last executing test programs: 10m22.908621409s ago: executing program 32 (id=83): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r0, 0x10000000) fallocate(r0, 0x3, 0x5, 0xffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000003c0)={0x0, 0x1, 0x758, 0x40}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x210c}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 8m55.395761753s ago: executing program 33 (id=695): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010011a801000f480040005800800090000000000080003803000018005000600"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (fail_nth: 2) 8m51.121804327s ago: executing program 34 (id=718): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/error_log\x00', 0x20000, 0x4) pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x7d) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)=',[.#\x00', &(0x7f0000000300)=',\x00', 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/220, 0xdc}], 0x1, 0x5, 0x9) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000500)={0x0, 0xb0, "1f22c40c8c71a1a912b1a28bd04515888bd3dd9e402659c23db670c57b4b2e26220403c3f98f93068e5363b47f8ac3afacfbdea6588f8a5b34c33130a05c88fdfd1afa41c5f1e19aaf15e5235b5997ea1c7412a339c2938af8c6715bf7285b4009cdb416fc90ff1585d282cd144fe258071fc0e14f2da91f44708e0792a6f61336e5df4dc4657198d88c6bc111d9ee7998c041fe0676cc2fef885cd8981659654fd06d754022095203b8247f8d948e52"}, &(0x7f0000000600)=0xb8) 8m49.264122736s ago: executing program 35 (id=731): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="6295", 0x2}], 0x1}}], 0x1, 0x40840) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000180)={0xc00, 0x100, 0x15f1}) 8m48.452743535s ago: executing program 36 (id=738): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x88}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) (async) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone3(&(0x7f000000dd80)={0x82058000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1a}, 0xe) (async) syz_open_dev$evdev(0x0, 0x200, 0x80100) (async) r1 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0xa) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r2, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r2}]) (async) syz_emit_ethernet(0xae, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x1, "00ffffffffff"}, {0x22, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x260402, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000080)=0x7) getpid() (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="f000000026000100feffffff00010000ac1e01", @ANYBLOB], 0xf0}}, 0x20000844) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r6 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x34, r8, 0x9, 0xfffffffd, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 8m47.30262828s ago: executing program 37 (id=747): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={0x418103, 0xa, 0xf}, 0x18) rmdir(&(0x7f00000000c0)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd30000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 8m46.46080961s ago: executing program 38 (id=754): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000000)=0x8000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001240)=ANY=[@ANYBLOB="3a0a000000d1cb69e37432afbd0505020fffc204000000010738000000000cff03000900000000000000080000000000000003000200000000009c1b00010000000000000000000100050219896d6307000100001d5583ff8eb1d3efeebdd69bbc5bc5559089850ec6404b4ed0ce2e42313ab0747d9dafd160d51c8d82619ab85c78fc4d4aa5a1376854fe1c491b6c9000000000400000"], 0x60) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x11) ioctl(r3, 0x5424, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x10, 0xc, &(0x7f0000001100)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0xfffffffffffffdc6) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r5, &(0x7f0000002400)=""/4105, 0x1009) 8m39.683798134s ago: executing program 39 (id=774): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$eJzs3EtvG0UcAPD/2nn0nVDKow9ooCAiCkmTFugBCYFA6gUJCQ5wDGmoStMWNUGiVUUThMoR8QkKRyQ+ASe4IOAE4griipAq1EsLB2S0693ErlPXtZM41L+fZHvG+5iZnR3veGd3A+hZI+lbErEtIn6NiKFqtH6GkerHjWsXp/++dnE6iUrl9b8Gs/muX7s4XcxaLLc1j4yWIkofJ7F3hXTnzl84NTU7O3Muj4/Pn35vfO78hadPnp46MXNi5szk0aNHDk889+zkM22Va9NN8bRc1/d8eHbf7mNvffbqdCXe/uGrNL/b8um15agabivdWiMxEpVKpVKq+3Yge3+847VvLNsjYjEPJ31dzgwtK0dEWl39WfsfinIsV95QvPJRVzMHrKn0+DTY8G05/+xL0umbauZND2cV4C6xGN3OAdAdxRE//f9bvNar77ERXH0xfZ/Jyn8jf1Wn9EX6vz0Zrv5jL69R+tsikoWIK28u/HMlVjwPAQCwur5J+z9PrdT/K8X9NfPtiIihC9URnoMRsTMi7o2IXRFxX0Q27wMR8eAdpp+NPy0uxxv7Pz9vbrNoLUn7f8/nY1v1/b+lUZvhch7bno0K9SfvnJydOZRvk9HoH0zjE03S+PblXz691bS0/Gnfr3il6Rd9wTwff/bddILu+NT8VCdlrnV1MWJPX335qyMAydJIQFrruyNiTxvrT7fZySe/3JeGd2xtnH778jez0EaO6lW+iHiiWv8LUVf/y6OgSXWI5Fbjk+ObYnbm0HixVzT68afLr9XG+2vCnZW/c2n9b1lx/8/LXzSDYrx2rsUVDywHL//2Sb7Oxqbc7v4/kLxRl8wHU/Pz5yYiBgai8fvJ5WWLeDF/Wv7RAxGX84Hg2va/M+Lfz/Pl9kZEuhM/FBEPR8T+PO+PRMSjEXGgyab4/qXH3m2+sW5X//3NF+9AWv7jzeo/YjipHa9vI1A+9d3XxcqWqjL/cWmt/o9kodH8m1Z+/1rN4GpsQwAAANjoStkYdFIaWwqXSmNj1Wv4d8WW0uzZufmDI/H+mePVa+WHo79UnOkaqjkfOpFfMV/EJ2+KH46Ie7IrjTZn8bHps7Pbu1146HFbb9H+U3+s1UUvwMZRd7/W7e63S9Y2L8D66lthYBboDS3fr7121yEAXeJ5DdC7tH/oXSu1/0sRN7qQFWBd3eHR/4W1ygfQDc1+AZzyg7ub///Qu7R/6EmNt8QXlwK1c6f/cmDnsY4Wv/NA8ZyKdUo0ah+J0VGgvDFyWBwDWk4iSutXuau/t7S/+O+rlo39eWAwe7T2pZb23kurtNe1tv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8//0XAAD//5/B0CE=") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xb}, 0x116414, 0x4, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000440)={0x8, 0x7, 0x6, 0x10000, 0x6, "71830219b1f84c1bf9e58606e5dc1f16018c47", 0x0, 0x2}) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) 8m39.493834013s ago: executing program 40 (id=778): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000640)}, {&(0x7f0000000740)="3f955f5755c3796fdcc30385c96689ba538b74798e417c6f658781671ee5aab17f4fbb38e520cfa9421ecf3895e195cda1cb7ca2bc62a1968f64dc923607ce8140c20c79c81181fc6039c0b3522e0c37905a354d8f856f0538ce23b3fd62eb18c183ca", 0x63}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20000081) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1d6) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c00017fa902b98014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000024000d8014000400200100000000000000000000000000020c000380060001004e2200"], 0xb8}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) getuid() sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000000000000200080d0000000001000000000000000000ff000100000000612e00e4e88ba1d5a22c8b7e0945923849ecc75e0f90c7b526"], 0x0, 0x38, 0x0, 0x1, 0x1}, 0x28) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x3, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000540), 0x8}, 0x8101, 0x0, 0x800000, 0x6, 0x2, 0x2cb, 0xffff, 0x0, 0x0, 0x0, 0x9d}, 0x0, 0xfff8000000000003, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) socket(0x10, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x20004080) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8183) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) 8m37.702588139s ago: executing program 41 (id=785): getpid() syz_open_dev$usbmon(&(0x7f0000000300), 0x10000, 0x101002) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08c, 0x7, @perf_config_ext={0xe6, 0x7}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) splice(r1, &(0x7f00000000c0)=0x7ffffffffffffffc, r0, 0x0, 0x5, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090000"], 0x28}}, 0x0) fsopen(&(0x7f0000000180)='gadgetfs\x00', 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f000000dbc0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f000000dd40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xf8, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x12}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4c77}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@acl}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@errors_remount}]}, 0x7, 0x613, &(0x7f0000000180)="$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") setuid(0xee00) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0x40086604, 0x0) 8m36.525780775s ago: executing program 42 (id=795): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000440)={0x8, 0x7, 0x6, 0x10000, 0x6, "71830219b1f84c1bf9e58606e5dc1f16018c47", 0x0, 0x2}) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) 8m35.78151992s ago: executing program 43 (id=801): openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) stat(&(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, 0x0) chown(0x0, r2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB="5b5d5c854e6f8a34620a74dc5c3fc28f32fc15cd456b38", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x80000002}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socket$pptp(0x18, 0x1, 0x2) sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="5000000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="270201000000000008000a00", @ANYRES32, @ANYBLOB="280012800e0001006970366772657461700000001400028008000100041beea2c823b14590f2550ba2dfe8180c8e845bbf8f163d895d809902be73a8faba3b2a3fb96f5d9d3777dea7a7397b10018e7fe7b03560e3951e4e151b6fb97ee018d80a2fbb479872453fef13a4fcb52e10e3e94ab532440c37300909ad85a24e12a904b4ce1db95b8dd90ce628b2361264280314a36fd8b2e6", @ANYRES32, @ANYBLOB="0800140000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) 7m21.041568243s ago: executing program 44 (id=1073): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") socket(0x1f, 0xa, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = timerfd_create(0x8, 0x80800) timerfd_settime(r4, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m45.307646322s ago: executing program 45 (id=1298): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r1) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2b, 0x0, &(0x7f0000000340)="b461802305624431ed3373010000003d2600906919d5d5fe00c6fc7ef8eef9757a601fee936390009c5bbd", 0x0, 0x3f95b0e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, 0x0) getgid() pread64(0xffffffffffffffff, &(0x7f0000000580)=""/239, 0xef, 0x35) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 6m21.404952515s ago: executing program 46 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10) 5m45.256550743s ago: executing program 7 (id=1682): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="100000000000000000000000799c"], 0x20) 5m45.142794639s ago: executing program 7 (id=1685): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) close(r0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$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") timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8008, 0x0) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r3, &(0x7f000042c000/0x2000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000800)="$eJzs3c9qE18UwPHTtGmTlDZZ/PiBgvSgG90MbXyCIC2IAaU2RV0IUzvRkDEpmRiJiNWVW3e+Q3HpTrC+QDfu3IubIggu7EI6kkzGTOO0NrVp0vb7gTK3c++Ze+cP4cyQudm89ephMe8YebMqkZhKTERkSyQlEfHEZbVVaqwZklEJei6Xxn+4rnv7zrVMNjs7rzqXWbicVtXJqfePn745/6E6vvh28t2YbKTubn5Lf974f+PM5vaCv/Vy9YXoUrlcNZdsS5cLTtFQvWFbpmNpoeRYlaqa7fq8XV5ZqatZWp5IrFQsx1GzVNeiVddqWauVupr3zUJJDcPQiYScNsN7VcbDVubW5ufNTFedRLocFI5S6FmuVDLmcGhlbu0oBgUAAAZLZ/4faaT0O/L/Rs7v2S3///7p3M1u8/8HBUcLjpbKO/L7P/P/iJD/904z/98OTRpxMkQbNwAZMxF660b+DwAAAAAAAAAAAAAAAAAAAADAcbDluknXdZP+0v8bE5GYbMe8Vm6y3+NEb+x9/kX8/wMhQ30cLg5Z4MW9mIj9spar5bylV5/JS0FssWQ6KvKzeT20eOW5q9nZaW1Kybq92opvviQ45sf7UuHxM168BuJXa7moJIL9pyUp/4XHpzvioyJSy43KxQuBeEOS8vGelMWW5eZ13Y5/NqN65Xq2o/94sx0AAAAAACeBob+ldt7/erNJGob604Z01Hsr288HJPmX5wMq66PSjh+RsyP9228AAAAAAE4Tp/6kaNq2VTl4YWrxn8IHoBCX7qMO5dAds4LR+jrYno1d123+YMw+t/w6LrJLVUR2rep14auIDMABP+xr7Msj7wTup3E/P5UAAAAA9EI76e/3SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL32O3mY3/4gc48Fuhvuz14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg+FXAAAA///xbBZn") r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_ifreq(0xffffffffffffffff, 0x8992, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x2, 0x7}}, './file1\x00'}) accept4$unix(r6, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e, 0x80800) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000280), &(0x7f0000000300)='./file1\x00', 0x8, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @c}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) 5m44.608523604s ago: executing program 7 (id=1690): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8004002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004804}, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff4800000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0xc6, &(0x7f0000000100)=""/198, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10}, 0x94) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4040814) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) close(0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000440)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) fchownat(r2, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', r4, r6, 0x1000) openat(r2, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x220000, 0x130) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r7, &(0x7f0000000000)='3', 0x4e) mount$9p_unix(&(0x7f0000000600)='./proc/thread-self/fail-nth\x00', &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', &(0x7f0000000680), 0x280c012, &(0x7f00000006c0)={'trans=unix,', {[], [{@uid_gt={'uid>', r4}}, {@euid_gt={'euid>', r5}}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 5m43.277311308s ago: executing program 4 (id=1698): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070011006c6f"], 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 5m43.236128619s ago: executing program 7 (id=1699): r0 = socket$inet_udp(0x2, 0x2, 0x0) mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000100), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan}, {@max_batch_time={'max_batch_time', 0x3d, 0x7ffb}}, {@usrjquota}]}, 0x3, 0x439, &(0x7f0000002380)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000), &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) mount$nfs4(&(0x7f0000000000)='syz_tun\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x2004004, &(0x7f0000000280)=ANY=[@ANYBLOB="610100000000000000"]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x3000) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0xb, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r5 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x4542, 0x1224, 0x0, 0x5, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, 0x0, 0x0, 0x5a00, 0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x6) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a0001"], 0x870}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r9}, 0x14) syz_emit_ethernet(0x46, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86000000000000000000aa2100000000109078e20600018000"/55, @ANYRESOCT=r8, @ANYRESHEX=r5], 0x0) 5m43.218591031s ago: executing program 4 (id=1700): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x7fffffff}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5e40717164fbab492ab71584bc2fd34c3eedfc6ef94c83f091211a3efd82"}}, {{@arp={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0xff000000, 0x6, 0xd, {@mac=@local, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="c940302de6a9", {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x4, 0x9, 0x3, 0x665, 0x4, 'veth1_to_bond\x00', 'team0\x00', {}, {}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) unshare(0x20000400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4004) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$char_usb(0xffffffffffffffff, &(0x7f0000000340)=""/170, 0xaa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r3, 0x1) sendmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000000260305a0cfd0e33f622eecca25545d70000000000000010"], 0x28}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r4, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="ddcb9a280f389d0000010095db1c19f10000465db392ff9c4c9699e29615a705baca5a5aa559cd0777a0802fadd54e1d052ae24631ef107e1597d0c9129bb0006d1a8b186bfd0479678092986b90e53c083bab1ceeeea71b7d6e63465adde6a7dc3b"], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x82bf3000) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r5, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x3d}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 5m42.774146332s ago: executing program 7 (id=1703): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 5m42.460228157s ago: executing program 7 (id=1706): syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="9c51d04fbb"], 0x0) mremap(&(0x7f000041f000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020009000000000000000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendto$inet(r2, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) unshare(0x22020400) r3 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc61}}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x8004, 0x72}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @loopback, 0x4e20, 0x3, 'sh\x00', 0x1, 0x60000000, 0xc}, {@loopback, 0x4e26, 0x2000, 0x3, 0x8001, 0x1}}, 0x44) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) 5m42.335154082s ago: executing program 47 (id=1706): syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="9c51d04fbb"], 0x0) mremap(&(0x7f000041f000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020009000000000000000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendto$inet(r2, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) unshare(0x22020400) r3 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc61}}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x8004, 0x72}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @loopback, 0x4e20, 0x3, 'sh\x00', 0x1, 0x60000000, 0xc}, {@loopback, 0x4e26, 0x2000, 0x3, 0x8001, 0x1}}, 0x44) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) 5m42.18918381s ago: executing program 4 (id=1708): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = open(&(0x7f00000004c0)='.