (M) 4*32kB (M) 1*64kB (M) 2*128kB (M) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2942976kB [ 629.859233][T18120] Node 0 Normal: 614*4kB (UME) 773*8kB (UME) 942*16kB (UME) 537*32kB (UME) 400*64kB (UME) 150*128kB (UM) 46*256kB (UM) 23*512kB (UME) 25*1024kB (UM) 12*2048kB (UME) 1060*4096kB (UM) = 4501184kB [ 629.861020][T18120] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.861139][T18120] 18700 total pagecache pages [ 629.861169][T18120] 0 pages in swap cache [ 629.861345][T18120] Free swap = 124996kB [ 629.861369][T18120] Total swap = 124996kB [ 629.861392][T18120] 2097051 pages RAM [ 629.861426][T18120] 0 pages HighMem/MovableOnly [ 629.861448][T18120] 82033 pages reserved [ 630.025964][T18125] program syz.5.3787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 630.622045][T18136] FAULT_INJECTION: forcing a failure. [ 630.622045][T18136] name failslab, interval 1, probability 0, space 0, times 0 [ 630.622131][T18136] CPU: 0 UID: 0 PID: 18136 Comm: syz.0.3788 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 630.622215][T18136] Tainted: [W]=WARN [ 630.622292][T18136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 630.622327][T18136] Call Trace: [ 630.622345][T18136] [ 630.622359][T18136] __dump_stack+0x1d/0x30 [ 630.622480][T18136] dump_stack_lvl+0x95/0xd0 [ 630.622532][T18136] dump_stack+0x15/0x1b [ 630.622588][T18136] should_fail_ex+0x259/0x270 [ 630.622688][T18136] ? __get_vm_area_node+0x125/0x1f0 [ 630.622945][T18136] should_failslab+0x8c/0xb0 [ 630.623037][T18136] __kmalloc_cache_node_noprof+0x5f/0x3f0 [ 630.623193][T18136] ? __alloc_frozen_pages_noprof+0x1fd/0x3d0 [ 630.623289][T18136] ? __get_vm_area_node+0x125/0x1f0 [ 630.623371][T18136] __get_vm_area_node+0x125/0x1f0 [ 630.623455][T18136] __vmalloc_node_range_noprof+0x2aa/0x10e0 [ 630.623626][T18136] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 630.623756][T18136] ? __account_obj_stock+0x27f/0x2d0 [ 630.623840][T18136] ? __rcu_read_unlock+0x4e/0x70 [ 630.623918][T18136] ? __memcg_slab_post_alloc_hook+0x35e/0x8c0 [ 630.623988][T18136] ? __account_obj_stock+0x27f/0x2d0 [ 630.624060][T18136] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 630.624151][T18136] __vmalloc_noprof+0xa4/0xf0 [ 630.624254][T18136] ? bpf_prog_calc_tag+0x3b/0x1e0 [ 630.624424][T18136] bpf_prog_calc_tag+0x3b/0x1e0 [ 630.624520][T18136] ? bpf_check_btf_info+0x372/0xe30 [ 630.624623][T18136] check_and_resolve_insns+0x48/0x1900 [ 630.624759][T18136] ? check_subprogs+0x2a4/0x380 [ 630.624905][T18136] bpf_check+0x12c6/0x20e0 [ 630.624995][T18136] bpf_prog_load+0xf52/0x10b0 [ 630.625089][T18136] __sys_bpf+0xbce/0xc50 [ 630.625219][T18136] ? do_futex+0x380/0x460 [ 630.625305][T18136] __x64_sys_bpf+0x69/0x80 [ 630.625435][T18136] x64_sys_call+0xf26/0x2550 [ 630.625530][T18136] do_syscall_64+0x112/0x360 [ 630.625640][T18136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.625705][T18136] RIP: 0033:0x7f73e0e6f559 [ 630.625752][T18136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.625808][T18136] RSP: 002b:00007f73df8c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 630.625893][T18136] RAX: ffffffffffffffda RBX: 00007f73e10f5fa0 RCX: 00007f73e0e6f559 [ 630.625947][T18136] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 630.625983][T18136] RBP: 00007f73e0f06b50 R08: 0000000000000000 R09: 0000000000000000 [ 630.626034][T18136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.626063][T18136] R13: 00007f73e10f6038 R14: 00007f73e10f5fa0 R15: 00007ffe8344ae48 [ 630.626190][T18136] [ 631.244800][T18139] loop5: detected capacity change from 0 to 128 [ 631.374420][T18139] xt_ecn: cannot match TCP bits for non-tcp packets [ 632.745739][T18144] --map-set only usable from mangle table [ 632.837494][T18139] netlink: 'syz.5.3792': attribute type 8 has an invalid length. [ 632.837586][T18139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3792'. [ 633.678585][T18162] program syz.3.3797 is using a deprecated SCSI ioctl, please convert it to SG_IO 3OL [ 633.720332][ T32] IPVS: starting estimator thread 0... [ 633.811320][T18159] IPVS: using max 2688 ests per chain, 134400 per kthread [ 633.854032][ T5704] wacom 0003:056A:0043.004F: Unknown device_type for 'syz0'. Assuming pen. [ 633.880305][ T3373] wacom 0003:056A:0043.0050: Unknown device_type for 'syz0'. Assuming pen. [ 633.968212][ T5704] wacom 0003:056A:0043.004F: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 633.978471][ T3373] wacom 0003:056A:0043.0050: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 