\x00', 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000001000000", 0x58}], 0x1) rmdir(&(0x7f0000000100)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 5m41.399146518s ago: executing program 4 (id=1711): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000f80)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@i_version}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@stripe={'stripe', 0x3d, 0x9}}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0xed) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0xf}, 0x80, 0x0, 0xffffffff, 0x8, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='atkbd', 0x5) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a00030d00000000000000000a0000000002000000000000080004000f91"], 0x24}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001200000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x484100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f0000000500)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x7, 0x0, 0x1, 0x8, 0x6, 0xffffffffffffffc0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0xd, 0x5, 0xf, 0x0, 0x1}, @ldst={0x1, 0x3, 0x3, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m40.346850528s ago: executing program 4 (id=1716): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 5m39.988947325s ago: executing program 4 (id=1717): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x20, 0x39, 0xff}, [@IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1', 0x1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x1) r9 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (fail_nth: 5) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44010000", @ANYRES16=r6, @ANYBLOB="100029bd7000030000003f00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x24000090}, 0x28000000) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r10, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r11, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 5m39.921458908s ago: executing program 48 (id=1717): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x20, 0x39, 0xff}, [@IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1', 0x1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x1) r9 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (fail_nth: 5) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44010000", @ANYRES16=r6, @ANYBLOB="100029bd7000030000003f00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x24000090}, 0x28000000) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r10, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r11, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 5m0.096671972s ago: executing program 0 (id=1892): syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs\x00') socket$inet_sctp(0x2, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m58.361458015s ago: executing program 0 (id=1896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "150000000200", "5579000000000000001000", "d28d34eb", "cb9d8450ab655ddc"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004103005c000000000204907800000000e0000001862effffffff050a7f0425c314cc789406020504a708021133269503c2583d0c9f45f5a23aae2b07076cb1cf623c00004e234e220018907804000000ffffffff000000000000000058ce211883f6c4fb8ec581c9794ee023ea68d81cb6dbc3ddc2cf909bd63db1642665b15d1d8a56d203c6f489c1152d08cc3fe993d5958ce14eeae3d10c8be7671d93b4d7843a5ba932dd3a"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m57.939540496s ago: executing program 0 (id=1898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x6, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind(r1, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r2, 0xc0686611, &(0x7f0000000080)=0x68) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netpci0\x00'}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fu,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) 4m57.538107805s ago: executing program 0 (id=1900): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8800002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@block_validity}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0xc6f40, 0x19b) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes256, 0x4, '\x00', @b}) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x22000, 0x240) openat(r5, &(0x7f0000000000)='./file1\x00', 0x38b341, 0x84) ptrace(0x10, r4) tkill(r4, 0x30) 4m56.716871134s ago: executing program 0 (id=1906): syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs\x00') socket$inet_sctp(0x2, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m56.531784842s ago: executing program 0 (id=1909): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00') preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/200, 0xc8}], 0x1, 0x111, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80c42, 0x1ff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000740)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x9, 0x10, 0x10, 0x0, @in6={0xa, 0x4e20, 0x91, @private1={0xfc, 0x1, '\x00', 0x11}, 0xfffffc00}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x10000}}}, 0x118) sendmsg$DEVLINK_CMD_PORT_GET(r5, 0x0, 0xc084) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd25, 0x4, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="60454c462004000000004000e900000003003e00ebffff067c0007000000000040000000000000008902000000000000000000000600380001480300000002000000ffffffffff000004000000000000000600000000000000ff000000000000003fb4000000000000afb23b50ad43e42538846c657ea8b900"/135], 0x78) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, r0, 0x1, 0x70bd2b, 0x25dfdc02, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8004) openat(r3, &(0x7f0000000040)='./file1\x00', 0x14c01, 0xb8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xb}, 0x94) 4m56.418566608s ago: executing program 49 (id=1909): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00') preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/200, 0xc8}], 0x1, 0x111, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80c42, 0x1ff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000740)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x9, 0x10, 0x10, 0x0, @in6={0xa, 0x4e20, 0x91, @private1={0xfc, 0x1, '\x00', 0x11}, 0xfffffc00}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x10000}}}, 0x118) sendmsg$DEVLINK_CMD_PORT_GET(r5, 0x0, 0xc084) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd25, 0x4, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="60454c462004000000004000e900000003003e00ebffff067c0007000000000040000000000000008902000000000000000000000600380001480300000002000000ffffffffff000004000000000000000600000000000000ff000000000000003fb4000000000000afb23b50ad43e42538846c657ea8b900"/135], 0x78) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, r0, 0x1, 0x70bd2b, 0x25dfdc02, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8004) openat(r3, &(0x7f0000000040)='./file1\x00', 0x14c01, 0xb8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xb}, 0x94) 1m3.073334234s ago: executing program 8 (id=3177): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='- 1 3 0', 0x7) (fail_nth: 4) 1m2.707810052s ago: executing program 8 (id=3180): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000100001f61106d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) 1m2.705312572s ago: executing program 8 (id=3182): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x100211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) shmdt(0x0) io_uring_setup(0x8648, &(0x7f0000000340)={0x0, 0x87c62, 0x2844, 0x3, 0x969}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) write(r5, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r4, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) r7 = socket(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x9, 0x3, &(0x7f0000001100)=ANY=[@ANYRES64=r2], &(0x7f0000001180)='GPL\x00', 0x7ffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001300)={r4, 0x0, 0x2d, 0x0, @val=@uprobe_multi={&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)=[0xc30e, 0xa71], &(0x7f00000012c0), 0x81, 0x2, 0x0, r3}}, 0x40) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{0x0, 0x3b, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da933b3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x100000, 0x2000, 0x1}, 0x10) mmap$perf(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x4, 0x40010, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) 1m1.763073547s ago: executing program 8 (id=3198): socket$kcm(0x11, 0x3, 0x0) socket$inet6(0xa, 0x80001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790048000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x53, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000a32000104000000433e047b80b8bee7fb63f2273ac36965471c6abda8701509fb461d13368098dc6b32004c56609c15b5df4269d00a7fabdb0c30633bd6b24422b7049307d5abacee39fb68a056c8176798032ba70c082dfdcb8e6ddf82690e6042974bc1b98b05566e7157673ff0bcd05d2f471bc88a62d8794d94d81e86c1a57ae3b2364f7683ec59b68da58b88141d91d2a74bb22fe5cdd296e7b3", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="0500070001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@delalloc}]}, 0xfe, 0x250, &(0x7f0000000300)="$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") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x9}, {0xffffffffffffffff, 0x4, 0x5}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) unshare(0x8000280) r7 = syz_clone(0x100000, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000600bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xd4}}, 0x0) 1m1.599016615s ago: executing program 8 (id=3200): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x9, 0x42, 0x40, 0xc0, 0x1, 0x5d2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) 1m1.164566145s ago: executing program 8 (id=3205): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000100001f61106d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) 1m1.146913386s ago: executing program 50 (id=3205): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000100001f61106d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) 33.722565177s ago: executing program 9 (id=3537): syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000008674e7a3aa8071dd60f53a0400483a00fe800000000000000000000000000000417c700000000000000000000000fe0102009078000005006050835900000000fc010000000000000000000000000000ff0000000000000000000000000400003a01000000000000070800000000000000000000000000008df3be98e75d010412e5b021600a52d7fcbc61a6b2baa5f931123eef90a6"], 0x0) 33.649225371s ago: executing program 9 (id=3538): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00562653ef2b152c720000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f000000"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.644023491s ago: executing program 9 (id=3539): r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r1}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 6) 33.45659648s ago: executing program 9 (id=3543): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd1, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x6bb0157145f3a761, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x8000001, 0x9, 0x0, 0x7, 0x3, 0xffffffff, 0xc5f7}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1}, 0x20003ff1}], 0x1, 0x100, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) 33.369271064s ago: executing program 9 (id=3544): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$notify(r0, 0x402, 0x22) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x20) 33.285608268s ago: executing program 9 (id=3545): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)) (fail_nth: 6) 17.291085223s ago: executing program 51 (id=3545): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)) (fail_nth: 6) 2.435784363s ago: executing program 6 (id=3795): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01990000419a04002800128008000100736974001c00028008000300ac1414bb050004000000000008000100", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) connect$packet(r0, &(0x7f0000000180)={0x11, 0x4, r2, 0x1, 0xff, 0x6, @remote}, 0x14) 2.418288124s ago: executing program 3 (id=3796): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x1, 0x7, 0x7, 0x7b90, 0x100000001}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x8, 0x3, 0x6, 0x7, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000000c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/32, 0x20}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f00000004c0)=""/7, 0x7}, {&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/25, 0x19}, {&(0x7f0000000680)=""/48, 0x30}], 0x8}, 0x43}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000000840)=""/152, 0x98}], 0x2}, 0x45}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/52, 0x34}, {&(0x7f0000000980)=""/232, 0xe8}], 0x2, &(0x7f0000000ac0)=""/236, 0xec}, 0x273a}], 0x2, 0x40000103, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0x3, 0x54, 0x5, 0x5, 0x1}}}}]}, 0x4c}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xa, 0xa}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000d40)={@l2tp={0x2, 0x0, @remote, 0x3}, {&(0x7f0000000c80)=""/73, 0x49}, &(0x7f0000000d00), 0x1}, 0xa0) socket$igmp6(0xa, 0x3, 0x2) 2.347940627s ago: executing program 6 (id=3797): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000001c0)=""/67, 0x43) getdents64(r5, 0x0, 0xc0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc060}, 0x4000000) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r7, 0x0, 0x0}, 0x10) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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") 2.189975945s ago: executing program 6 (id=3799): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000000000}) fcntl$lock(r1, 0x6, &(0x7f0000000300)={0x1, 0x2, 0x2005, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x2, 0x20000000000001, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x24, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x7}}, 0x24, 0x3) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x361, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000180)='./cgroup\x00', r2, &(0x7f00000001c0)='./file0\x00') syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x8882) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="fffffffffffffbe65fbccf607f88c8bf54360eb342ee5508060001080006040008519f"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 1.993459364s ago: executing program 3 (id=3800): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04004100000010"]) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.944615577s ago: executing program 3 (id=3802): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x106f) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000280)={'filter\x00', 0x0, 0x3, 0x0, [0x0, 0x2, 0x8, 0x4, 0x9, 0x7fffffff], 0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdde, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040048}, 0x4000080) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r10, 0xfffffffffffffe55, &(0x7f00000002c0)}, 0xfffffffffffffe79) 1.537263416s ago: executing program 6 (id=3808): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') exit(0x3) fstat(r1, &(0x7f00000000c0)) (async) fstat(r1, &(0x7f00000000c0)) mkdir(0x0, 0x1ff) (async) mkdir(0x0, 0x1ff) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000440)=""/254, 0xfe}], 0x4, 0x2, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000002180)=[{&(0x7f0000000b40)}], 0x1, 0xe, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) (async) close(r2) r3 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x31c4b8, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() (async) munlockall() madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.535044836s ago: executing program 2 (id=3809): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000001c0)=""/67, 0x43) getdents64(r5, 0x0, 0xc0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc060}, 0x4000000) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r7, 0x0, 0x0}, 0x10) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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") 1.309911397s ago: executing program 5 (id=3812): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04004100000010"]) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.271356729s ago: executing program 1 (id=3813): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f40)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x3, 0x92, 0x2, 0x100, 0x3, 0x0, 0xd, 0x2fa, 0x40, 0x19b, 0x4, 0x3, 0x38, 0x3, 0xb46, 0x9, 0xe2c3}, [{0x60000000, 0x8, 0x52, 0x80000001, 0xf, 0x86, 0x3, 0x9}, {0x7, 0x69e11a50, 0x9, 0x1, 0x7f, 0x100000000, 0x7, 0xd375}, {0x5, 0x2, 0x200, 0x13fc, 0x7, 0x3, 0x7e2a, 0x2}], "505b69541a773ab9b78fd82b", ['\x00', '\x00', '\x00']}, 0x3f4) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) wait4(r0, 0x0, 0x60000000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x80000000, 0xfffffffe, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.212794011s ago: executing program 2 (id=3814): write(0xffffffffffffffff, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) mount(0x0, 0x0, 0x0, 0x10000, 0x0) pivot_root(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, 0x0) unshare(0x22020600) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0xaec1d2ec98f2df75) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@generic={0x73, 0x1, 0x1, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, 0x0, 0x25, 0x1, @void}, 0x10) 1.159640434s ago: executing program 3 (id=3815): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) r3 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000044000)) r4 = perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x10, 0x1, 0x5, 0x0, 0x7, 0x4d420, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x0, 0x1bef}, 0x11708, 0x0, 0x6, 0x3, 0x5, 0xfffffff8, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xa) perf_event_open(0x0, r3, 0xdfffffffffffffff, r4, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000000200)="19c3d6d9", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) mmap$usbmon(&(0x7f00008d1000/0x1000)=nil, 0x1000, 0xb, 0x100010, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'erspan0\x00', @ifru_addrs=@l2={0x1f, 0x8001, @any, 0x1, 0x2}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0xc0105500, &(0x7f0000000400)=ANY=[@ANYBLOB="a1"]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000008009000100626f6e64000000000c00028008001c000e00000040f3ec99fe2d24c8c65ba3c36a70cd068ee95487dc4c44fd0c03e16fa2c5968103"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.136182935s ago: executing program 2 (id=3816): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0xa, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b 8:* w'], 0x9) ppoll(&(0x7f0000000200)=[{r3, 0x16}], 0x1, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x36, 0x1, @thr={&(0x7f0000000240)="d02154928e3e9d4dae503e5443564d488ed0a4d0478ae2dc5bfb7649cc2cbfd3e2af3412173196c44a7da9c06c0d1702211de63fb6e4d25ef7c3b163b3f48aa4535d0f5906b379c42266bd1a9a8bbc3331d60598d31bae137a7b6c7375b4a258f99793aa08ae49a2767941f7626377ec937318764db57f069f6fa00de89327c663eea2aa21116e0e3dd9c4bc93", &(0x7f0000000300)="d4773811faaf1b2203a70a9322bdfbe828e2ffd213a8128268972a4659ed8bd06733ddf7bf9048643050c39d838f0b22e5a3fbcca43684653628b8220c47903e281efa64c637a61d1a3092a77ab5"}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r4, 0x29, 0x1f, 0x0, &(0x7f0000000640)) 1.084648278s ago: executing program 5 (id=3817): r0 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x0, 0x1a9}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x8, 0x3, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000e80)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'ip6tnl0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', 0x0, 0x29, 0xc, 0x2, 0x9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x20, 0x7800, 0xe, 0x2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000e40), 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=@newchain={0x64, 0x64, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0xf}, {0xfff2}, {0x0, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x38}]}}]}, 0x64}}, 0x4000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="040000001f4f0e33866c408745873fb5348468e6000000001800000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x9) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61a, &(0x7f0000000800)="$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") 970.458543ms ago: executing program 2 (id=3818): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000000000}) fcntl$lock(r1, 0x6, &(0x7f0000000300)={0x1, 0x2, 0x2005, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x2, 0x20000000000001, 0x9, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x24, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x7}}, 0x24, 