633.979102][ T3373] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0050/input/input235 [ 633.981519][ T5704] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.004F/input/input232 [ 634.077483][T18173] fido_id[18173]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 634.145307][T18181] program syz.2.3801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.323956][T18185] program syz.1.3803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.653402][T18194] --map-set only usable from mangle table [ 634.748265][ T3380] wacom 0003:056A:0043.0051: Unknown device_type for 'syz0'. Assuming pen. [ 634.748764][ T3380] wacom 0003:056A:0043.0051: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 634.749272][ T3380] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0051/input/input238 [ 634.876672][T18197] fido_id[18197]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 634.972827][T18203] loop5: detected capacity change from 0 to 128 [ 634.975449][T18203] EXT4-fs: Ignoring removed nobh option [ 634.995827][T18203] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 635.009632][ T3373] wacom 0003:056A:0043.0052: Unknown device_type for 'syz0'. Assuming pen. [ 635.020163][ T3373] wacom 0003:056A:0043.0052: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 635.020928][ T3373] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0052/input/input241 [ 635.116774][T18207] fido_id[18207]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 635.167944][ T29] audit: type=1400 audit(635.354:10863): avc: denied { bind } for pid=18212 comm="syz.1.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 635.168300][T18211] --map-set only usable from mangle table [ 635.168879][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3812'. [ 635.220574][ T8794] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.241298][T18214] team0: Port device team_slave_0 removed [ 635.271026][ T29] audit: type=1400 audit(635.464:10864): avc: denied { setattr } for pid=18218 comm="syz.5.3813" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 635.327452][T18223] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3814'. [ 635.335633][T18223] syz_tun: entered allmulticast mode [ 635.348452][T18216] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 635.404585][T18235] program syz.0.3815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.475348][T18231] --map-set only usable from mangle table [ 635.786059][T18240] program syz.3.3819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.057669][T18252] rxe_eth0 speed is unknown, defaulting to 1000 [ 636.214374][T18252] rxe_eth0 speed is unknown, defaulting to 1000 [ 636.601318][T18255] FAULT_INJECTION: forcing a failure. [ 636.601318][T18255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.601355][T18255] CPU: 0 UID: 0 PID: 18255 Comm: syz.0.3824 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 636.601389][T18255] Tainted: [W]=WARN [ 636.601398][T18255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 636.601490][T18255] Call Trace: [ 636.601498][T18255] [ 636.601507][T18255] __dump_stack+0x1d/0x30 [ 636.601536][T18255] dump_stack_lvl+0x95/0xd0 [ 636.601562][T18255] dump_stack+0x15/0x1b [ 636.601653][T18255] should_fail_ex+0x259/0x270 [ 636.601685][T18255] should_fail+0xb/0x20 [ 636.601791][T18255] should_fail_usercopy+0x1a/0x20 [ 636.601832][T18255] _copy_from_iter+0xcc/0xe80 [ 636.601866][T18255] ? __alloc_skb+0x516/0x6f0 [ 636.601899][T18255] ? __alloc_skb+0x209/0x6f0 [ 636.601944][T18255] netlink_sendmsg+0x4d6/0x740 [ 636.601969][T18255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.601992][T18255] ____sys_sendmsg+0x54a/0x590 [ 636.602076][T18255] ___sys_sendmsg+0x195/0x1e0 [ 636.602111][T18255] __x64_sys_sendmsg+0xd4/0x160 [ 636.602136][T18255] x64_sys_call+0x22ab/0x2550 [ 636.602167][T18255] do_syscall_64+0x112/0x360 [ 636.602280][T18255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.602304][T18255] RIP: 0033:0x7f73e0e6f559 [ 636.602323][T18255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.602361][T18255] RSP: 002b:00007f73df8c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.602384][T18255] RAX: ffffffffffffffda RBX: 00007f73e10f5fa0 RCX: 00007f73e0e6f559 [ 636.602476][T18255] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 636.602491][T18255] RBP: 00007f73df8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 636.602505][T18255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.602519][T18255] R13: 00007f73e10f6038 R14: 00007f73e10f5fa0 R15: 00007ffe8344ae48 [ 636.602546][T18255] [ 636.775168][T18262] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3826'. [ 636.776025][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3826'. [ 636.818348][T18263] --map-set only usable from mangle table [ 636.908518][ T29] audit: type=1400 audit(637.105:10865): avc: denied { getopt } for pid=18269 comm="syz.0.