0x3) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x361, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000180)='./cgroup\x00', r2, &(0x7f00000001c0)='./file0\x00') syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x8882) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="fffffffffffffbe65fbccf607f88c8bf54360eb342ee5508060001080006040008519f"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 887.019557ms ago: executing program 1 (id=3819): socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000", @ANYBLOB="0600"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 820.28788ms ago: executing program 1 (id=3820): bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 719.801865ms ago: executing program 5 (id=3821): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xbc}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, r2, 0x6}, 0x94) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x11}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x800) r4 = socket$inet6(0xa, 0x805, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000001c0)={'nicvf0\x00', {0x2, 0x4e20, @loopback}}) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000001240)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000fcffffff61101400000000006200c0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0xd7, &(0x7f0000000700)=""/215}, 0x94) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r6, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0) sendmsg$802154_dgram(r6, &(0x7f000000b8c0)={&(0x7f0000001180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400006000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493", 0x3a}, {&(0x7f0000000300)="fac102009987453e751fbe5a8ab7ad583303ba38660ca6e0cf5e6279a614e86700ed", 0x22}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x8) open_by_handle_at(r6, &(0x7f0000001100)=ANY=[@ANYRES8=r0], 0x571400) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=ANY=[@ANYRES64=r5], 0x24}, 0x1, 0x0, 0x0, 0x40008841}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 535.112714ms ago: executing program 6 (id=3822): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) write$P9_RREADDIR(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) getdents64(r1, &(0x7f0000001000)=""/164, 0xa4) r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0xc042, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', &(0x7f00000001c0)={0x200, 0x14d, 0x27}, 0x18) file_getattr(r4, &(0x7f0000000200)='./file2\x00', &(0x7f0000000280), 0x18, 0x1000) open(&(0x7f0000000140)='./file0\x00', 0x1c1d42, 0xf3) r5 = dup(r2) fsmount(r5, 0x1, 0x70) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x13e, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000036ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) setuid(0xee00) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r7 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/133, 0x85}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r7], 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000180)={0x0, 0x46, 0xa7c}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r9 = getpgrp(0x0) syz_open_procfs(r9, &(0x7f0000000300)='net\x00') write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) 533.389854ms ago: executing program 1 (id=3823): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x50) 480.369786ms ago: executing program 3 (id=3824): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f0000000800), 0x4) r1 = socket$rxrpc(0x21, 0x2, 0x2) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x7, 0x0, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000380)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x3, {0xa, 0x4e23, 0x0, @loopback, 0x6}}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "d4"}], 0x18}, 0x0) 443.351768ms ago: executing program 1 (id=3825): r0 = socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 318.954814ms ago: executing program 1 (id=3826): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) r1 = syz_usbip_server_init(0x1) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000001a40)={0x9d0, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@i_version}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt={'euid<', r0}}, {@subj_type={'subj_type', 0x3d, '(:\\'}}, {@fsname={'fsname', 0x3d, '\xd0^,'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'V\xb8+'}}, {@measure}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") r2 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000002, 0x30, r2, 0x214c6000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x7, 0x0, 0x4, 0x4}}, 0x26) 287.524735ms ago: executing program 5 (id=3827): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04004100000010"]) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 285.315186ms ago: executing program 2 (id=3828): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0xa, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030ae9000000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780060001002b66000008000640000000030900010073797a3000000000"], 0x114}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b 8:* w'], 0x9) ppoll(&(0x7f0000000200)=[{r3, 0x16}], 0x1, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x36, 0x1, @thr={&(0x7f0000000240)="d02154928e3e9d4dae503e5443564d488ed0a4d0478ae2dc5bfb7649cc2cbfd3e2af3412173196c44a7da9c06c0d1702211de63fb6e4d25ef7c3b163b3f48aa4535d0f5906b379c42266bd1a9a8bbc3331d60598d31bae137a7b6c7375b4a258f99793aa08ae49a2767941f7626377ec937318764db57f069f6fa00de89327c663eea2aa21116e0e3dd9c4bc93", &(0x7f0000000300)="d4773811faaf1b2203a70a9322bdfbe828e2ffd213a8128268972a4659ed8bd06733ddf7bf9048643050c39d838f0b22e5a3fbcca43684653628b8220c47903e281efa64c637a61d1a3092a77ab5"}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r4, 0x29, 0x1f, 0x0, &(0x7f0000000640)) 71.005916ms ago: executing program 3 (id=3829): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f40)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x3, 0x92, 0x2, 0x100, 0x3, 0x0, 0xd, 0x2fa, 0x40, 0x19b, 0x4, 0x3, 0x38, 0x3, 0xb46, 0x9, 0xe2c3}, [{0x60000000, 0x8, 0x52, 0x80000001, 0xf, 0x86, 0x3, 0x9}, {0x7, 0x69e11a50, 0x9, 0x1, 0x7f, 0x100000000, 0x7, 0xd375}, {0x5, 0x2, 0x200, 0x13fc, 0x7, 0x3, 0x7e2a, 0x2}], "505b69541a773ab9b78fd82b", ['\x00', '\x00', '\x00']}, 0x3f4) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) wait4(r0, 0x0, 0x60000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 69.388256ms ago: executing program 5 (id=3830): socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000", @ANYBLOB="0600"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 4.121629ms ago: executing program 2 (id=3831): r0 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x0, 0x1a9}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x8, 0x3, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000e80)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'ip6tnl0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', 0x0, 0x29, 0xc, 0x2, 0x9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x20, 0x7800, 0xe, 0x2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000e40), 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=@newchain={0x64, 0x64, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0xf}, {0xfff2}, {0x0, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x38}]}}]}, 0x64}}, 0x4000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="040000001f4f0e33866c408745873fb5348468e6000000001800000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x9) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61a, &(0x7f0000000800)="$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") 3.674309ms ago: executing program 6 (id=3832): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3378, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000080000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000009d00"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x5}) r4 = io_uring_setup(0x4388, &(0x7f0000000380)={0x0, 0x6, 0x10, 0x5, 0xc0}) mmap$IORING_OFF_SQ_RING(0x0, 0x401000, 0x200000c, 0x11, r4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x118) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x2284, &(0x7f00000003c0)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001114000126bd7000fbdbdf250800030002000000080003000400000008004b009277698fe285939d0971340eb277d26d3b000000394e1e48c783b1a044e58c20d9ca8a70b5b242e738f0cd0085e1a3c37675498ddd794573abf70023f4ba90c25d56178c8b1b"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 0s ago: executing program 5 (id=3833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 969][T19943] __dump_stack+0x1d/0x30 [ 614.889004][T19943] dump_stack_lvl+0x95/0xd0 [ 614.889027][T19943] dump_stack+0x15/0x1b [ 614.889112][T19943] should_fail_ex+0x262/0x280 [ 614.889137][T19943] should_fail+0xb/0x20 [ 614.889159][T19943] get_futex_key+0x12d/0xb10 [ 614.889259][T19943] ? should_fail_ex+0xdb/0x280 [ 614.889283][T19943] ? should_failslab+0x8c/0xb0 [ 614.889389][T19943] futex_wake+0x89/0x400 [ 614.889414][T19943] ? selinux_file_alloc_security+0xaa/0xd0 [ 614.889447][T19943] do_futex+0x3f8/0x460 [ 614.889492][T19943] __se_sys_futex+0x2f6/0x370 [ 614.889530][T19943] __x64_sys_futex+0x78/0x90 [ 614.889605][T19943] x64_sys_call+0x22e2/0x2550 [ 614.889632][T19943] do_syscall_64+0x112/0x360 [ 614.889703][T19943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.889731][T19943] RIP: 0033:0x7f05873ce159 [ 614.889779][T19943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.889815][T19943] RSP: 002b:00007f0585e060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 614.889839][T19943] RAX: ffffffffffffffda RBX: 00007f0587656098 RCX: 00007f05873ce159 [ 614.889854][T19943] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f058765609c [ 614.889868][T19943] RBP: 00007f0587656090 R08: 3fffffffffffffff R09: 0000000000000000 [ 614.889940][T19943] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 614.889953][T19943] R13: 00007f0587656128 R14: 00007ffd13cacb30 R15: 00007ffd13cacc18 [ 614.890046][T19943] [ 614.997519][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 614.997575][ T29] audit: type=1400 audit(2000000027.976:10659): avc: denied { write } for pid=19932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.160291][ T29] audit: type=1400 audit(2000000028.138:10660): avc: denied { write } for pid=19958 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.194549][ T29] audit: type=1326 audit(2000000028.167:10661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19959 comm="syz.2.3262" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 615.194700][ T29] audit: type=1326 audit(2000000028.167:10662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19959 comm="syz.2.3262" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 615.196750][ T29] audit: type=1326 audit(2000000028.167:10663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19959 comm="syz.2.3262" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 615.196905][ T29] audit: type=1326 audit(2000000028.167:10664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19959 comm="syz.2.3262" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 615.197407][ T29] audit: type=1326 audit(2000000028.167:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19959 comm="syz.2.3262" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 615.198135][ T29] audit: type=1326 audit(2000000028.167:10666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19959 comm="syz.2.3262" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 615.201572][ T29] audit: type=1326 audit(2000000028.176:10667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19959 comm="syz.2.3262" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 615.209508][ T29] audit: type=1326 audit(2000000028.176:10668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19959 comm="syz.2.3262" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 615.297798][T19934] xt_hashlimit: size too large, truncated to 1048576 [ 615.352074][T19966] netlink: 'syz.2.3262': attribute type 1 has an invalid length. [ 615.639105][T19983] FAULT_INJECTION: forcing a failure. [ 615.639105][T19983] name failslab, interval 1, probability 0, space 0, times 0 [ 615.639211][T19983] CPU: 1 UID: 0 PID: 19983 Comm: syz.5.3264 Not tainted syzkaller #0 PREEMPT(lazy) [ 615.639243][T19983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 615.639261][T19983] Call Trace: [ 615.639348][T19983] [ 615.639393][T19983] __dump_stack+0x1d/0x30 [ 615.639421][T19983] dump_stack_lvl+0x95/0xd0 [ 615.639475][T19983] dump_stack+0x15/0x1b [ 615.639504][T19983] should_fail_ex+0x262/0x280 [ 615.639537][T19983] should_failslab+0x8c/0xb0 [ 615.639578][T19983] __kvmalloc_node_noprof+0x168/0x5c0 [ 615.639653][T19983] ? bpf_compute_scc+0x90/0x630 [ 615.639688][T19983] ? bpf_compute_scc+0x90/0x630 [ 615.639757][T19983] bpf_compute_scc+0x90/0x630 [ 615.639811][T19983] bpf_check+0x1b5d/0x1d00 [ 615.639876][T19983] bpf_prog_load+0xefb/0x1060 [ 615.639975][T19983] ? avc_has_perm_noaudit+0xa3/0x120 [ 615.640077][T19983] __sys_bpf+0xbae/0xc30 [ 615.640228][T19983] ? do_futex+0x380/0x460 [ 615.640269][T19983] __x64_sys_bpf+0x69/0x80 [ 615.640299][T19983] x64_sys_call+0xf26/0x2550 [ 615.640332][T19983] do_syscall_64+0x112/0x360 [ 615.640466][T19983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.640497][T19983] RIP: 0033:0x7fd6dc8be159 [ 615.640516][T19983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.640579][T19983] RSP: 002b:00007fd6db317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.640606][T19983] RAX: ffffffffffffffda RBX: 00007fd6dcb45fa0 RCX: 00007fd6dc8be159 [ 615.640683][T19983] RDX: 000000000000004b RSI: 0000200000000440 RDI: 0000000000000005 [ 615.640696][T19983] RBP: 00007fd6dc95506b R08: 0000000000000000 R09: 0000000000000000 [ 615.640787][T19983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.640805][T19983] R13: 00007fd6dcb46038 R14: 00007fd6dcb45fa0 R15: 00007fffddc72428 [ 615.640835][T19983] [ 615.807180][T19987] loop9: detected capacity change from 0 to 128 [ 615.855180][T19987] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 615.858511][T19987] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.906077][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3266'. [ 615.997625][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3268'. [ 616.022092][T19998] hsr_slave_1 (unregistering): left promiscuous mode [ 616.064241][T10622] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.093324][T20015] loop5: detected capacity change from 0 to 512 [ 616.093689][T20015] EXT4-fs: Ignoring removed nobh option [ 616.103257][T20011] wg1 speed is unknown, defaulting to 1000 [ 616.124514][T20015] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 616.126056][T20015] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3268: attempt to clear invalid blocks 1 len 1 [ 616.126086][T20015] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 616.135908][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 616.135942][ C1] EXT4-fs (loop5): initial error at time 2000000029: ext4_clear_blocks:876: inode 13 [ 616.135974][ C1] EXT4-fs (loop5): last error at time 2000000029: ext4_clear_blocks:876: inode 13 [ 616.184444][T20015] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 616.184524][T20015] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3268: invalid indirect mapped block 1819239214 (level 0) [ 616.184553][T20015] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 616.185460][T20015] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3268: invalid indirect mapped block 1819239214 (level 1) [ 616.185501][T20015] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 616.186463][T20015] EXT4-fs (loop5): 1 truncate cleaned up [ 616.186899][T20015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.644342][T20057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3279'. [ 616.845412][T19579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.322051][T20106] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3286'. [ 617.322090][T20106] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3286'. [ 617.322156][T20106] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3286'. [ 617.322217][T20106] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3286'. [ 617.322443][T20106] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3286'. [ 617.557794][T20110] loop2: detected capacity change from 0 to 8192 [ 617.574342][T20110] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 618.026412][T20147] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.063538][T20152] loop9: detected capacity change from 0 to 164 [ 618.255636][T20166] loop5: detected capacity change from 0 to 512 [ 618.261505][T20166] EXT4-fs: Ignoring removed nobh option [ 618.271347][T20166] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 618.271885][T20166] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3304: attempt to clear invalid blocks 1 len 1 [ 618.271926][T20166] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 618.272233][T20166] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 618.272342][T20166] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3304: invalid indirect mapped block 1819239214 (level 0) [ 618.272722][T20166] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 618.272891][T20166] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3304: invalid indirect mapped block 1819239214 (level 1) [ 618.272932][T20166] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 618.273436][T20166] EXT4-fs (loop5): 1 truncate cleaned up [ 618.274110][T20166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.296962][T20171] loop9: detected capacity change from 0 to 512 [ 618.298060][T20171] EXT4-fs: dax option not supported [ 618.370799][T20172] loop9: detected capacity change from 0 to 164 [ 618.420794][T19579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.483737][T20174] wg1 speed is unknown, defaulting to 1000 [ 618.764781][T20181] wg1 speed is unknown, defaulting to 1000 [ 618.888166][T20185] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 619.255180][T20200] netlink: 'syz.9.3313': attribute type 1 has an invalid length. [ 619.308471][T20185] Cannot find add_set index 4 as target [ 619.411889][T20212] __nla_validate_parse: 142 callbacks suppressed [ 619.411910][T20212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 619.491370][T20211] syz.2.3318 (20211) used obsolete PPPIOCDETACH ioctl [ 619.696902][T20237] loop9: detected capacity change from 0 to 512 [ 619.708931][T20237] EXT4-fs: dax option not supported [ 619.794650][T20237] loop9: detected capacity change from 0 to 164 [ 620.001706][T20249] wg1 speed is unknown, defaulting to 1000 [ 620.206112][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3332'. [ 620.210837][T20258] loop2: detected capacity change from 0 to 512 [ 620.228378][T20258] EXT4-fs: Ignoring removed nobh option [ 620.234682][T20258] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 620.235241][T20258] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3332: attempt to clear invalid blocks 1 len 1 [ 620.235278][T20258] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 620.235541][T20258] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 620.235612][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 620.235633][ C1] EXT4-fs (loop2): initial error at time 2000000032: ext4_clear_blocks:876: inode 13 [ 620.235678][ C1] EXT4-fs (loop2): last error at time 2000000032: ext4_clear_blocks:876: inode 13 [ 