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 636.910809][ T29] audit: type=1400 audit(637.105:10866): avc: denied { mount } for pid=18269 comm="syz.0.3831" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 637.045595][T18276] program syz.1.3830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 637.208365][T18278] --map-set only usable from mangle table [ 637.246700][T18282] --map-set only usable from mangle table [ 637.379962][T18289] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 637.380104][T18289] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 637.381622][T18289] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 637.586803][ T29] audit: type=1400 audit(637.776:10867): avc: denied { write } for pid=18292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.615450][T18289] loop5: detected capacity change from 0 to 512 [ 637.659244][ T29] audit: type=1400 audit(637.856:10868): avc: denied { write } for pid=18306 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.733054][T18289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.747965][ T29] audit: type=1400 audit(637.936:10869): avc: denied { write } for pid=18288 comm="syz.5.3836" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 637.767058][ T29] audit: type=1400 audit(637.966:10870): avc: denied { write } for pid=18288 comm="syz.5.3836" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 638.681476][T18326] program syz.3.3842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.710225][ T8794] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.743373][T18333] --map-set only usable from mangle table [ 638.745961][ T29] audit: type=1400 audit(638.936:10871): avc: denied { bind } for pid=18331 comm="syz.3.3845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 638.813871][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3845'. [ 638.901602][T18341] xt_ecn: cannot match TCP bits for non-tcp packets [ 638.995301][T18346] --map-set only usable from mangle table [ 639.115452][T18350] program syz.3.3849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.039828][T18368] syzkaller1: entered promiscuous mode [ 640.039845][T18368] syzkaller1: entered allmulticast mode [ 640.041528][T18368] FAULT_INJECTION: forcing a failure. [ 640.041528][T18368] name failslab, interval 1, probability 0, space 0, times 0 [ 640.041640][T18368] CPU: 1 UID: 0 PID: 18368 Comm: syz.3.3854 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 640.041716][T18368] Tainted: [W]=WARN [ 640.041734][T18368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 640.041746][T18368] Call Trace: [ 640.041753][T18368] [ 640.041760][T18368] __dump_stack+0x1d/0x30 [ 640.041823][T18368] dump_stack_lvl+0x95/0xd0 [ 640.041850][T18368] dump_stack+0x15/0x1b [ 640.041873][T18368] should_fail_ex+0x259/0x270 [ 640.041897][T18368] ? __alloc_skb+0x2e0/0x6f0 [ 640.041952][T18368] should_failslab+0x8c/0xb0 [ 640.041989][T18368] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 640.042017][T18368] ? __alloc_skb+0x2e0/0x6f0 [ 640.042064][T18368] __alloc_skb+0x2e0/0x6f0 [ 640.042100][T18368] ? __alloc_skb+0x209/0x6f0 [ 640.042137][T18368] alloc_skb_with_frags+0x7e/0x3d0 [ 640.042184][T18368] ? __rcu_read_unlock+0x4e/0x70 [ 640.042215][T18368] ? avc_has_perm_noaudit+0xac/0x160 [ 640.042244][T18368] sock_alloc_send_pskb+0x640/0x700 [ 640.042280][T18368] tun_get_user+0x9ab/0x2970 [ 640.042368][T18368] ? ref_tracker_alloc+0x236/0x340 [ 640.042397][T18368] tun_chr_write_iter+0x15a/0x210 [ 640.042503][T18368] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 640.042544][T18368] vfs_write+0x57a/0x990 [ 640.042594][T18368] ksys_write+0xdc/0x1a0 [ 640.042633][T18368] __x64_sys_write+0x40/0x50 [ 640.042663][T18368] x64_sys_call+0x154e/0x2550 [ 640.042692][T18368] do_syscall_64+0x112/0x360 [ 640.042727][T18368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.042749][T18368] RIP: 0033:0x7f8ac355f559 [ 640.042787][T18368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.042810][T18368] RSP: 002b:00007f8ac1f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.042834][T18368] RAX: ffffffffffffffda RBX: 00007f8ac37e6090 RCX: 00007f8ac355f559 [ 640.042852][T18368] RDX: 0000000000000fce RSI: 0000200000001040 RDI: 0000000000000004 [ 640.042879][T18368] RBP: 00007f8ac1f96090 R08: 0000000000000000 R09: 0000000000000000 [ 640.042891][T18368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.042903][T18368] R13: 00007f8ac37e6128 R14: 00007f8ac37e6090 R15: 00007ffeca62d158 [ 640.042922][T18368] [ 640.412127][T18372] loop5: detected capacity change from 0 to 164 [ 640.573265][T18375] --map-set only usable from mangle table [ 640.624810][T18381] --map-set only usable from mangle table [ 640.699697][ T29] audit: type=1326 audit(640.897:10872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.5.3863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f595f32f559 code=0x0 [ 640.717314][ T9] wacom 0003:056A:0043.0053: Unknown device_type for 'syz0'. Assuming pen. [ 640.738589][ T5704] wacom 0003:056A:0043.0054: Unknown device_type for 'syz0'. Assuming pen. [ 640.740023][ T9] wacom 0003:056A:0043.0053: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 640.740636][ T9] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0053/input/input244 [ 640.774579][ T5704] wacom 0003:056A:0043.0054: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 640.775218][ T5704] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0054/input/input247 [ 640.819722][T18393] fido_id[18393]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 640.854140][T18391] fido_id[18391]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 640.966149][T18403] program syz.0.3865 is using a deprecated SCSI ioctl, please convert it to SG_IO 3OL [ 641.691531][T18420] FAULT_INJECTION: forcing a failure. [ 641.691531][T18420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.691565][T18420] CPU: 0 UID: 0 PID: 18420 Comm: syz.5.3871 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 641.691605][T18420] Tainted: [W]=WARN [ 641.691615][T18420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 641.691632][T18420] Call Trace: [ 641.691676][T18420] [ 641.691685][T18420] __dump_stack+0x1d/0x30 [ 641.691711][T18420] dump_stack_lvl+0x95/0xd0 [ 641.691730][T18420] dump_stack+0x15/0x1b [ 641.691827][T18420] should_fail_ex+0x259/0x270 [ 641.691859][T18420] should_fail+0xb/0x20 [ 641.691880][T18420] should_fail_usercopy+0x1a/0x20 [ 641.691932][T18420] _copy_from_iter+0xcc/0xe80 [ 641.691964][T18420] ? __alloc_skb+0x516/0x6f0 [ 641.692006][T18420] ? __alloc_skb+0x209/0x6f0 [ 641.692038][T18420] netlink_sendmsg+0x4d6/0x740 [ 641.692062][T18420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.692080][T18420] ____sys_sendmsg+0x54a/0x590 [ 641.692170][T18420] ___sys_sendmsg+0x195/0x1e0 [ 641.692210][T18420] __x64_sys_sendmsg+0xd4/0x160 [ 641.692288][T18420] x64_sys_call+0x22ab/0x2550 [ 641.692445][T18420] do_syscall_64+0x112/0x360 [ 641.692535][T18420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.692561][T18420] RIP: 0033:0x7f595f32f559 [ 641.692613][T18420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.692634][T18420] RSP: 002b:00007f595dd87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.692658][T18420] RAX: ffffffffffffffda RBX: 00007f595f5b5fa0 RCX: 00007f595f32f559 [ 641.692675][T18420] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003 [ 641.692690][T18420] RBP: 00007f595dd87090 R08: 0000000000000000 R09: 0000000000000000 [ 641.692705][T18420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.692718][T18420] R13: 00007f595f5b6038 R14: 00007f595f5b5fa0 R15: 00007ffd5dda4ef8 [ 641.692767][T18420] [ 641.789830][T18422] SELinux: policydb magic number 0xa4ce19c4 does not match expected magic number 0xf97cff8c [ 641.789898][T18422] SELinux: failed to load policy [ 641.789970][ T29] audit: type=1400 audit(641.988:10873): avc: denied { load_policy } for pid=18421 comm="syz.0.3872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 641.998207][T18432] scsi_strcpy_devinfo: vendor string 'tvNS0hh~&ml' is too long [ 641.998257][T18432] scsi_strcpy_devinfo: model string '_~ [ 641.998257][T18432] 'TBe٨/' is too long [ 642.009486][T18428] --map-set only usable from mangle table [ 642.021780][T18430] --map-set only usable from mangle table [ 642.033650][T18432] loop5: detected capacity change from 0 to 128 [ 642.047076][T18432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a042c018, mo2=0002] [ 642.047174][T18432] System zones: 1-3, 19-19, 35-36 [ 642.057539][T18432] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 642.086619][ T29] audit: type=1400 audit(642.288:10874): avc: denied { write } for pid=18431 comm="syz.5.3877" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 642.100070][ T29] audit: type=1400 audit(642.288:10875): avc: denied { setattr } for pid=18431 comm="syz.5.3877" path="/498/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 642.170039][ T29] audit: type=1400 audit(642.368:10876): avc: denied { ioctl } for pid=18431 comm="syz.5.3877" path="/498/file1/file1" dev="loop5" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 642.254231][T18442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3877'. [ 642.290450][ T29] audit: type=1400 audit(642.488:10877): avc: denied { accept } for pid=18431 comm="syz.5.