620.235842][T20258] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3332: invalid indirect mapped block 1819239214 (level 0) [ 620.235879][T20258] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 620.310861][T20258] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3332: invalid indirect mapped block 1819239214 (level 1) [ 620.310986][T20258] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 620.312382][T20258] EXT4-fs (loop2): 1 truncate cleaned up [ 620.313369][T20258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.396717][ T7271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.484621][T20265] loop2: detected capacity change from 0 to 164 [ 620.643825][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3333'. [ 621.003233][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 621.003254][ T29] audit: type=1326 audit(2000000033.665:10991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.3.3344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b850e159 code=0x7ffc0000 [ 621.003378][ T29] audit: type=1326 audit(2000000033.665:10992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.3.3344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b850e159 code=0x7ffc0000 [ 621.006733][ T29] audit: type=1326 audit(2000000033.665:10993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.3.3344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b850e159 code=0x7ffc0000 [ 621.007346][ T29] audit: type=1326 audit(2000000033.665:10994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.3.3344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff7b850e159 code=0x7ffc0000 [ 621.016192][ T29] audit: type=1326 audit(2000000033.675:10995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.3.3344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b850e159 code=0x7ffc0000 [ 621.016420][ T29] audit: type=1326 audit(2000000033.675:10996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.3.3344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b850e159 code=0x7ffc0000 [ 621.021711][ T29] audit: type=1326 audit(2000000033.684:10997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.3.3344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b850e159 code=0x7ffc0000 [ 621.022332][ T29] audit: type=1326 audit(2000000033.684:10998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.3.3344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b850e159 code=0x7ffc0000 [ 621.024048][ T29] audit: type=1326 audit(2000000033.684:10999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.3.3344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7b850e159 code=0x7ffc0000 [ 621.024351][ T29] audit: type=1326 audit(2000000033.684:11000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.3.3344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b850e159 code=0x7ffc0000 [ 621.097256][T20308] loop5: detected capacity change from 0 to 256 [ 621.105299][T20308] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 621.135996][T20308] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 621.147556][T20311] netlink: 'syz.3.3344': attribute type 1 has an invalid length. [ 621.384179][T20315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3345'. [ 621.789434][T20341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 621.789485][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3353'. [ 621.789517][T20341] netlink: 'syz.2.3353': attribute type 15 has an invalid length. [ 621.789534][T20341] netlink: 'syz.2.3353': attribute type 18 has an invalid length. [ 621.792987][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 621.793010][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3353'. [ 621.793039][T20342] netlink: 'syz.2.3353': attribute type 15 has an invalid length. [ 621.793057][T20342] netlink: 'syz.2.3353': attribute type 18 has an invalid length. [ 621.953511][T20347] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3355'. [ 622.212690][T20351] loop5: detected capacity change from 0 to 4096 [ 622.216775][T20351] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 622.388321][ T4768] IPVS: starting estimator thread 0... [ 622.439853][T20366] loop2: detected capacity change from 0 to 164 [ 622.476339][T20363] IPVS: using max 2016 ests per chain, 100800 per kthread [ 622.676389][T20368] loop9: detected capacity change from 0 to 512 [ 622.727934][T20368] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 622.728168][T20368] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 623.257139][T20408] netlink: 'syz.5.3367': attribute type 1 has an invalid length. [ 623.525778][T20426] xt_hashlimit: size too large, truncated to 1048576 [ 623.591999][T20430] loop5: detected capacity change from 0 to 512 [ 623.593991][T20430] EXT4-fs: Ignoring removed nobh option [ 623.598790][T20430] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 623.618480][T20430] EXT4-fs (loop5): 1 truncate cleaned up [ 623.619099][T20430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.667625][T19579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.982392][T20461] loop9: detected capacity change from 0 to 1024 [ 624.011750][T20461] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 624.011875][T20461] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.018898][T20461] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.3381: bg 0: block 112: padding at end of block bitmap is not set [ 624.174287][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3385'. [ 624.358361][T20475] netlink: 'syz.3.3387': attribute type 4 has an invalid length. [ 624.921175][T10622] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 625.230962][T20508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3396'. [ 625.377878][T20513] loop9: detected capacity change from 0 to 389 [ 625.410417][T20515] loop2: detected capacity change from 0 to 128 [ 625.432924][T20515] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 625.450915][T20515] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.627385][ T7271] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 625.641900][T20529] ./dev/sda1: Can't lookup blockdev [ 625.809671][T20539] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.861292][T20544] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 625.960667][T20549] IPv6: Can't replace route, no match found [ 625.987134][T20548] tipc: Cannot configure node identity twice [ 626.043209][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3410'. [ 626.078567][T20551] loop9: detected capacity change from 0 to 512 [ 626.117761][T20551] EXT4-fs: Ignoring removed nobh option [ 626.158625][T20551] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 626.162049][T20551] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3410: attempt to clear invalid blocks 1 len 1 [ 626.162108][T20551] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 626.183420][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 626.183455][ C1] EXT4-fs (loop9): initial error at time 2000000038: ext4_clear_blocks:876: inode 13 [ 626.183498][ C1] EXT4-fs (loop9): last error at time 2000000038: ext4_clear_blocks:876: inode 13 [ 626.219790][T20551] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 626.220051][T20551] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3410: invalid indirect mapped block 1819239214 (level 0) [ 626.220191][T20551] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 626.249384][T20551] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3410: invalid indirect mapped block 1819239214 (level 1) [ 626.249513][T20551] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 626.293843][T20551] EXT4-fs (loop9): 1 truncate cleaned up [ 626.294479][T20551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.499028][T20549] loop5: detected capacity change from 0 to 8192 [ 626.542011][T10622] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.726335][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 626.726356][ T29] audit: type=1326 audit(2000000039.037:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20581 comm="syz.9.3416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05873ce159 code=0x7ffc0000 [ 626.726943][ T29] audit: type=1326 audit(2000000039.037:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20581 comm="syz.9.3416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05873ce159 code=0x7ffc0000 [ 626.727233][ T29] audit: type=1326 audit(2000000039.037:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20581 comm="syz.9.3416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05873ce159 code=0x7ffc0000 [ 626.727857][ T29] audit: type=1326 audit(2000000039.037:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20581 comm="syz.9.3416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f05873ce159 code=0x7ffc0000 [ 626.730775][ T29] audit: type=1326 audit(2000000039.046:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20581 comm="syz.9.3416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05873ce159 code=0x7ffc0000 [ 626.732123][ T29] audit: type=1326 audit(2000000039.046:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20581 comm="syz.9.3416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05873ce159 code=0x7ffc0000 [ 626.732686][ T29] audit: type=1326 audit(2000000039.046:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20581 comm="syz.9.3416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05873ce159 code=0x7ffc0000 [ 626.737221][ T29] audit: type=1326 audit(2000000039.046:11310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20581 comm="syz.9.3416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05873ce159 code=0x7ffc0000 [ 626.758376][ T29] audit: type=1326 audit(2000000039.065:11311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20581 comm="syz.9.3416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05873ce159 code=0x7ffc0000 [ 626.765144][ T29] audit: type=1326 audit(2000000039.075:11313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20581 comm="syz.9.3416" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05873ce159 code=0x7ffc0000 [ 627.044168][T20587] netlink: 'syz.9.3416': attribute type 1 has an invalid length. [ 627.348560][T20597] xt_hashlimit: size too large, truncated to 1048576 [ 627.451347][T20602] FAULT_INJECTION: forcing a failure. [ 627.451347][T20602] name failslab, interval 1, probability 0, space 0, times 0 [ 627.451402][T20602] CPU: 1 UID: 0 PID: 20602 Comm: syz.2.3424 Not tainted syzkaller #0 PREEMPT(lazy) [ 627.451474][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 627.451537][T20602] Call Trace: [ 627.451546][T20602] [ 627.451556][T20602] __dump_stack+0x1d/0x30 [ 627.451590][T20602] dump_stack_lvl+0x95/0xd0 [ 627.451622][T20602] dump_stack+0x15/0x1b [ 627.451652][T20602] should_fail_ex+0x262/0x280 [ 627.451688][T20602] ? proc_thread_self_get_link+0xaf/0x130 [ 627.451775][T20602] should_failslab+0x8c/0xb0 [ 627.451820][T20602] __kmalloc_cache_noprof+0x7a/0x400 [ 627.451865][T20602] ? proc_thread_self_get_link+0xaf/0x130 [ 627.451897][T20602] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 627.451943][T20602] proc_thread_self_get_link+0xaf/0x130 [ 627.451974][T20602] pick_link+0x514/0x8e0 [ 627.452010][T20602] step_into_slowpath+0x36a/0x4c0 [ 627.452108][T20602] ? inode_permission+0x1da/0x3b0 [ 627.452141][T20602] link_path_walk+0x947/0xdd0 [ 627.452249][T20602] path_lookupat+0x53/0x4c0 [ 627.452321][T20602] filename_lookup+0x18f/0x390 [ 627.452410][T20602] kern_path+0x3b/0xf0 [ 627.452439][T20602] unix_find_other+0xe9/0x6e0 [ 627.452511][T20602] unix_stream_connect+0x2f6/0xa60 [ 627.452581][T20602] ? __sock_create+0x4eb/0x580 [ 627.452668][T20602] p9_fd_create_unix+0x1a2/0x300 [ 627.452730][T20602] p9_client_create+0x22d/0x760 [ 627.452765][T20602] ? v9fs_get_tree+0x49/0x5e0 [ 627.452837][T20602] ? __kmalloc_cache_noprof+0x331/0x400 [ 627.452942][T20602] v9fs_session_init+0x38/0x510 [ 627.452974][T20602] v9fs_get_tree+0x5c/0x5e0 [ 627.453059][T20602] vfs_get_tree+0x57/0x1d0 [ 627.453102][T20602] do_new_mount+0x288/0x8d0 [ 627.453204][T20602] path_mount+0x4ad/0xb90 [ 627.453270][T20602] __se_sys_mount+0x28c/0x2e0 [ 627.453401][T20602] __x64_sys_mount+0x67/0x80 [ 627.453430][T20602] x64_sys_call+0xc3b/0x2550 [ 627.453469][T20602] do_syscall_64+0x112/0x360 [ 627.453580][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.453612][T20602] RIP: 0033:0x7fc07f9ae159 [ 627.453635][T20602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.453662][T20602] RSP: 002b:00007fc07e3e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 627.453692][T20602] RAX: ffffffffffffffda RBX: 00007fc07fc36090 RCX: 00007fc07f9ae159 [ 627.453765][T20602] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000200000000600 [ 627.453785][T20602] RBP: 00007fc07fa4506b R08: 00002000000006c0 R09: 0000000000000000 [ 627.453805][T20602] R10: 000000000280c012 R11: 0000000000000246 R12: 0000000000000000 [ 627.453820][T20602] R13: 00007fc07fc36128 R14: 00007fc07fc36090 R15: 00007ffdac533e98 [ 627.453849][T20602] [ 627.633692][T20602] 9pnet_fd: p9_fd_create_unix (20602): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 627.652566][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3426'. [ 628.171763][T20628] bond1: entered allmulticast mode [ 628.173194][T20628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.375506][T20625] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 628.463475][T20632] wg1 speed is unknown, defaulting to 1000 [ 628.715362][T20646] loop5: detected capacity change from 0 to 164 [ 628.801846][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3432'. [ 629.123738][T20657] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3438'. [ 629.190658][T20659] loop5: detected capacity change from 0 to 128 [ 629.352815][T20671] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3440'. [ 629.352862][T20671] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 629.429876][T20659] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 629.435263][T20659] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.557644][T20682] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 629.665553][T19579] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 629.797840][T20694] FAULT_INJECTION: forcing a failure. [ 629.797840][T20694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.797879][T20694] CPU: 1 UID: 0 PID: 20694 Comm: syz.5.3443 Not tainted syzkaller #0 PREEMPT(lazy) [ 629.797914][T20694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.797940][T20694] Call Trace: [ 629.797950][T20694] [ 629.797959][T20694] __dump_stack+0x1d/0x30 [ 629.797993][T20694] dump_stack_lvl+0x95/0xd0 [ 629.798031][T20694] dump_stack+0x15/0x1b [ 629.798072][T20694] should_fail_ex+0x262/0x280 [ 629.798158][T20694] should_fail+0xb/0x20 [ 629.798188][T20694] should_fail_usercopy+0x1a/0x20 [ 629.798223][T20694] _copy_from_iter+0xcc/0xe70 [ 629.798259][T20694] ? __alloc_skb+0x516/0x6f0 [ 629.798343][T20694] ? __alloc_skb+0x209/0x6f0 [ 629.798390][T20694] netlink_sendmsg+0x4a4/0x6f0 [ 629.798437][T20694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.798554][T20694] ____sys_sendmsg+0x532/0x580 [ 629.798586][T20694] ___sys_sendmsg+0x195/0x1e0 [ 629.798688][T20694] __sys_sendmmsg+0x185/0x320 [ 629.798759][T20694] __x64_sys_sendmmsg+0x57/0x70 [ 629.798789][T20694] x64_sys_call+0x1fb4/0x2550 [ 629.798834][T20694] do_syscall_64+0x112/0x360 [ 629.798883][T20694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.798915][T20694] RIP: 0033:0x7fd6dc8be159 [ 629.798940][T20694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.799020][T20694] RSP: 002b:00007fd6db317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 629.799123][T20694] RAX: ffffffffffffffda RBX: 00007fd6dcb45fa0 RCX: 00007fd6dc8be159 [ 629.799144][T20694] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 629.799164][T20694] RBP: 00007fd6db317090 R08: 0000000000000000 R09: 0000000000000000 [ 629.799182][T20694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.799200][T20694] R13: 00007fd6dcb46038 R14: 00007fd6dcb45fa0 R15: 00007fffddc72428 [ 629.799230][T20694] [ 629.844985][T20693] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 630.288038][T20720] loop5: detected capacity change from 0 to 164 [ 630.536830][T20736] ./dev/sda1: Can't lookup blockdev [ 630.840006][T20750] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 631.144776][T20762] loop9: detected capacity change from 0 to 512 [ 631.156181][T20762] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 631.201448][T20762] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.3461: invalid indirect mapped block 4294967295 (level 0) [ 631.201509][T20762] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 631.203450][T20762] EXT4-fs (loop9): Remounting filesystem read-only [ 631.203540][T20762] EXT4-fs (loop9): 1 orphan inode deleted [ 631.203555][T20762] EXT4-fs (loop9): 1 truncate cleaned up [ 631.204087][T20762] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.241544][T20767] ./dev/sda1: Can't lookup blockdev [ 631.497790][T20777] FAULT_INJECTION: forcing a failure. [ 631.497790][T20777] name failslab, interval 1, probability 0, space 0, times 0 [ 631.497832][T20777] CPU: 0 UID: 0 PID: 20777 Comm: syz.5.3466 Not tainted syzkaller #0 PREEMPT(lazy) [ 631.497900][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 631.497914][T20777] Call Trace: [ 631.497924][T20777] [ 631.497935][T20777] __dump_stack+0x1d/0x30 [ 631.497969][T20777] dump_stack_lvl+0x95/0xd0 [ 631.498008][T20777] dump_stack+0x15/0x1b [ 631.498028][T20777] should_fail_ex+0x262/0x280 [ 631.498061][T20777] should_failslab+0x8c/0xb0 [ 631.498157][T20777] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 631.498230][T20777] ? __d_alloc+0x34/0x320 [ 631.498255][T20777] ? __d_alloc+0x34/0x320 [ 631.498284][T20777] __d_alloc+0x34/0x320 [ 631.498321][T20777] d_alloc+0x2e/0x100 [ 631.498389][T20777] lookup_one_qstr_excl+0x95/0x240 [ 631.498425][T20777] filename_unlinkat+0x149/0x410 [ 631.498470][T20777] __se_sys_unlink+0x2b/0xe0 [ 631.498541][T20777] __x64_sys_unlink+0x1f/0x30 [ 631.498585][T20777] x64_sys_call+0x18ee/0x2550 [ 631.498680][T20777] do_syscall_64+0x112/0x360 [ 631.498785][T20777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.498820][T20777] RIP: 0033:0x7fd6dc8be159 [ 631.498851][T20777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.498877][T20777] RSP: 002b:00007fd6db317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 631.498901][T20777] RAX: ffffffffffffffda RBX: 00007fd6dcb45fa0 RCX: 00007fd6dc8be159 [ 631.498916][T20777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 631.498970][T20777] RBP: 00007fd6db317090 R08: 0000000000000000 R09: 0000000000000000 [ 631.498983][T20777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.499038][T20777] R13: 00007fd6dcb46038 R14: 00007fd6dcb45fa0 R15: 00007fffddc72428 [ 631.499068][T20777] [ 631.684967][T20779] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.750266][T20781] loop5: detected capacity change from 0 to 128 [ 631.765870][T20781] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 631.766287][T20781] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.809924][T20781] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 631.830979][T10622] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.850936][T19579] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 632.004543][T20794] loop2: detected capacity change from 0 to 512 [ 632.006697][T20794] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 632.035831][T20794] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3474: invalid indirect mapped block 4294967295 (level 0) [ 632.035903][T20794] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 632.050681][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 632.050709][ C0] EXT4-fs (loop2): initial error at time 2000000043: ext4_free_branches:1023: inode 16 [ 632.050753][ C0] EXT4-fs (loop2): last error at time 2000000043: ext4_free_branches:1023: inode 16 [ 632.090753][T20794] EXT4-fs (loop2): Remounting filesystem read-only [ 632.091019][T20794] EXT4-fs (loop2): 1 orphan inode deleted [ 632.091073][T20794] EXT4-fs (loop2): 1 truncate cleaned up [ 632.092152][T20794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.145551][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 632.145572][ T29] audit: type=1326 audit(2000000044.110:11425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20799 comm="syz.5.3476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x0 [ 632.273477][T20808] loop5: detected capacity change from 0 to 512 [ 632.277449][T20808] EXT4-fs: dax option not supported [ 632.335443][T20807] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3478'. [ 632.361915][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3478'. [ 632.429839][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3478'. [ 632.526884][T20819] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 632.707550][ T7271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.088374][T20842] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.094470][T20845] loop5: detected capacity change from 0 to 512 [ 633.171197][T20847] loop5: detected capacity change from 0 to 1024 [ 633.181580][T20847] EXT4-fs: Ignoring removed nomblk_io_submit option [ 633.220777][T20850] loop2: detected capacity change from 0 to 512 [ 633.235862][T20847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.305812][T20854] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 633.350561][ T29] audit: type=1400 audit(2000000045.229:11426): avc: denied { ioctl } for pid=20849 comm="syz.2.3492" path="socket:[58847]" dev="sockfs" ino=58847 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 633.587385][T19579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.587962][T20863] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 633.854501][ T29] audit: type=1326 audit(2000000045.694:11427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.5.3501" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x0 [ 633.854697][T20879] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.976957][T20882] loop5: detected capacity change from 0 to 512 [ 633.986322][T20882] EXT4-fs: dax option not supported [ 634.142649][T20885] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 634.742481][ T29] audit: type=1326 audit(2000000046.523:11428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20909 comm="syz.2.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 634.742902][ T29] audit: type=1326 audit(2000000046.523:11429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20909 comm="syz.2.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 634.742951][ T29] audit: type=1326 audit(2000000046.523:11430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20909 comm="syz.2.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 634.743386][ T29] audit: type=1326 audit(2000000046.523:11431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20909 comm="syz.2.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 634.748364][ T29] audit: type=1326 audit(2000000046.523:11432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20909 comm="syz.2.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 634.748895][ T29] audit: type=1326 audit(2000000046.523:11433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20909 comm="syz.2.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 634.748938][ T29] audit: type=1326 audit(2000000046.523:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20909 comm="syz.2.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 634.955110][T20910] netlink: 'syz.2.3513': attribute type 1 has an invalid length. [ 635.248625][T20938] netlink: 'syz.5.3517': attribute type 1 has an invalid length. [ 635.291646][T20934] loop2: detected capacity change from 0 to 512 [ 635.346584][T20934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.350337][T20934] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.485578][ T7271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.623838][T20953] loop5: detected capacity change from 0 to 512 [ 635.624318][T20953] EXT4-fs: dax option not supported [ 635.664448][T20955] xt_CT: You must specify a L4 protocol and not use inversions on it [ 635.715856][T20959] xt_hashlimit: size too large, truncated to 1048576 [ 635.908643][T20960] FAULT_INJECTION: forcing a failure. [ 635.908643][T20960] name failslab, interval 1, probability 0, space 0, times 0 [ 635.908673][T20960] CPU: 1 UID: 0 PID: 20960 Comm: syz.2.3528 Not tainted syzkaller #0 PREEMPT(lazy) [ 635.908887][T20960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.908906][T20960] Call Trace: [ 635.908914][T20960] [ 635.908924][T20960] __dump_stack+0x1d/0x30 [ 635.908960][T20960] dump_stack_lvl+0x95/0xd0 [ 635.908993][T20960] dump_stack+0x15/0x1b [ 635.909074][T20960] should_fail_ex+0x262/0x280 [ 635.909146][T20960] ? proc_thread_self_get_link+0xaf/0x130 [ 635.909245][T20960] should_failslab+0x8c/0xb0 [ 635.909283][T20960] __kmalloc_cache_noprof+0x7a/0x400 [ 635.909384][T20960] ? proc_thread_self_get_link+0xaf/0x130 [ 635.909475][T20960] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 635.909505][T20960] proc_thread_self_get_link+0xaf/0x130 [ 635.909615][T20960] pick_link+0x514/0x8e0 [ 635.909720][T20960] step_into_slowpath+0x36a/0x4c0 [ 635.909754][T20960] ? inode_permission+0x1da/0x3b0 [ 635.909778][T20960] link_path_walk+0x947/0xdd0 [ 635.909839][T20960] path_lookupat+0x53/0x4c0 [ 635.909872][T20960] filename_lookup+0x18f/0x390 [ 635.909919][T20960] kern_path+0x3b/0xf0 [ 635.909960][T20960] unix_find_other+0xe9/0x6e0 [ 635.909992][T20960] unix_stream_connect+0x2f6/0xa60 [ 635.910070][T20960] ? __sock_create+0x4eb/0x580 [ 635.910114][T20960] p9_fd_create_unix+0x1a2/0x300 [ 635.910161][T20960] p9_client_create+0x22d/0x760 [ 635.910187][T20960] ? v9fs_get_tree+0x49/0x5e0 [ 635.910243][T20960] ? __kmalloc_cache_noprof+0x331/0x400 [ 635.910365][T20960] v9fs_session_init+0x38/0x510 [ 635.910421][T20960] v9fs_get_tree+0x5c/0x5e0 [ 635.910467][T20960] vfs_get_tree+0x57/0x1d0 [ 635.910497][T20960] do_new_mount+0x288/0x8d0 [ 635.910552][T20960] path_mount+0x4ad/0xb90 [ 635.910657][T20960] __se_sys_mount+0x28c/0x2e0 [ 635.910710][T20960] __x64_sys_mount+0x67/0x80 [ 635.910737][T20960] x64_sys_call+0xc3b/0x2550 [ 635.910828][T20960] do_syscall_64+0x112/0x360 [ 635.910877][T20960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.910908][T20960] RIP: 0033:0x7fc07f9ae159 [ 635.910931][T20960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.910954][T20960] RSP: 002b:00007fc07e3e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 635.910982][T20960] RAX: ffffffffffffffda RBX: 00007fc07fc36090 RCX: 00007fc07f9ae159 [ 635.911023][T20960] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000200000000600 [ 635.911042][T20960] RBP: 00007fc07fa4506b R08: 00002000000006c0 R09: 0000000000000000 [ 635.911059][T20960] R10: 000000000280c012 R11: 0000000000000246 R12: 0000000000000000 [ 635.911078][T20960] R13: 00007fc07fc36128 R14: 00007fc07fc36090 R15: 00007ffdac533e98 [ 635.911154][T20960] [ 636.216829][T20960] 9pnet_fd: p9_fd_create_unix (20960): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 636.342403][T20980] tipc: Started in network mode [ 636.342421][T20980] tipc: Node identity 4, cluster identity 4711 [ 636.342437][T20980] tipc: Node number set to 4 [ 636.373978][T20981] netlink: 'syz.6.3533': attribute type 1 has an invalid length. [ 637.120759][T21014] xt_hashlimit: size too large, truncated to 1048576 [ 637.520220][T21026] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3549'. [ 637.556328][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 637.556418][ T29] audit: type=1326 audit(2000000049.137:11756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21029 comm="syz.6.3550" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f632384e159 code=0x0 [ 637.718092][ T29] audit: type=1326 audit(2000000049.286:11757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21033 comm="syz.2.3552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 637.718389][ T29] audit: type=1326 audit(2000000049.286:11758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21033 comm="syz.2.3552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 637.718501][ T29] audit: type=1326 audit(2000000049.286:11759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21033 comm="syz.2.3552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 637.797620][ T29] audit: type=1326 audit(2000000049.370:11760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21033 comm="syz.2.3552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f9ae159 code=0x7ffc0000 [ 637.797683][ T29] audit: type=1326 audit(2000000049.370:11761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21033 comm="syz.2.3552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc07f9adec2 code=0x7ffc0000 [ 637.798404][ T29] audit: type=1326 audit(2000000049.370:11762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21033 comm="syz.2.3552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc07f9adf57 code=0x7ffc0000 [ 637.798447][ T29] audit: type=1326 audit(2000000049.370:11763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21033 comm="syz.2.3552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc07f96ae51 code=0x7ffc0000 [ 637.798491][ T29] audit: type=1326 audit(2000000049.370:11764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21033 comm="syz.2.3552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc07f9aef49 code=0x7ffc0000 [ 637.798829][ T29] audit: type=1326 audit(2000000049.370:11765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21033 comm="syz.2.3552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fc07f96a5ac code=0x7ffc0000 [ 637.984448][T21040] FAULT_INJECTION: forcing a failure. [ 637.984448][T21040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.984800][T21040] CPU: 0 UID: 0 PID: 21040 Comm: syz.5.3551 Not tainted syzkaller #0 PREEMPT(lazy) [ 637.984829][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.984901][T21040] Call Trace: [ 637.984910][T21040] [ 637.984921][T21040] __dump_stack+0x1d/0x30 [ 637.984956][T21040] dump_stack_lvl+0x95/0xd0 [ 637.984981][T21040] dump_stack+0x15/0x1b [ 637.985029][T21040] should_fail_ex+0x262/0x280 [ 637.985073][T21040] should_fail+0xb/0x20 [ 637.985103][T21040] should_fail_usercopy+0x1a/0x20 [ 637.985138][T21040] _copy_to_user+0x20/0xa0 [ 637.985194][T21040] simple_read_from_buffer+0xb5/0x130 [ 637.985236][T21040] proc_fail_nth_read+0x10e/0x150 [ 637.985345][T21040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 637.985414][T21040] vfs_read+0x18e/0x7c0 [ 637.985452][T21040] ? __rcu_read_unlock+0x4e/0x70 [ 637.985496][T21040] ? __fget_files+0x184/0x1c0 [ 637.985533][T21040] ? mutex_lock+0x57/0x90 [ 637.985569][T21040] ksys_read+0xdc/0x1a0 [ 637.985599][T21040] __x64_sys_read+0x40/0x50 [ 637.985667][T21040] x64_sys_call+0x2135/0x2550 [ 637.985694][T21040] do_syscall_64+0x112/0x360 [ 637.985744][T21040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.985773][T21040] RIP: 0033:0x7fd6dc87e98e [ 637.985789][T21040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 637.985815][T21040] RSP: 002b:00007fd6db2d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 637.985842][T21040] RAX: ffffffffffffffda RBX: 00007fd6db2d56c0 RCX: 00007fd6dc87e98e [ 637.985857][T21040] RDX: 000000000000000f RSI: 00007fd6db2d50a0 RDI: 0000000000000009 [ 637.985937][T21040] RBP: 00007fd6db2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 637.986005][T21040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.986037][T21040] R13: 00007fd6dcb46218 R14: 00007fd6dcb46180 R15: 00007fffddc72428 [ 637.986067][T21040] [ 638.048826][T21034] netlink: 'syz.2.3552': attribute type 1 has an invalid length. [ 638.943837][T21056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3557'. [ 639.991877][T21066] xt_hashlimit: size too large, truncated to 1048576 [ 640.110670][T21058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.151689][T21066] 9pnet_fd: p9_fd_create_unix (21066): problem connecting socket: ./proc/thread-self/fail-nth: -12 [ 640.378493][T21074] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3564'. [ 640.378523][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3564'. [ 640.831938][T21093] bond0: Error: CAN devices cannot be enslaved [ 641.202269][T21099] FAULT_INJECTION: forcing a failure. [ 641.202269][T21099] name failslab, interval 1, probability 0, space 0, times 0 [ 641.202312][T21099] CPU: 1 UID: 0 PID: 21099 Comm: syz.5.3572 Not tainted syzkaller #0 PREEMPT(lazy) [ 641.202378][T21099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 641.202475][T21099] Call Trace: [ 641.202484][T21099] [ 641.202495][T21099] __dump_stack+0x1d/0x30 [ 641.202527][T21099] dump_stack_lvl+0x95/0xd0 [ 641.202631][T21099] dump_stack+0x15/0x1b [ 641.202653][T21099] should_fail_ex+0x262/0x280 [ 641.202694][T21099] ? rtnl_newlink+0x5c/0x1510 [ 641.202730][T21099] should_failslab+0x8c/0xb0 [ 641.202783][T21099] __kmalloc_cache_noprof+0x7a/0x400 [ 641.202848][T21099] ? rtnl_newlink+0x5c/0x1510 [ 641.202882][T21099] ? __pfx_rtnl_newlink+0x10/0x10 [ 641.202919][T21099] rtnl_newlink+0x5c/0x1510 [ 641.203107][T21099] ? strlen+0x19/0x40 [ 641.203131][T21099] ? __memcg_slab_free_hook+0x154/0x340 [ 641.203241][T21099] ? __rcu_read_unlock+0x4e/0x70 [ 641.203284][T21099] ? avc_has_perm_noaudit+0xa3/0x120 [ 641.203336][T21099] ? cred_has_capability+0x224/0x2a0 [ 641.203371][T21099] ? selinux_capable+0x31/0x40 [ 641.203409][T21099] ? security_capable+0x7b/0x90 [ 641.203480][T21099] ? ns_capable+0x80/0xb0 [ 641.203501][T21099] ? __pfx_rtnl_newlink+0x10/0x10 [ 641.203527][T21099] rtnetlink_rcv_msg+0x64b/0x720 [ 641.203627][T21099] netlink_rcv_skb+0x11e/0x220 [ 641.203670][T21099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.203704][T21099] rtnetlink_rcv+0x1c/0x30 [ 641.203805][T21099] netlink_unicast+0x5a9/0x680 [ 641.203842][T21099] netlink_sendmsg+0x5be/0x6f0 [ 641.203888][T21099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.203982][T21099] ____sys_sendmsg+0x532/0x580 [ 641.204012][T21099] ___sys_sendmsg+0x195/0x1e0 [ 641.204061][T21099] __sys_sendmmsg+0x185/0x320 [ 641.204104][T21099] __x64_sys_sendmmsg+0x57/0x70 [ 641.204132][T21099] x64_sys_call+0x1fb4/0x2550 [ 641.204161][T21099] do_syscall_64+0x112/0x360 [ 641.204212][T21099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.204278][T21099] RIP: 0033:0x7fd6dc8be159 [ 641.204300][T21099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.204322][T21099] RSP: 002b:00007fd6db317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 641.204427][T21099] RAX: ffffffffffffffda RBX: 00007fd6dcb45fa0 RCX: 00007fd6dc8be159 [ 641.204447][T21099] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 641.204465][T21099] RBP: 00007fd6db317090 R08: 0000000000000000 R09: 0000000000000000 [ 641.204483][T21099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.204500][T21099] R13: 00007fd6dcb46038 R14: 00007fd6dcb45fa0 R15: 00007fffddc72428 [ 641.204607][T21099] [ 641.595393][T21101] xt_hashlimit: size too large, truncated to 1048576 [ 641.735638][T21108] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3576'. [ 641.735668][T21108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3576'. [ 642.800384][T21132] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 642.843753][T21134] FAULT_INJECTION: forcing a failure. [ 642.843753][T21134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.843791][T21134] CPU: 0 UID: 0 PID: 21134 Comm: syz.2.3583 Not tainted syzkaller #0 PREEMPT(lazy) [ 642.843839][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.843853][T21134] Call Trace: [ 642.843862][T21134] [ 642.843872][T21134] __dump_stack+0x1d/0x30 [ 642.843907][T21134] dump_stack_lvl+0x95/0xd0 [ 642.843939][T21134] dump_stack+0x15/0x1b [ 642.843968][T21134] should_fail_ex+0x262/0x280 [ 642.844041][T21134] should_fail+0xb/0x20 [ 642.844061][T21134] should_fail_usercopy+0x1a/0x20 [ 642.844147][T21134] _copy_from_iter+0xcc/0xe70 [ 642.844176][T21134] ? __alloc_skb+0x516/0x6f0 [ 642.844220][T21134] ? __alloc_skb+0x209/0x6f0 [ 642.844270][T21134] netlink_sendmsg+0x4a4/0x6f0 [ 642.844444][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.844509][T21134] sock_write_iter+0x2c5/0x2f0 [ 642.844551][T21134] ? __pfx_sock_write_iter+0x10/0x10 [ 642.844592][T21134] vfs_write+0x57f/0x9a0 [ 642.844698][T21134] ksys_write+0xdc/0x1a0 [ 642.844728][T21134] __x64_sys_write+0x40/0x50 [ 642.844828][T21134] x64_sys_call+0x154e/0x2550 [ 642.844867][T21134] do_syscall_64+0x112/0x360 [ 642.844941][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.844964][T21134] RIP: 0033:0x7fc07f9ae159 [ 642.844980][T21134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.845036][T21134] RSP: 002b:00007fc07e407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 642.845065][T21134] RAX: ffffffffffffffda RBX: 00007fc07fc35fa0 RCX: 00007fc07f9ae159 [ 642.845085][T21134] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000004 [ 642.845104][T21134] RBP: 00007fc07e407090 R08: 0000000000000000 R09: 0000000000000000 [ 642.845195][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.845214][T21134] R13: 00007fc07fc36038 R14: 00007fc07fc35fa0 R15: 00007ffdac533e98 [ 642.845244][T21134] [ 643.069300][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 643.069317][ T29] audit: type=1400 audit(2000000054.254:11857): avc: denied { lock } for pid=21136 comm="syz.6.3584" path="socket:[60249]" dev="sockfs" ino=60249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 643.087535][T21139] syz_tun: entered allmulticast mode [ 643.199086][T21148] xt_hashlimit: size too large, truncated to 1048576 [ 643.291279][T21153] FAULT_INJECTION: forcing a failure. [ 643.291279][T21153] name failslab, interval 1, probability 0, space 0, times 0 [ 643.291319][T21153] CPU: 1 UID: 0 PID: 21153 Comm: syz.5.3587 Not tainted syzkaller #0 PREEMPT(lazy) [ 643.291390][T21153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.291408][T21153] Call Trace: [ 643.291415][T21153] [ 643.291424][T21153] __dump_stack+0x1d/0x30 [ 643.291467][T21153] dump_stack_lvl+0x95/0xd0 [ 643.291501][T21153] dump_stack+0x15/0x1b [ 643.291572][T21153] should_fail_ex+0x262/0x280 [ 643.291632][T21153] ? do_getname_kernel+0x53/0x190 [ 643.291663][T21153] should_failslab+0x8c/0xb0 [ 643.291807][T21153] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 643.291885][T21153] ? __alloc_skb+0x36d/0x6f0 [ 643.291989][T21153] ? do_getname_kernel+0x53/0x190 [ 643.292018][T21153] do_getname_kernel+0x53/0x190 [ 643.292067][T21153] kern_path+0x23/0xf0 [ 643.292113][T21153] unix_find_other+0xe9/0x6e0 [ 643.292208][T21153] unix_stream_connect+0x2f6/0xa60 [ 643.292238][T21153] ? __sock_create+0x4eb/0x580 [ 643.292325][T21153] p9_fd_create_unix+0x1a2/0x300 [ 643.292382][T21153] p9_client_create+0x22d/0x760 [ 