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 642.290890][T18447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3881'. [ 642.290978][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3881'. [ 642.321387][ T29] audit: type=1326 audit(642.518:10878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18449 comm="syz.1.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a735f559 code=0x7ffc0000 [ 642.323335][ T29] audit: type=1326 audit(642.518:10879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18449 comm="syz.1.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a735f559 code=0x7ffc0000 [ 642.324129][ T29] audit: type=1326 audit(642.518:10880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18449 comm="syz.1.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a735f559 code=0x7ffc0000 [ 642.324588][ T29] audit: type=1326 audit(642.528:10881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18449 comm="syz.1.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a735f559 code=0x7ffc0000 [ 642.433659][T18452] program syz.2.3882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.529030][ T8794] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 642.692783][T18461] xt_ecn: cannot match TCP bits for non-tcp packets [ 643.056317][ T5700] wacom 0003:056A:0043.0055: Unknown device_type for 'syz0'. Assuming pen. [ 643.058322][ T5700] wacom 0003:056A:0043.0055: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 643.058891][ T5700] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0055/input/input250 [ 643.159385][T18477] --map-set only usable from mangle table [ 643.194304][ T28] wacom 0003:056A:0043.0056: Unknown device_type for 'syz0'. Assuming pen. [ 643.194680][ T28] wacom 0003:056A:0043.0056: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 643.195331][ T28] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0056/input/input253 [ 643.231005][T18480] fido_id[18480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 643.273683][T18485] FAULT_INJECTION: forcing a failure. [ 643.273683][T18485] name failslab, interval 1, probability 0, space 0, times 0 [ 643.273726][T18485] CPU: 1 UID: 0 PID: 18485 Comm: syz.2.3894 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 643.273844][T18485] Tainted: [W]=WARN [ 643.273853][T18485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 643.273871][T18485] Call Trace: [ 643.273881][T18485] [ 643.273891][T18485] __dump_stack+0x1d/0x30 [ 643.273931][T18485] dump_stack_lvl+0x95/0xd0 [ 643.273981][T18485] dump_stack+0x15/0x1b [ 643.274091][T18485] should_fail_ex+0x259/0x270 [ 643.274124][T18485] ? __alloc_skb+0x2e0/0x6f0 [ 643.274226][T18485] should_failslab+0x8c/0xb0 [ 643.274378][T18485] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 643.274431][T18485] ? __alloc_skb+0x2e0/0x6f0 [ 643.274467][T18485] __alloc_skb+0x2e0/0x6f0 [ 643.274548][T18485] tcp_stream_alloc_skb+0x30/0x320 [ 643.274579][T18485] tcp_connect+0xc4b/0x23e0 [ 643.274620][T18485] tcp_v6_connect+0xc11/0xd00 [ 643.274720][T18485] __inet_stream_connect+0x166/0x840 [ 643.274754][T18485] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 643.274836][T18485] ? tcp_sendmsg_fastopen+0x15c/0x4c0 [ 643.274867][T18485] tcp_sendmsg_fastopen+0x3dc/0x4c0 [ 643.274897][T18485] tcp_sendmsg_locked+0x286b/0x2b00 [ 643.274937][T18485] ? _raw_spin_unlock_bh+0x17/0x20 [ 643.274977][T18485] ? selinux_netlbl_socket_connect+0x114/0x130 [ 643.275018][T18485] ? selinux_socket_sendmsg+0x3d9/0x410 [ 643.275056][T18485] ? __pfx_tcp_sendmsg+0x10/0x10 [ 643.275083][T18485] ? __pfx_inet6_sendmsg+0x10/0x10 [ 643.275158][T18485] tcp_sendmsg+0x2f/0x50 [ 643.275185][T18485] inet6_sendmsg+0x76/0xd0 [ 643.275277][T18485] __sys_sendto+0x308/0x480 [ 643.275374][T18485] __x64_sys_sendto+0x76/0x90 [ 643.275416][T18485] x64_sys_call+0x200c/0x2550 [ 643.275447][T18485] do_syscall_64+0x112/0x360 [ 643.275564][T18485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.275588][T18485] RIP: 0033:0x7fb5c60df559 [ 643.275607][T18485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.275657][T18485] RSP: 002b:00007fb5c4b2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 643.275681][T18485] RAX: ffffffffffffffda RBX: 00007fb5c6365fa0 RCX: 00007fb5c60df559 [ 643.275697][T18485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 643.275713][T18485] RBP: 00007fb5c6176b50 R08: 0000200000000300 R09: 000000000000001c [ 643.275729][T18485] R10: 0000000020000075 R11: 0000000000000246 R12: 0000000000000000 [ 643.275816][T18485] R13: 00007fb5c6366038 R14: 00007fb5c6365fa0 R15: 00007ffc25a5d3c8 [ 643.275973][T18485] [ 643.356928][T18489] netlink: 'syz.2.3895': attribute type 32 has an invalid length. [ 643.541081][T18483] rxe_eth0 speed is unknown, defaulting to 1000 [ 643.559583][T18491] FAULT_INJECTION: forcing a failure. [ 643.559583][T18491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.559611][T18491] CPU: 0 UID: 0 PID: 18491 Comm: syz.0.3896 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 643.559649][T18491] Tainted: [W]=WARN [ 643.559658][T18491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 643.559716][T18491] Call Trace: [ 643.559723][T18491] [ 643.559730][T18491] __dump_stack+0x1d/0x30 [ 643.559755][T18491] dump_stack_lvl+0x95/0xd0 [ 643.559807][T18491] dump_stack+0x15/0x1b [ 643.559835][T18491] should_fail_ex+0x259/0x270 [ 643.559949][T18491] should_fail+0xb/0x20 [ 643.560033][T18491] should_fail_usercopy+0x1a/0x20 [ 643.560071][T18491] _copy_from_iter+0xcc/0xe80 [ 643.560099][T18491] ? __alloc_skb+0x516/0x6f0 [ 643.560216][T18491] ? __alloc_skb+0x209/0x6f0 [ 643.560250][T18491] netlink_sendmsg+0x4d6/0x740 [ 643.560283][T18491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.560311][T18491] ____sys_sendmsg+0x54a/0x590 [ 643.560404][T18491] ___sys_sendmsg+0x195/0x1e0 [ 643.560449][T18491] __x64_sys_sendmsg+0xd4/0x160 [ 643.560534][T18491] x64_sys_call+0x22ab/0x2550 [ 643.560571][T18491] do_syscall_64+0x112/0x360 [ 643.560616][T18491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.560661][T18491] RIP: 0033:0x7f73e0e6f559 [ 643.560729][T18491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.560763][T18491] RSP: 002b:00007f73df8c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.560790][T18491] RAX: ffffffffffffffda RBX: 00007f73e10f5fa0 RCX: 00007f73e0e6f559 [ 643.560810][T18491] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 643.560824][T18491] RBP: 00007f73df8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 643.560837][T18491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.560888][T18491] R13: 00007f73e10f6038 R14: 00007f73e10f5fa0 R15: 00007ffe8344ae48 [ 643.560917][T18491] [ 643.879756][ T5704] wacom 0003:056A:0043.0057: Unknown device_type for 'syz0'. Assuming pen. [ 643.880133][ T5704] wacom 0003:056A:0043.0057: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 643.880885][ T5704] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0057/input/input256 [ 643.928394][T18501] fido_id[18501]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 644.098761][T18514] program syz.3.3900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.145090][T18516] --map-set only usable from mangle table [ 644.177295][ T28] wacom 0003:056A:0043.0058: Unknown device_type for 'syz0'. Assuming pen. [ 644.178170][ T28] wacom 0003:056A:0043.0058: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 644.178799][ T28] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0058/input/input259 [ 644.201747][T18513] --map-set only usable from mangle table [ 644.289532][T18517] fido_id[18517]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory 3OL 3OL [ 644.949306][T18535] FAULT_INJECTION: forcing a failure. [ 644.949306][T18535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.949349][T18535] CPU: 0 UID: 0 PID: 18535 Comm: syz.1.3908 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 644.949432][T18535] Tainted: [W]=WARN [ 644.949439][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 644.949474][T18535] Call Trace: [ 644.949481][T18535] [ 644.949489][T18535] __dump_stack+0x1d/0x30 [ 644.949592][T18535] dump_stack_lvl+0x95/0xd0 [ 644.949666][T18535] dump_stack+0x15/0x1b [ 644.949694][T18535] should_fail_ex+0x259/0x270 [ 644.949729][T18535] should_fail+0xb/0x20 [ 644.949902][T18535] should_fail_usercopy+0x1a/0x20 [ 644.949931][T18535] _copy_from_iter+0xcc/0xe80 [ 644.950014][T18535] ? __alloc_skb+0x516/0x6f0 [ 644.950051][T18535] ? __alloc_skb+0x209/0x6f0 [ 644.950094][T18535] netlink_sendmsg+0x4d6/0x740 [ 644.950126][T18535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.950178][T18535] ____sys_sendmsg+0x54a/0x590 [ 644.950204][T18535] ___sys_sendmsg+0x195/0x1e0 [ 644.950266][T18535] __x64_sys_sendmsg+0xd4/0x160 [ 644.950298][T18535] x64_sys_call+0x22ab/0x2550 [ 644.950334][T18535] do_syscall_64+0x112/0x360 [ 644.950378][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.950420][T18535] RIP: 0033:0x7f70a735f559 [ 644.950510][T18535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.950536][T18535] RSP: 002b:00007f70a5db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.950741][T18535] RAX: ffffffffffffffda RBX: 00007f70a75e5fa0 RCX: 00007f70a735f559 [ 644.950756][T18535] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 644.950799][T18535] RBP: 00007f70a5db7090 R08: 0000000000000000 R09: 0000000000000000 [ 644.950813][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.950825][T18535] R13: 00007f70a75e6038 R14: 00007f70a75e5fa0 R15: 00007ffe4b9af1e8 [ 644.950847][T18535] [ 645.135681][ T5685] wacom 0003:056A:0043.0059: Unknown device_type for 'syz0'. Assuming pen. [ 645.137620][ T5685] wacom 0003:056A:0043.0059: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 645.138549][ T5685] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0059/input/input262 [ 645.267369][T18538] fido_id[18538]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 645.402540][T18545] program syz.1.3911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.887631][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 645.887645][ T29] audit: type=1326 audit(646.080:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18546 comm="syz.0.3913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73e0e6f559 code=0x0 [ 645.989223][T18554] netlink: 'syz.3.3915': attribute type 10 has an invalid length. [ 645.989242][T18554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3915'. [ 645.991443][T18554] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 646.003723][T18554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.059098][T18556] --map-set only usable from mangle table [ 646.140179][T18558] --map-set only usable from mangle table [ 646.275123][ T5700] wacom 0003:056A:0043.005A: Unknown device_type for 'syz0'. Assuming pen. [ 646.275734][ T5700] wacom 0003:056A:0043.005A: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 646.276266][ T5700] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.005A/input/input265 [ 646.336377][T18573] fido_id[18573]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory 3OL [ 646.453469][T18576] program syz.5.3921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 646.785046][ T29] audit: type=1400 audit(646.980:11042): avc: denied { getopt } for pid=18582 comm="syz.1.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 646.827186][T18584] rxe_eth0 speed is unknown, defaulting to 1000 [ 646.868221][ T66] IPVS: starting estimator thread 0... [ 646.916623][T18590] ieee802154 phy0 wpan0: encryption failed: -22 [ 646.917903][ T29] audit: type=1400 audit(647.110:11043): avc: denied { ioctl } for pid=18589 comm="syz.0.3928" path="socket:[63248]" dev="sockfs" ino=63248 ioctlcmd=0xc038586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 646.972482][T18591] IPVS: using max 1920 ests per chain, 96000 per kthread [ 646.982495][T18596] --map-set only usable from mangle table [ 647.113546][ T5704] wacom 0003:056A:0043.005B: Unknown device_type for 'syz0'. Assuming pen. [ 647.114055][ T5704] wacom 0003:056A:0043.005B: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 647.114657][ T5704] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.005B/input/input268 [ 647.172240][T18613] ieee802154 phy0 wpan0: encryption failed: -22 [ 647.172268][T18613] FAULT_INJECTION: forcing a failure. [ 647.172268][T18613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.172296][T18613] CPU: 0 UID: 0 PID: 18613 Comm: syz.5.3936 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 647.172354][T18613] Tainted: [W]=WARN [ 647.172372][T18613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 647.172383][T18613] Call Trace: [ 647.172390][T18613] [ 647.172397][T18613] __dump_stack+0x1d/0x30 [ 647.172438][T18610] ================================================================== [ 647.172457][T18610] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 647.172475][T18610] [ 647.172479][T18610] write to 0xffffffff86ecfaa0 