643.292418][T21153] ? v9fs_get_tree+0x49/0x5e0 [ 643.292454][T21153] ? __kmalloc_cache_noprof+0x331/0x400 [ 643.292505][T21153] v9fs_session_init+0x38/0x510 [ 643.292536][T21153] v9fs_get_tree+0x5c/0x5e0 [ 643.292567][T21153] vfs_get_tree+0x57/0x1d0 [ 643.292664][T21153] do_new_mount+0x288/0x8d0 [ 643.292764][T21153] path_mount+0x4ad/0xb90 [ 643.292817][T21153] __se_sys_mount+0x28c/0x2e0 [ 643.292846][T21153] __x64_sys_mount+0x67/0x80 [ 643.292946][T21153] x64_sys_call+0xc3b/0x2550 [ 643.292982][T21153] do_syscall_64+0x112/0x360 [ 643.293018][T21153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.293045][T21153] RIP: 0033:0x7fd6dc8be159 [ 643.293112][T21153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.293133][T21153] RSP: 002b:00007fd6db2f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 643.293161][T21153] RAX: ffffffffffffffda RBX: 00007fd6dcb46090 RCX: 00007fd6dc8be159 [ 643.293246][T21153] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000200000000600 [ 643.293265][T21153] RBP: 00007fd6dc95506b R08: 00002000000006c0 R09: 0000000000000000 [ 643.293339][T21153] R10: 000000000280c012 R11: 0000000000000246 R12: 0000000000000000 [ 643.293353][T21153] R13: 00007fd6dcb46128 R14: 00007fd6dcb46090 R15: 00007fffddc72428 [ 643.293378][T21153] [ 643.295041][T21153] 9pnet_fd: p9_fd_create_unix (21153): problem connecting socket: ./proc/thread-self/fail-nth: -12 [ 643.707982][T21161] ieee802154 phy0 wpan0: encryption failed: -22 [ 643.809169][T21164] FAULT_INJECTION: forcing a failure. [ 643.809169][T21164] name failslab, interval 1, probability 0, space 0, times 0 [ 643.809205][T21164] CPU: 0 UID: 0 PID: 21164 Comm: syz.2.3592 Not tainted syzkaller #0 PREEMPT(lazy) [ 643.809295][T21164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.809313][T21164] Call Trace: [ 643.809321][T21164] [ 643.809332][T21164] __dump_stack+0x1d/0x30 [ 643.809369][T21164] dump_stack_lvl+0x95/0xd0 [ 643.809402][T21164] dump_stack+0x15/0x1b [ 643.809509][T21164] should_fail_ex+0x262/0x280 [ 643.809534][T21164] ? alloc_empty_file+0x70/0x1e0 [ 643.809563][T21164] should_failslab+0x8c/0xb0 [ 643.809650][T21164] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 643.809693][T21164] ? alloc_empty_file+0x70/0x1e0 [ 643.809726][T21164] alloc_empty_file+0x70/0x1e0 [ 643.809752][T21164] alloc_file_pseudo+0x92/0x120 [ 643.809789][T21164] sock_alloc_file+0x9c/0x1e0 [ 643.809820][T21164] __sys_socket+0x118/0x180 [ 643.809851][T21164] __x64_sys_socket+0x3f/0x50 [ 643.809934][T21164] x64_sys_call+0x246e/0x2550 [ 643.810010][T21164] do_syscall_64+0x112/0x360 [ 643.810050][T21164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.810103][T21164] RIP: 0033:0x7fc07f9ae159 [ 643.810123][T21164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.810163][T21164] RSP: 002b:00007fc07e407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 643.810193][T21164] RAX: ffffffffffffffda RBX: 00007fc07fc35fa0 RCX: 00007fc07f9ae159 [ 643.810286][T21164] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000011 [ 643.810300][T21164] RBP: 00007fc07fa4506b R08: 0000000000000000 R09: 0000000000000000 [ 643.810332][T21164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.810355][T21164] R13: 00007fc07fc36038 R14: 00007fc07fc35fa0 R15: 00007ffdac533e98 [ 643.810417][T21164] [ 643.867625][T21166] loop5: detected capacity change from 0 to 512 [ 643.899226][T21166] EXT4-fs: Ignoring removed bh option [ 643.899362][T21166] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 644.184407][T21176] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3594'. [ 644.184500][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3594'. [ 644.342130][T21178] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3595'. [ 644.459645][T21182] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 644.535867][ T29] audit: type=1400 audit(2000000055.636:11858): avc: denied { write } for pid=21179 comm="syz.6.3597" lport=34575 faddr=::ffff:172.30.0.7 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 644.555329][ T29] audit: type=1400 audit(2000000055.655:11859): avc: denied { setopt } for pid=21179 comm="syz.6.3597" lport=34575 faddr=::ffff:172.30.0.7 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 644.615050][T21185] FAULT_INJECTION: forcing a failure. [ 644.615050][T21185] name failslab, interval 1, probability 0, space 0, times 0 [ 644.615088][T21185] CPU: 0 UID: 0 PID: 21185 Comm: syz.2.3598 Not tainted syzkaller #0 PREEMPT(lazy) [ 644.615135][T21185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 644.615152][T21185] Call Trace: [ 644.615164][T21185] [ 644.615194][T21185] __dump_stack+0x1d/0x30 [ 644.615223][T21185] dump_stack_lvl+0x95/0xd0 [ 644.615254][T21185] dump_stack+0x15/0x1b [ 644.615302][T21185] should_fail_ex+0x262/0x280 [ 644.615339][T21185] ? __register_sysctl_table+0x52/0xbe0 [ 644.615372][T21185] should_failslab+0x8c/0xb0 [ 644.615475][T21185] __kmalloc_noprof+0xd0/0x4d0 [ 644.615508][T21185] ? __register_sysctl_table+0x52/0xbe0 [ 644.615597][T21185] __register_sysctl_table+0x52/0xbe0 [ 644.615634][T21185] setup_mq_sysctls+0x398/0x3e0 [ 644.615686][T21185] copy_ipcs+0x28b/0x460 [ 644.615712][T21185] create_new_namespaces+0x121/0x420 [ 644.615754][T21185] unshare_nsproxy_namespaces+0x115/0x150 [ 644.615806][T21185] ksys_unshare+0x42b/0x710 [ 644.615857][T21185] __x64_sys_unshare+0x1f/0x30 [ 644.615936][T21185] x64_sys_call+0x1e33/0x2550 [ 644.615976][T21185] do_syscall_64+0x112/0x360 [ 644.616028][T21185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.616111][T21185] RIP: 0033:0x7fc07f9ae159 [ 644.616130][T21185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.616154][T21185] RSP: 002b:00007fc07e407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 644.616209][T21185] RAX: ffffffffffffffda RBX: 00007fc07fc35fa0 RCX: 00007fc07f9ae159 [ 644.616232][T21185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 644.616252][T21185] RBP: 00007fc07fa4506b R08: 0000000000000000 R09: 0000000000000000 [ 644.616268][T21185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.616281][T21185] R13: 00007fc07fc36038 R14: 00007fc07fc35fa0 R15: 00007ffdac533e98 [ 644.616303][T21185] [ 644.631168][ T29] audit: type=1400 audit(2000000055.722:11860): avc: denied { write } for pid=21179 comm="syz.6.3597" name="file0" dev="tmpfs" ino=1785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 644.861373][T21185] loop2: detected capacity change from 0 to 4096 [ 644.914937][T21185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 644.934141][ T29] audit: type=1400 audit(2000000056.018:11861): avc: denied { remount } for pid=21184 comm="syz.2.3598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 644.960391][T21185] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 645.095466][ T7271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.267256][T21194] loop5: detected capacity change from 0 to 512 [ 645.270639][T21198] netlink: 'syz.5.3601': attribute type 1 has an invalid length. [ 645.270661][T21198] netlink: 'syz.5.3601': attribute type 4 has an invalid length. [ 645.270677][T21198] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3601'. [ 645.520804][T21204] xt_hashlimit: size too large, truncated to 1048576 [ 646.123954][T21222] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3607'. [ 646.321176][ T29] audit: type=1326 audit(2000000057.341:11862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21232 comm="syz.5.3612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x0 [ 646.385749][T21234] loop5: detected capacity change from 0 to 512 [ 646.415727][T21234] EXT4-fs: dax option not supported [ 646.980556][ T29] audit: type=1400 audit(2000000057.969:11863): avc: denied { execute_no_trans } for pid=21243 comm="syz.3.3615" path="/465/file0" dev="tmpfs" ino=2559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 646.984861][T21244] netlink: 'syz.3.3615': attribute type 17 has an invalid length. [ 647.142898][T21249] ieee802154 phy0 wpan0: encryption failed: -22 [ 647.731383][T21272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3623'. [ 647.860440][ T4705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.860540][ T4705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.366562][T21285] loop5: detected capacity change from 0 to 512 [ 648.407554][T21285] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 648.422036][T21285] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3628: invalid indirect mapped block 4294967295 (level 0) [ 648.422109][T21285] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 648.422366][T21285] EXT4-fs (loop5): Remounting filesystem read-only [ 648.422531][T21285] EXT4-fs (loop5): 1 orphan inode deleted [ 648.422547][T21285] EXT4-fs (loop5): 1 truncate cleaned up [ 648.423636][T21285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.186148][ T4705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.186196][ T4705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.603251][T21283] xt_bpf: check failed: parse error [ 650.266728][T19579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.952796][ T4705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.952848][ T4705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.996955][ T4705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.997000][ T4705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.035012][T21253] wg1 speed is unknown, defaulting to 1000 [ 651.078245][T21306] ieee802154 phy0 wpan0: encryption failed: -22 [ 651.243647][ T29] audit: type=1400 audit(2000000062.001:11864): avc: denied { write } for pid=21308 comm="syz.5.3636" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 651.243692][ T29] audit: type=1400 audit(2000000062.001:11865): avc: denied { lock } for pid=21308 comm="syz.5.3636" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 652.404357][ T4705] bond0 (unregistering): Released all slaves [ 652.826586][ T4705] tipc: Left network mode [ 652.845498][ T4705] hsr_slave_0: left promiscuous mode [ 652.863904][ T4705] veth1_macvtap: left promiscuous mode [ 652.863931][ T4705] veth0_macvtap: left promiscuous mode [ 652.863986][ T4705] veth1_vlan: left promiscuous mode [ 652.864025][ T4705] veth0_vlan: left promiscuous mode [ 653.075109][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3649'. [ 653.173537][T21352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3651'. [ 653.474952][T21374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3654'. [ 653.495208][T21342] wg1 speed is unknown, defaulting to 1000 [ 653.633981][ T29] audit: type=1400 audit(2000000064.253:11866): avc: denied { write } for pid=21366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.698681][ T29] audit: type=1400 audit(2000000064.318:11867): avc: denied { write } for pid=21392 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.806151][ T4705] IPVS: stop unused estimator thread 0... [ 653.849666][T21400] FAULT_INJECTION: forcing a failure. [ 653.849666][T21400] name failslab, interval 1, probability 0, space 0, times 0 [ 653.849703][T21400] CPU: 1 UID: 0 PID: 21400 Comm: syz.5.3659 Not tainted syzkaller #0 PREEMPT(lazy) [ 653.849730][T21400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.849749][T21400] Call Trace: [ 653.849758][T21400] [ 653.849797][T21400] __dump_stack+0x1d/0x30 [ 653.849842][T21400] dump_stack_lvl+0x95/0xd0 [ 653.849875][T21400] dump_stack+0x15/0x1b [ 653.849904][T21400] should_fail_ex+0x262/0x280 [ 653.849995][T21400] ? tipc_nametbl_lookup_group+0x44b/0x630 [ 653.850036][T21400] should_failslab+0x8c/0xb0 [ 653.850117][T21400] __kmalloc_cache_noprof+0x7a/0x400 [ 653.850161][T21400] ? tipc_nametbl_lookup_group+0x44b/0x630 [ 653.850213][T21400] tipc_nametbl_lookup_group+0x44b/0x630 [ 653.850257][T21400] __tipc_sendmsg+0x692/0x1c00 [ 653.850316][T21400] tipc_sendmsg+0x3e/0x60 [ 653.850346][T21400] ? __pfx_tipc_sendmsg+0x10/0x10 [ 653.850373][T21400] ____sys_sendmsg+0x532/0x580 [ 653.850475][T21400] ___sys_sendmsg+0x195/0x1e0 [ 653.850524][T21400] __x64_sys_sendmsg+0xd4/0x160 [ 653.850555][T21400] x64_sys_call+0x22ab/0x2550 [ 653.850653][T21400] do_syscall_64+0x112/0x360 [ 653.850707][T21400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.850739][T21400] RIP: 0033:0x7fd6dc8be159 [ 653.850761][T21400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.850845][T21400] RSP: 002b:00007fd6db317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.850874][T21400] RAX: ffffffffffffffda RBX: 00007fd6dcb45fa0 RCX: 00007fd6dc8be159 [ 653.850895][T21400] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 653.850912][T21400] RBP: 00007fd6db317090 R08: 0000000000000000 R09: 0000000000000000 [ 653.850952][T21400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.850970][T21400] R13: 00007fd6dcb46038 R14: 00007fd6dcb45fa0 R15: 00007fffddc72428 [ 653.851000][T21400] [ 653.853354][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 654.028978][T21253] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.029512][T21253] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.030099][T21253] bridge_slave_0: entered allmulticast mode [ 654.049637][T21253] bridge_slave_0: entered promiscuous mode [ 654.097061][T21253] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.097105][T21253] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.097175][T21253] bridge_slave_1: entered allmulticast mode [ 654.097942][T21253] bridge_slave_1: entered promiscuous mode [ 654.153816][ T4705] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.201156][T21353] wg1 speed is unknown, defaulting to 1000 [ 654.225621][ T4705] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.240401][T21253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.242284][T21253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.286129][T21253] team0: Port device team_slave_0 added [ 654.322492][T21253] team0: Port device team_slave_1 added [ 654.358440][T21411] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.446233][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3666'. [ 654.467246][ T4705] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.501113][T21253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.501129][T21253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.501175][T21253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.501884][T21253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.501901][T21253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.501941][T21253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.597186][T21419] xt_hashlimit: size too large, truncated to 1048576 [ 654.900252][ T4705] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.937992][ T29] audit: type=1400 audit(2000000065.475:11868): avc: denied { write } for pid=21426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.987468][ T29] audit: type=1400 audit(2000000065.531:11869): avc: denied { write } for pid=21439 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.030594][T21253] hsr_slave_0: entered promiscuous mode [ 655.031007][T21253] hsr_slave_1: entered promiscuous mode [ 655.031323][T21253] debugfs: 'hsr0' already exists in 'hsr' [ 655.031340][T21253] Cannot create hsr debugfs directory [ 655.035093][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 655.238211][ T4705] pim6reg: left allmulticast mode [ 655.238284][ T4705] lo: left allmulticast mode [ 655.405082][T21454] loop5: detected capacity change from 0 to 164 [ 655.477241][ T4705] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 655.493875][ T4705] bond0 (unregistering): Released all slaves [ 655.503978][ T4705] bond1 (unregistering): Released all slaves [ 655.551341][ T29] audit: type=1326 audit(2000000066.057:11870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.5.3671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x0 [ 655.587826][ T29] audit: type=1400 audit(2000000066.085:11871): avc: denied { write } for pid=21448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.648521][ T4705] tipc: Disabling bearer [ 655.648557][ T4705] tipc: Left network mode [ 655.692397][ T29] audit: type=1400 audit(2000000066.188:11872): avc: denied { write } for pid=21471 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.694086][T21470] loop5: detected capacity change from 0 to 512 [ 655.694563][T21470] EXT4-fs: dax option not supported [ 655.779742][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 655.797580][T21353] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.797636][T21353] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.797720][T21353] bridge_slave_0: entered allmulticast mode [ 655.798351][T21353] bridge_slave_0: entered promiscuous mode [ 655.826494][T21353] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.826535][T21353] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.826643][T21353] bridge_slave_1: entered allmulticast mode [ 655.827221][T21353] bridge_slave_1: entered promiscuous mode [ 655.867851][T21353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.869213][T21353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.910245][T21353] team0: Port device team_slave_0 added [ 655.911611][T21353] team0: Port device team_slave_1 added [ 655.942416][T21353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.942437][T21353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.942475][T21353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.943220][T21353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.943260][T21353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.943361][T21353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.062468][T21353] hsr_slave_0: entered promiscuous mode [ 656.062946][T21353] hsr_slave_1: entered promiscuous mode [ 656.063287][T21353] debugfs: 'hsr0' already exists in 'hsr' [ 656.063301][T21353] Cannot create hsr debugfs directory [ 656.146874][ T29] audit: type=1400 audit(2000000066.620:11873): avc: denied { write } for pid=21482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.215169][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 656.393618][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 656.570774][ T4705] hsr_slave_0: left promiscuous mode [ 656.636006][T21533] xt_hashlimit: size too large, truncated to 1048576 [ 656.692648][ T4705] veth1_macvtap: left promiscuous mode [ 656.692848][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3677'. [ 656.693052][ T4705] veth0_macvtap: left promiscuous mode [ 656.918305][T21533] 9pnet_fd: p9_fd_create_unix (21533): problem connecting socket: ./proc/thread-self/fail-nth: -12 [ 656.948996][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3678'. [ 657.013228][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 657.125600][T21551] loop5: detected capacity change from 0 to 164 [ 657.274275][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 657.274296][ T29] audit: type=1326 audit(2000000067.670:11879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21562 comm="syz.5.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x7ffc0000 [ 657.274337][ T29] audit: type=1326 audit(2000000067.670:11880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21562 comm="syz.5.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x7ffc0000 [ 657.338303][ T29] audit: type=1326 audit(2000000067.726:11881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21562 comm="syz.5.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x7ffc0000 [ 657.338423][ T29] audit: type=1326 audit(2000000067.726:11882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21562 comm="syz.5.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x7ffc0000 [ 657.338464][ T29] audit: type=1326 audit(2000000067.726:11883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21562 comm="syz.5.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd6dc8be159 code=0x7ffc0000 [ 657.393856][ T29] audit: type=1326 audit(2000000067.782:11884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21562 comm="syz.5.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x7ffc0000 [ 657.400460][ T29] audit: type=1326 audit(2000000067.782:11885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21562 comm="syz.5.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x7ffc0000 [ 657.400979][ T29] audit: type=1326 audit(2000000067.782:11886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21562 comm="syz.5.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x7ffc0000 [ 657.413356][ T29] audit: type=1326 audit(2000000067.801:11887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21562 comm="syz.5.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc8be159 code=0x7ffc0000 [ 657.413504][ T29] audit: type=1326 audit(2000000067.801:11888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21562 comm="syz.5.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6dc8be159 code=0x7ffc0000 [ 657.635267][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 657.643556][T21563] netlink: 'syz.5.3683': attribute type 1 has an invalid length. [ 657.684487][ T4705] IPVS: stop unused estimator thread 0... [ 657.718517][T21253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 657.734806][T21253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.743216][T21253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 657.759271][T21253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 657.759884][T21253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 657.764779][T21253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 657.800188][T21253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 657.807843][T21253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 657.828922][T21353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 657.834261][T21353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.839425][T21353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 657.849010][T21353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 657.862541][T21353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 657.865121][T21353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 657.865857][T21353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 657.867957][T21353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 657.976813][T21253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.991704][T21253] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.995652][T21353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.011539][ T4791] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.011653][ T4791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.034014][T21353] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.036259][ T4758] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.036318][ T4758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.041630][ T4758] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.041669][ T4758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.082896][ T4794] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.082930][ T4794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.206981][ T3023] 8021q: adding VLAN 0 to HW filter on device eth20 [ 658.312067][T21253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.341810][T21353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.453851][T21253] veth0_vlan: entered promiscuous mode [ 658.462423][T21253] veth1_vlan: entered promiscuous mode [ 658.477580][T21353] veth0_vlan: entered promiscuous mode [ 658.488679][T21353] veth1_vlan: entered promiscuous mode [ 658.512922][T21253] veth0_macvtap: entered promiscuous mode [ 658.521218][T21253] veth1_macvtap: entered promiscuous mode [ 658.541921][T21353] veth0_macvtap: entered promiscuous mode [ 658.553731][T21353] veth1_macvtap: entered promiscuous mode [ 658.563695][T21253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.575708][T21253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.589717][T21353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.595353][T21353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.652719][ T4687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.655184][ T4687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.655245][ T4687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.656353][ T4687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.656489][ T4687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.656532][ T4687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.656575][ T4687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.656773][ T4687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.872854][T21688] netlink: 'syz.6.3689': attribute type 2 has an invalid length. [ 659.392702][T21685] loop2: detected capacity change from 0 to 1024 [ 659.475068][T21685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 659.488046][T21685] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.551971][T21685] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.3618: bg 0: block 112: padding at end of block bitmap is not set [ 659.599914][T21253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 659.633725][T21746] netlink: 'syz.1.3695': attribute type 1 has an invalid length. [ 659.660924][T21749] syzkaller0: entered promiscuous mode [ 659.660999][T21749] syzkaller0: entered allmulticast mode [ 659.663596][T21749] FAULT_INJECTION: forcing a failure. [ 659.663596][T21749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.663645][T21749] CPU: 0 UID: 0 PID: 21749 Comm: syz.2.3696 Not tainted syzkaller #0 PREEMPT(lazy) [ 659.663670][T21749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 659.663683][T21749] Call Trace: [ 659.663690][T21749] [ 659.663697][T21749] __dump_stack+0x1d/0x30 [ 659.663730][T21749] dump_stack_lvl+0x95/0xd0 [ 659.663789][T21749] dump_stack+0x15/0x1b [ 659.663842][T21749] should_fail_ex+0x262/0x280 [ 659.663917][T21749] should_fail+0xb/0x20 [ 659.663946][T21749] should_fail_usercopy+0x1a/0x20 [ 659.663981][T21749] _copy_from_iter+0xcc/0xe70 [ 659.664036][T21749] ? skb_set_owner_w+0x19b/0x200 [ 659.664066][T21749] ? sock_alloc_send_pskb+0x469/0x500 [ 659.664117][T21749] skb_copy_datagram_from_iter+0xad/0x480 [ 659.664149][T21749] ? __rcu_read_unlock+0x4e/0x70 [ 659.664190][T21749] ? skb_put+0xa9/0xf0 [ 659.664264][T21749] packet_sendmsg+0x24ff/0x31b0 [ 659.664302][T21749] ? selinux_file_open+0x178/0x330 [ 659.664374][T21749] ? selinux_socket_sendmsg+0x394/0x410 [ 659.664423][T21749] ? __pfx_packet_sendmsg+0x10/0x10 [ 659.664456][T21749] __sys_sendto+0x411/0x470 [ 659.664501][T21749] __x64_sys_sendto+0x76/0x90 [ 659.664570][T21749] x64_sys_call+0x200c/0x2550 [ 659.664624][T21749] do_syscall_64+0x112/0x360 [ 659.664672][T21749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.664782][T21749] RIP: 0033:0x7f03d5c6e159 [ 659.664805][T21749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.664831][T21749] RSP: 002b:00007f03d46c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 659.664858][T21749] RAX: ffffffffffffffda RBX: 00007f03d5ef5fa0 RCX: 00007f03d5c6e159 [ 659.664877][T21749] RDX: 000000000000000e RSI: 0000200000000440 RDI: 0000000000000006 [ 659.664937][T21749] RBP: 00007f03d46c7090 R08: 00002000000001c0 R09: 0000000000000014 [ 659.664956][T21749] R10: 0000000024004095 R11: 0000000000000246 R12: 0000000000000001 [ 659.664974][T21749] R13: 00007f03d5ef6038 R14: 00007f03d5ef5fa0 R15: 00007ffcae85d398 [ 659.665003][T21749] [ 659.934348][T21752] loop2: detected capacity change from 0 to 512 [ 659.942168][T21752] EXT4-fs: Ignoring removed nobh option [ 659.947833][T21752] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 659.950721][T21752] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3697: attempt to clear invalid blocks 1 len 1 [ 659.950829][T21752] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 659.953778][T21752] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 659.954087][T21752] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3697: invalid indirect mapped block 1819239214 (level 0) [ 659.954172][T21752] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 659.956595][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 659.956666][ C0] EXT4-fs (loop2): initial error at time 2000000070: ext4_clear_blocks:876: inode 13 [ 659.956767][ C0] EXT4-fs (loop2): last error at time 2000000070: ext4_free_branches:1023: inode 13 [ 659.961393][T21752] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3697: invalid indirect mapped block 1819239214 (level 1) [ 659.961589][T21752] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 659.965464][T21752] EXT4-fs (loop2): 1 truncate cleaned up [ 659.966287][T21752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.098129][T21759] ieee802154 phy0 wpan0: encryption failed: -22 [ 660.172489][T21253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.229385][T21768] geneve2: entered allmulticast mode [ 660.266440][T21768] loop2: detected capacity change from 0 to 512 [ 660.271585][T21768] EXT4-fs: Ignoring removed nobh option [ 660.279485][T21768] EXT4-fs (loop2): orphan cleanup on readonly fs [ 660.279782][T21768] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #11: comm syz.2.3704: unexpected EA_INODE flag [ 660.279871][T21768] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 660.280348][T21768] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3704: couldn't read orphan inode 11 (err -117) [ 660.280397][T21768] loop2: lost filesystem error report for type 5 error -117 [ 660.288255][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 660.288338][ C0] EXT4-fs (loop2): initial error at time 2000000070: ext4_orphan_get:1403: inode 11 [ 660.288447][ C0] EXT4-fs (loop2): last error at time 2000000070: ext4_orphan_get:1408 [ 660.319379][T21768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 660.418273][T21253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.570676][T21777] loop5: detected capacity change from 0 to 1024 [ 660.603722][T21777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 660.603874][T21777] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.619903][T21772] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.3706: bg 0: block 112: padding at end of block bitmap is not set [ 660.670907][T19579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 660.745386][T21782] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3708'. [ 661.076003][T21795] netlink: 'syz.1.3710': attribute type 1 has an invalid length. [ 661.183876][T21802] loop2: detected capacity change from 0 to 512 [ 661.185743][T21802] EXT4-fs: Ignoring removed nobh option [ 661.201709][T21802] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 661.202987][T21802] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3714: attempt to clear invalid blocks 1 len 1 [ 661.203016][T21802] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 661.204028][T21802] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 661.204162][T21802] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3714: invalid indirect mapped block 1819239214 (level 0) [ 661.204262][T21802] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 661.204935][T21802] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3714: invalid indirect mapped block 1819239214 (level 1) [ 661.205008][T21802] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 661.206638][T21802] EXT4-fs (loop2): 1 truncate cleaned up [ 661.207881][T21802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.800452][T21253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.919620][T21812] loop1: detected capacity change from 0 to 1024 [ 661.969240][T21812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 661.969340][T21812] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.993219][T21819] xt_hashlimit: size too large, truncated to 1048576 [ 662.051047][T21812] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.3718: bg 0: block 112: padding at end of block bitmap is not set [ 662.143286][T21827] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3723'. [ 662.168015][T21353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 662.441702][T21840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3727'. [ 662.583355][T21846] netlink: 'syz.5.3729': attribute type 1 has an invalid length. [ 662.624634][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 662.624654][ T29] audit: type=1326 audit(2000000072.672:12325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.3729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6dc87e98e code=0x7ffc0000 [ 662.626359][ T29] audit: type=1326 audit(2000000072.672:12326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.3729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6dc87e98e code=0x7ffc0000 [ 662.627851][ T29] audit: type=1326 audit(2000000072.672:12327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.3729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6dc87e98e code=0x7ffc0000 [ 662.629087][ T29] audit: type=1326 audit(2000000072.672:12328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.3729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6dc87e98e code=0x7ffc0000 [ 662.630377][ T29] audit: type=1326 audit(2000000072.672:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.3729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6dc87e98e code=0x7ffc0000 [ 662.632679][ T29] audit: type=1326 audit(2000000072.672:12330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.3729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6dc87e98e code=0x7ffc0000 [ 662.633969][ T29] audit: type=1326 audit(2000000072.691:12331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.3729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6dc87e98e code=0x7ffc0000 [ 662.635814][ T29] audit: type=1326 audit(2000000072.691:12332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.3729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6dc87e98e code=0x7ffc0000 [ 662.637148][ T29] audit: type=1326 audit(2000000072.691:12333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.3729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6dc87e98e code=0x7ffc0000 [ 662.638764][ T29] audit: type=1326 audit(2000000072.691:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.3729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6dc87e98e code=0x7ffc0000 [ 663.017886][T21854] FAULT_INJECTION: forcing a failure. [ 663.017886][T21854] name failslab, interval 1, probability 0, space 0, times 0 [ 663.017926][T21854] CPU: 1 UID: 0 PID: 21854 Comm: syz.1.3731 Not tainted syzkaller #0 PREEMPT(lazy) [ 663.017960][T21854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.017979][T21854] Call Trace: [ 663.017989][T21854] [ 663.018060][T21854] __dump_stack+0x1d/0x30 [ 663.018153][T21854] dump_stack_lvl+0x95/0xd0 [ 663.018185][T21854] dump_stack+0x15/0x1b [ 663.018214][T21854] should_fail_ex+0x262/0x280 [ 663.018246][T21854] ? __alloc_skb+0x2e0/0x6f0 [ 663.018339][T21854] should_failslab+0x8c/0xb0 [ 663.018380][T21854] kmem_cache_alloc_node_noprof+0x82/0x400 [ 663.018470][T21854] ? should_fail_ex+0xdb/0x280 [ 663.018550][T21854] ? __alloc_skb+0x2e0/0x6f0 [ 663.018677][T21854] __alloc_skb+0x2e0/0x6f0 [ 663.018719][T21854] ? __alloc_skb+0x209/0x6f0 [ 663.018871][T21854] audit_log_start+0x3aa/0x730 [ 663.018966][T21854] audit_seccomp+0x49/0x110 [ 663.018992][T21854] __seccomp_filter+0x909/0x1360 [ 663.019089][T21854] ? should_fail_ex+0xdb/0x280 [ 663.019190][T21854] __seccomp_permit_syscall+0x7d/0x150 [ 663.019224][T21854] do_syscall_64+0xca/0x360 [ 663.019268][T21854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.019297][T21854] RIP: 0033:0x7f0e8662e98e [ 663.019318][T21854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 663.019377][T21854] RSP: 002b:00007f0e850c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 663.019404][T21854] RAX: ffffffffffffffda RBX: 00007f0e850c76c0 RCX: 00007f0e8662e98e [ 663.019422][T21854] RDX: 000000000000000f RSI: 00007f0e850c70a0 RDI: 0000000000000003 [ 663.019445][T21854] RBP: 00007f0e850c7090 R08: 0000000000000000 R09: 0000000000000000 [ 663.019510][T21854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.019528][T21854] R13: 00007f0e868f6038 R14: 00007f0e868f5fa0 R15: 00007fffc0d9bd58 [ 663.019556][T21854] [ 663.445532][T21864] loop5: detected capacity change from 0 to 1024 [ 663.463738][T21864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 663.463939][T21864] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.598974][T21859] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.3734: bg 0: block 112: padding at end of block bitmap is not set [ 663.750993][T19579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 663.789323][T21870] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.884804][T21874] xt_hashlimit: size too large, truncated to 1048576 [ 663.948514][T21876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'. [ 663.981258][T21876] hsr_slave_1 (unregistering): left promiscuous mode [ 663.999386][T21877] 9pnet_fd: p9_fd_create_unix (21877): problem connecting socket: ./proc/thread-self/fail-nth: -12 [ 664.026512][T21878] loop1: detected capacity change from 0 to 512 [ 664.027279][T21878] EXT4-fs: Ignoring removed nobh option [ 664.047742][T21878] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 664.052325][T21878] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.3739: attempt to clear invalid blocks 1 len 1 [ 664.052518][T21878] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 664.053225][T21878] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 664.058441][T21878] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3739: invalid indirect mapped block 1819239214 (level 0) [ 664.058540][T21878] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 664.059120][ C0] EXT4-fs (loop1): error count since last fsck: 3 [ 664.059172][ C0] EXT4-fs (loop1): initial error at time 2000000074: ext4_clear_blocks:876: inode 13 [ 664.059267][ C0] EXT4-fs (loop1): last error at time 2000000074: ext4_free_branches:1023: inode 13 [ 664.067444][T21878] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3739: invalid indirect mapped block 1819239214 (level 1) [ 664.067530][T21878] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 664.068972][T21878] EXT4-fs (loop1): 1 truncate cleaned up [ 664.070177][T21878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.234139][T21353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.291456][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3740'. [ 664.291479][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3740'. [ 664.532981][T21891] netlink: 'syz.6.3742': attribute type 1 has an invalid length. [ 664.597307][T21897] loop5: detected capacity change from 0 to 512 [ 664.614086][T21884] batadv_slave_1: entered promiscuous mode [ 664.614439][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'. [ 664.614628][T21884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.634128][T21883] loop1: detected capacity change from 0 to 512 [ 664.649668][T21884] batadv_slave_1 (unregistering): left promiscuous mode [ 664.649835][T21884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.884683][T21911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3748'. [ 665.118912][T21934] loop1: detected capacity change from 0 to 164 [ 665.142804][T21934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3757'. [ 665.142843][T21934] veth1_to_team: entered promiscuous mode [ 665.142860][T21934] veth1_to_team: entered allmulticast mode [ 665.142946][T21936] rock: directory entry would overflow storage [ 665.142958][T21936] rock: sig=0x4f50, size=4, remaining=3 [ 665.142975][T21936] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 665.144836][T21934] veth1_to_team: left promiscuous mode [ 665.144859][T21934] veth1_to_team: left allmulticast mode [ 665.222598][T21938] netlink: 'syz.3.3756': attribute type 1 has an invalid length. [ 665.255346][T21945] loop1: detected capacity change from 0 to 512 [ 665.257466][T21945] ext4: Unknown parameter 'uid>00000000000000000000' [ 665.412158][T21962] siw: device registration error -23 [ 665.412333][T21962] siw: device registration error -23 [ 665.412463][T21962] siw: device registration error -23 [ 665.416498][T21962] siw: device registration error -23 [ 665.416653][T21962] siw: device registration error -23 [ 665.416816][T21962] siw: device registration error -23 [ 665.416967][T21962] siw: device registration error -23 [ 665.417157][T21962] siw: device registration error -23 [ 665.417252][T21962] siw: device registration error -23 [ 665.417376][T21962] siw: device registration error -23 [ 665.417607][T21962] siw: device registration error -23 [ 665.419234][T21962] siw: device registration error -23 [ 665.419384][T21962] siw: device registration error -23 [ 665.425626][T21962] siw: device registration error -23 [ 665.426027][T21962] siw: device registration error -23 [ 665.426447][T21962] siw: device registration error -23 [ 665.426662][T21962] siw: device registration error -23 [ 665.432799][T21962] siw: device registration error -23 [ 665.433230][T21962] siw: device registration error -23 [ 665.433627][T21962] siw: device registration error -23 [ 665.433890][T21962] siw: device registration error -23 [ 665.437027][T21962] siw: device registration error -23 [ 665.437348][T21962] siw: device registration error -23 [ 665.437751][T21962] siw: device registration error -23 [ 665.438044][T21962] siw: device registration error -23 [ 665.438370][T21962] siw: device registration error -23 [ 665.442148][T21962] siw: device registration error -23 [ 665.442380][T21962] siw: device registration error -23 [ 665.442698][T21962] siw: device registration error -23 [ 665.443051][T21962] siw: device registration error -23 [ 665.445759][T21962] siw: device registration error -23 [ 665.446200][T21962] siw: device registration error -23 [ 665.446455][T21962] siw: device registration error -23 [ 665.446700][T21962] siw: device registration error -23 [ 665.447002][T21962] siw: device registration error -23 [ 665.450713][T21962] siw: device registration error -23 [ 665.450990][T21962] siw: device registration error -23 [ 665.451262][T21962] siw: device registration error -23 [ 665.451666][T21962] siw: device registration error -23 [ 665.455229][T21962] siw: device registration error -23 [ 665.455505][T21962] siw: device registration error -23 [ 665.455773][T21962] siw: device registration error -23 [ 665.456012][T21962] siw: device registration error -23 [ 665.459531][T21962] siw: device registration error -23 [ 665.461751][T21962] siw: device registration error -23 [ 665.462233][T21962] siw: device registration error -23 [ 665.462469][T21962] siw: device registration error -23 [ 665.464521][T21962] siw: device registration error -23 [ 665.474253][T21962] siw: device registration error -23 [ 665.474509][T21962] siw: device registration error -23 [ 665.474765][T21962] siw: device registration error -23 [ 665.475049][T21962] siw: device registration error -23 [ 665.475380][T21962] siw: device registration error -23 [ 665.499947][T21962] siw: device registration error -23 [ 665.500341][T21962] siw: device registration error -23 [ 665.500713][T21962] siw: device registration error -23 [ 665.509692][T21962] siw: device registration error -23 [ 665.509990][T21962] siw: device registration error -23 [ 665.510187][T21962] siw: device registration error -23 [ 665.510541][T21962] siw: device registration error -23 [ 665.513760][T21962] siw: device registration error -23 [ 665.514069][T21962] siw: device registration error -23 [ 665.514445][T21962] siw: device registration error -23 [ 665.514698][T21962] siw: device registration error -23 [ 665.527929][T21962] siw: device registration error -23 [ 665.896282][T21973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3768'. [ 666.007154][T21980] loop2: detected capacity change from 0 to 512 [ 666.072401][T21983] netlink: 'syz.1.3769': attribute type 10 has an invalid length. [ 666.102858][T21966] loop5: detected capacity change from 0 to 512 [ 666.103437][T21966] EXT4-fs: Ignoring removed nobh option [ 666.121590][T21966] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 666.121937][T21966] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3765: attempt to clear invalid blocks 1 len 1 [ 666.121978][T21966] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 666.122315][T21966] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 666.122386][T21966] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3765: invalid indirect mapped block 1819239214 (level 0) [ 666.122426][T21966] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 666.126540][T21966] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3765: invalid indirect mapped block 1819239214 (level 1) [ 666.126615][T21966] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 666.127213][T21966] EXT4-fs (loop5): 1 truncate cleaned up [ 666.127616][T21966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.249233][T19579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.276485][T21992] ieee802154 phy0 wpan0: encryption failed: -22 [ 666.333235][T21983] team0: Device gre0 is of different type [ 666.397975][T21984] wg1 speed is unknown, defaulting to 1000 [ 666.411029][T21997] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 666.417543][T21983] syz.1.3769 (21983) used greatest stack depth: 8968 bytes left [ 666.440420][T21997] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3775: invalid indirect mapped block 4294967295 (level 0) [ 666.440464][T21997] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 666.440700][T21997] EXT4-fs (loop5): Remounting filesystem read-only [ 666.440965][T21997] EXT4-fs (loop5): 1 orphan inode deleted [ 666.440987][T21997] EXT4-fs (loop5): 1 truncate cleaned up [ 666.441601][T21997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.612560][T22003] xt_hashlimit: size too large, truncated to 1048576 [ 666.623681][T22008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 666.866039][T22009] set_capacity_and_notify: 1 callbacks suppressed [ 666.866147][T22009] loop1: detected capacity change from 0 to 1024 [ 666.936490][T22009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 666.936563][T22009] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.963924][T22009] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.3777: bg 0: block 112: padding at end of block bitmap is not set [ 667.012748][T22023] __nla_validate_parse: 1 callbacks suppressed [ 667.012767][T22023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3780'. [ 667.031498][T21353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 667.046336][T19579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.171611][T22030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'. [ 667.233831][T22030] hsr_slave_1 (unregistering): left promiscuous mode [ 667.252332][T22033] loop2: detected capacity change from 0 to 512 [ 667.255067][T22033] EXT4-fs: Ignoring removed nobh option [ 667.257959][T22033] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 667.258372][T22033] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3783: attempt to clear invalid blocks 1 len 1 [ 667.258409][T22033] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 667.259005][T22033] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 667.259274][T22033] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3783: invalid indirect mapped block 1819239214 (level 0) [ 667.259394][T22033] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 667.260101][T22033] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3783: invalid indirect mapped block 1819239214 (level 1) [ 667.260275][T22033] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 667.261489][T22033] EXT4-fs (loop2): 1 truncate cleaned up [ 667.268613][T22033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.294166][T22037] loop1: detected capacity change from 0 to 512 [ 667.305572][T22037] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 667.332238][T22037] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3785: invalid indirect mapped block 4294967295 (level 0) [ 667.332497][T22037] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 667.334652][T22037] EXT4-fs (loop1): Remounting filesystem read-only [ 667.334753][T22037] EXT4-fs (loop1): 1 orphan inode deleted [ 667.334769][T22037] EXT4-fs (loop1): 1 truncate cleaned up [ 667.335813][T22037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.501340][T21253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.587898][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3788'. [ 667.595177][T22043] batadv0: entered promiscuous mode [ 667.605228][T22043] macvtap1: entered promiscuous mode [ 667.605469][T22043] macvtap1: entered allmulticast mode [ 667.605514][T22043] batadv0: entered allmulticast mode [ 667.611324][T22043] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 667.715115][T22053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3793'. [ 667.728433][T22055] loop2: detected capacity change from 0 to 512 [ 667.728807][T22055] EXT4-fs: quotafile must be on filesystem root [ 667.765808][T21353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.766575][T22043] batadv0: left allmulticast mode [ 667.766652][T22043] batadv0: left promiscuous mode [ 667.766723][T22043] macvtap1: left promiscuous mode [ 667.766802][T22043] macvtap1: left allmulticast mode [ 667.987310][T22067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3797'. [ 668.006212][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 668.006232][ T29] audit: type=1326 audit(2000000077.685:12775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.1.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e8662e98e code=0x7ffc0000 [ 668.009384][ T29] audit: type=1326 audit(2000000077.685:12776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.1.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e8662e98e code=0x7ffc0000 [ 668.012087][ T29] audit: type=1326 audit(2000000077.694:12777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.1.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e8662e98e code=0x7ffc0000 [ 668.014120][ T29] audit: type=1326 audit(2000000077.694:12778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.1.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e8662e98e code=0x7ffc0000 [ 668.015877][ T29] audit: type=1326 audit(2000000077.694:12779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.1.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e8662e98e code=0x7ffc0000 [ 668.017974][ T29] audit: type=1326 audit(2000000077.694:12780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.1.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e8662e98e code=0x7ffc0000 [ 668.019887][ T29] audit: type=1326 audit(2000000077.694:12781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.1.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e8662e98e code=0x7ffc0000 [ 668.028335][ T29] audit: type=1326 audit(2000000077.694:12782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.1.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e8662e98e code=0x7ffc0000 [ 668.039634][ T29] audit: type=1326 audit(2000000077.694:12783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.1.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e8662e98e code=0x7ffc0000 [ 668.048682][ T29] audit: type=1326 audit(2000000077.722:12784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.1.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e8662e98e code=0x7ffc0000 [ 668.251986][T22074] xt_hashlimit: size too large, truncated to 1048576 [ 668.290486][T22077] 9pnet_fd: p9_fd_create_unix (22077): problem connecting socket: ./proc/thread-self/fail-nth: -12 [ 668.393654][T22082] loop2: detected capacity change from 0 to 512 [ 668.403245][T22082] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 668.412894][T22082] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3801: invalid indirect mapped block 4294967295 (level 0) [ 668.413007][T22082] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 668.413397][T22082] EXT4-fs (loop2): Remounting filesystem read-only [ 668.413684][T22082] EXT4-fs (loop2): 1 orphan inode deleted [ 668.413736][T22082] EXT4-fs (loop2): 1 truncate cleaned up [ 668.414705][T22082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.707519][T21253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.743514][T22106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3806'. [ 668.840782][T22116] loop1: detected capacity change from 0 to 128 [ 668.885775][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 668.903933][T22113] loop2: detected capacity change from 0 to 512 [ 668.906525][T22113] EXT4-fs: Ignoring removed nobh option [ 668.909477][T22113] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 668.911738][T22113] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3809: attempt to clear invalid blocks 1 len 1 [ 668.911768][T22113] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 668.913179][T22113] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 668.913317][T22113] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3809: invalid indirect mapped block 1819239214 (level 0) [ 668.913728][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 668.913751][ C1] EXT4-fs (loop2): initial error at time 2000000078: ext4_clear_blocks:876: inode 13 [ 668.913785][ C1] EXT4-fs (loop2): last error at time 2000000078: ext4_free_branches:1023: inode 13 [ 668.927351][T22113] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3809: invalid indirect mapped block 1819239214 (level 1) [ 668.948932][T22113] EXT4-fs (loop2): 1 truncate cleaned up [ 668.949759][T22113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.085174][T21253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.270735][T22137] loop5: detected capacity change from 0 to 512 [ 669.294913][T22137] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 669.297322][T22137] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3817: invalid indirect mapped block 4294967295 (level 0) [ 669.297582][T22137] EXT4-fs (loop5): Remounting filesystem read-only [ 669.297758][T22137] EXT4-fs (loop5): 1 orphan inode deleted [ 669.297779][T22137] EXT4-fs (loop5): 1 truncate cleaned up [ 669.298234][T22137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.468174][T22143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3819'. [ 669.651391][T19579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.731135][T22135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3815'. [ 669.731452][T22141] loop2: detected capacity change from 0 to 1024 [ 669.750672][ T3415] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 669.765601][ T3415] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 669.900544][T22141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 669.916857][T22162] fido_id[22162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 669.943560][T22141] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.979869][T22141] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.3818: bg 0: block 112: padding at end of block bitmap is not set [ 670.054552][T21253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 670.064893][T22174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 670.064919][T22174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 670.064960][T22174] vhci_hcd vhci_hcd.0: Device attached [ 670.127577][T22174] loop1: detected capacity change from 0 to 1024 [ 670.131066][T22174] EXT4-fs: Ignoring removed i_version option [ 670.131312][T22174] ext4: Unknown parameter 'fsmagic' [ 670.153408][T22177] vhci_hcd: connection closed [ 670.154710][ T4687] vhci_hcd vhci_hcd.1: stop threads [ 670.154734][ T4687] vhci_hcd vhci_hcd.1: release socket [ 670.154756][ T4687] vhci_hcd vhci_hcd.1: disconnect device [ 670.296172][T22188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3830'. [ 670.331195][T22189] ================================================================== [ 670.331245][T22189] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 670.331288][T22189] [ 670.331295][T22189] write to 0xffff88811b764a30 of 8 bytes by task 19579 on cpu 0: [ 670.331311][T22189] release_task+0x710/0xb90 [ 670.331347][T22189] wait_consider_task+0x10ef/0x15f0 [ 670.331395][T22189] __do_wait+0xf1/0x500 [ 670.331425][T22189] do_wait+0xb6/0x230 [ 670.331458][T22189] kernel_wait4+0x19f/0x210 [ 670.331486][T22189] __x64_sys_wait4+0x91/0x120 [ 670.331522][T22189] x64_sys_call+0x108f/0x2550 [ 670.331548][T22189] do_syscall_64+0x112/0x360 [ 670.331586][T22189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.331611][T22189] [ 670.331619][T22189] read to 0xffff88811b764500 of 3456 bytes by task 22189 on cpu 1: [ 670.331641][T22189] memcpy_and_pad+0x48/0x80 [ 670.331684][T22189] arch_dup_task_struct+0x2c/0x40 [ 670.331724][T22189] dup_task_struct+0x6d/0x750 [ 670.331745][T22189] copy_process+0x5a0/0x2340 [ 670.331768][T22189] kernel_clone+0x1c0/0x5f0 [ 670.331801][T22189] __se_sys_clone3+0x1f5/0x230 [ 670.331836][T22189] __x64_sys_clone3+0x31/0x40 [ 670.331871][T22189] x64_sys_call+0x437/0x2550 [ 670.331906][T22189] do_syscall_64+0x112/0x360 [ 670.331943][T22189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.331963][T22189] [ 670.331968][T22189] Reported by Kernel Concurrency Sanitizer on: [ 670.331981][T22189] CPU: 1 UID: 0 PID: 22189 Comm: syz.6.3832 Not tainted syzkaller #0 PREEMPT(lazy) [ 670.332014][T22189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 670.332032][T22189] ================================================================== [ 670.419994][T22194] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 670.439321][T22194] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3831: invalid indirect mapped block 4294967295 (level 0) [ 670.440597][T22194] EXT4-fs (loop2): Remounting filesystem read-only [ 670.441025][T22194] EXT4-fs (loop2): 1 orphan inode deleted [ 670.441174][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 670.441224][ C0] EXT4-fs (loop2): initial error at time 2000000079: ext4_free_branches:1023: inode 16 [ 670.441311][ C0] EXT4-fs (loop2): last error at time 2000000079: ext4_free_branches:1023: inode 16 [ 670.441529][T22194] EXT4-fs (loop2): 1 truncate cleaned up [ 670.450887][T22194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.725029][T21253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.