of 88 bytes by task 18613 on cpu 0: [ 647.172494][T18610] prb_reserve+0x6fb/0xaf0 [ 647.172504][T18613] dump_stack_lvl+0x95/0xd0 [ 647.172515][T18610] vprintk_store+0x54e/0x910 [ 647.172531][T18613] dump_stack+0x15/0x1b [ 647.172538][T18610] vprintk_emit+0x1a4/0x580 [ 647.172556][T18613] should_fail_ex+0x259/0x270 [ 647.172561][T18610] vprintk_default+0x26/0x30 [ 647.172585][T18610] vprintk+0x1d/0x30 [ 647.172612][T18610] _printk+0x79/0xa0 [ 647.172590][T18613] should_fail+0xb/0x20 [ 647.172628][T18610] dump_stack_print_info+0x179/0x1a0 [ 647.172637][T18613] should_fail_usercopy+0x1a/0x20 [ 647.172655][T18610] __dump_stack+0x11/0x30 [ 647.172697][T18610] dump_stack_lvl+0x95/0xd0 [ 647.172715][T18610] dump_stack+0x15/0x1b [ 647.172732][T18610] should_fail_ex+0x259/0x270 [ 647.172690][T18613] _copy_to_user+0x20/0xa0 [ 647.172761][T18610] should_fail+0xb/0x20 [ 647.172766][T18613] simple_read_from_buffer+0xb5/0x130 [ 647.172793][T18610] should_fail_usercopy+0x1a/0x20 [ 647.172796][T18613] proc_fail_nth_read+0x10e/0x150 [ 647.172829][T18610] _copy_to_user+0x20/0xa0 [ 647.172828][T18613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.172861][T18610] simple_read_from_buffer+0xb5/0x130 [ 647.172883][T18610] proc_fail_nth_read+0x10e/0x150 [ 647.172912][T18610] vfs_read+0x18e/0x7c0 [ 647.172933][T18610] ksys_read+0xdc/0x1a0 [ 647.172865][T18613] vfs_read+0x18e/0x7c0 [ 647.172958][T18610] __x64_sys_read+0x40/0x50 [ 647.172975][T18613] ? __rcu_read_unlock+0x4e/0x70 [ 647.172992][T18610] x64_sys_call+0x2135/0x2550 [ 647.173005][T18613] ? __fget_files+0x184/0x1c0 [ 647.173022][T18610] do_syscall_64+0x112/0x360 [ 647.173051][T18610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.173068][T18610] [ 647.173073][T18610] read to 0xffffffff86ecfaa0 of 8 bytes by task 18610 on cpu 1: [ 647.173086][T18610] _prb_read_valid+0x636/0x8f0 [ 647.173033][T18613] ? mutex_lock+0x52/0x90 [ 647.173103][T18610] prb_first_valid_seq+0x35/0x70 [ 647.173125][T18610] devkmsg_open+0x174/0x1b0 [ 647.173127][T18613] ksys_read+0xdc/0x1a0 [ 647.173145][T18610] memory_open+0xfa/0x120 [ 647.173174][T18610] chrdev_open+0x2eb/0x3a0 [ 647.173188][T18610] do_dentry_open+0x496/0xa40 [ 647.173163][T18613] __x64_sys_read+0x40/0x50 [ 647.173212][T18610] vfs_open_consume+0x46/0x1f0 [ 647.173219][T18613] x64_sys_call+0x2135/0x2550 [ 647.173238][T18610] path_openat+0xc16/0x11c0 [ 647.173250][T18613] do_syscall_64+0x112/0x360 [ 647.173271][T18610] do_file_open+0x16c/0x290 [ 647.173290][T18613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.173302][T18610] do_sys_openat2+0xa1/0x140 [ 647.173315][T18613] RIP: 0033:0x7f595f2efd8e [ 647.173334][T18613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 647.173328][T18610] __x64_sys_openat+0xf2/0x120 [ 647.173355][T18613] RSP: 002b:00007f595dd86fe8 EFLAGS: 00000246 [ 647.173360][T18610] x64_sys_call+0x1f72/0x2550 [ 647.173385][T18610] do_syscall_64+0x112/0x360 [ 647.173408][T18610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.173413][T18613] ORIG_RAX: 0000000000000000 [ 647.173423][T18613] RAX: ffffffffffffffda RBX: 00007f595dd876c0 RCX: 00007f595f2efd8e [ 647.173430][T18610] [ 647.173434][T18610] value changed: 0x0000000000002aea -> 0x0000000000004aea [ 647.173440][T18613] RDX: 000000000000000f RSI: 00007f595dd870a0 RDI: 0000000000000003 [ 647.173448][T18610] [ 647.173452][T18610] Reported by Kernel Concurrency Sanitizer on: [ 647.173456][T18613] RBP: 00007f595dd87090 R08: 0000000000000000 R09: 0000000000000000 [ 647.173471][T18613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.173467][T18610] CPU: 1 UID: 0 PID: 18610 Comm: fido_id Tainted: G W syzkaller #0 PREEMPT(lazy) [ 647.173486][T18613] R13: 00007f595f5b6038 R14: 00007f595f5b5fa0 R15: 00007ffd5dda4ef8 [ 647.173499][T18610] Tainted: [W]=WARN [ 647.173508][T18613] [ 647.173507][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 647.173522][T18610] ================================================================== [ 647.292195][T18617] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3935'. [ 647.341234][ T5704] wacom 0003:056A:0043.005C: Unknown device_type for 'syz0'. Assuming pen. [ 647.371852][ T5704] wacom 0003:056A:0043.005C: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 647.419603][ T5704] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.005C/input/input271 [ 647.502324][T18622] program syz.5.3938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.765596][T18620] fido_id[18620]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory