last executing test programs: 14m48.9980098s ago: executing program 32 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast2={0xff, 0x5}, 0x4, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast2={0xff, 0x5}, 0x4, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x20) syz_open_procfs(0x0, &(0x7f0000019040)='net/ipv6_route\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000019040)='net/ipv6_route\x00') pread64(r3, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) (async) pread64(r3, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace(0x10, r4) ptrace$cont(0x1f, r4, 0xa, 0xf) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) syz_io_uring_setup(0x63f0, &(0x7f0000000000)={0x0, 0x87da, 0x2, 0x80002, 0x124}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13m0.230672626s ago: executing program 33 (id=1903): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) 11m55.298429488s ago: executing program 34 (id=2568): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 11m25.562166776s ago: executing program 35 (id=2909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) 11m1.334079135s ago: executing program 36 (id=3239): r0 = open(&(0x7f0000000040)='./bus\x00', 0x4000ee8c3, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0xb}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x48810, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x200, @multicast1}, {0x2, 0x0, @loopback}, 0x2a0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x10001, 0x10002000000}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x34, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="0d2a79075827af5aa534d6815c2e93f1"]}, @nested={0x4, 0x2}]}, 0x34}}, 0x20048800) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) name_to_handle_at(r6, &(0x7f0000000040)='./proc/mtrr\x00', 0x0, 0x0, 0x400) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000080)) 10m48.109016329s ago: executing program 37 (id=3380): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 10m42.461105673s ago: executing program 38 (id=3435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000028, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x8}, {}, {0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 10m32.136387859s ago: executing program 39 (id=3533): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newtfilter={0x5bc, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x588, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_MATCHALL_ACT={0x574, 0x2, [@m_sample={0x114, 0x11, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x1ff, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7ff}]}, {0xc5, 0x6, "58c8a5dcf92923af89a0396e567acf15844bd8a3c130dcc19d21c03a73a833955d68aac96d6b836fef9e12f89d23229be4838d094d7ea0e0bd74eb382996b53cfd7038a79e0528cb0f2df357ceea261f5816a1aa219f58cd31e56b99f3df500f504ea5b2dc7421f54ca6f62e03ffba9c3f0235c827d18c8399e27961bfd3e620636e54b2db9284e6445499f4eb37f9d273cbb0824a8afe97fadd0ca1ed2dda6d51ee7fc805b013e0b164ab852b9e587239cccb1e9fc53f842b963f7ea688e40738"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x90, 0x12, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80}]}, {0x56, 0x6, "cd930899693aa61432f4df31f5549d24c680c4212d281fa19c6f6ed5a8702073eca73479ee0e4aba608c70da22333a41975439a9177be03b2fd99479d7e967acb1d10fc3852adf436a191bb82a8ab61805b7"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0xa0, 0x4, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf, 0xa, 0x1, 0x8, 0x80}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3e}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xfffa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x2, 0x6, 0xb1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x81, 0x0, 0x6, 0x10000000}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x12c, 0x13, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xfffffffe, 0x10000000, 0xffffffff, 0x800}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x7, 0x800, 0xe}, 0xea}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x20000000, 0xffff, 0x1}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x2, 0x2, 0x1f, 0x10}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xfffffffa, 0x10000000, 0x100, 0x1}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x7, 0xffffffff, 0x2}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xde85, 0x3, 0x2, 0x7c8}}}]}, {0x38, 0x6, "76a8913ad5348acbaebae010c59b0daa1ffc1ef37c18ea8350fcd15a0e08d317a11da81b24dbfb517387d556f4b959983565fbad"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0xc8, 0x9, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x3d, 0x6, {0x2, 'raw\x00', 0x2, 0x5, "2c816ed34b0033d3e75cb61b5720d6a388576b"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x57, 0x6, "618f33d7b60ef1e7d092bd83bc5815be4c463760c98f535c93560c846e3613b613ad58ff6cbc429070cf46d6feffc18d00f213e8fe54d1fe43335cdc657324e3a5d956eafc636bb1da8597e3c652021c82c92b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0xcb2ea45fb97e22e5}}}}, @m_sample={0x138, 0x1f, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xe}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x5bc}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000030000000320000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@private=0xa010101, 0x4908, 0x0, 0x1}}, 0x44) r5 = socket$inet(0x2, 0x1, 0x6) connect(r5, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 10m31.25437708s ago: executing program 40 (id=3538): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000005000000fe7f000000000800", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = syz_io_uring_setup(0x4176, &(0x7f0000000180)={0x0, 0xa415, 0x10000, 0xfffffffe, 0x2ce}, &(0x7f0000000100), &(0x7f0000001080), &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x17, r0, 0xc, {0x7fffffffffffffff, 0x9}, 0x9}, 0x1) write(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000048}, 0x2001) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) listen(r2, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 10m22.112750117s ago: executing program 41 (id=3630): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x0, 0x5, 0x2) futex(0x0, 0x6, 0x42, 0x0, 0x0, 0xfffffff7) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x2, 0x0) mremap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x3000, 0x7, &(0x7f0000b3a000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000220900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010400000000000000000a0000000900020073797a31000000000900010073797a31000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x548, &(0x7f0000001340)="$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") syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40001) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10m20.621171203s ago: executing program 42 (id=3640): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000a00290001000000000000080000ac1414bb000000000000000000000000fc0000000000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) 10m20.488434106s ago: executing program 43 (id=3644): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f0000000300)='\t', 0x1, 0x65055, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0x9}, 0x18) 10m6.626290335s ago: executing program 44 (id=3748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10m4.430817288s ago: executing program 45 (id=3764): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 10m3.675046366s ago: executing program 46 (id=3772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefff, 0x1040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20014041) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d02000000fcdbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="4c00308014000400f94b54cce6396cb599431c882366da0105000200fd0000002c0001802000038006000100020000000800020003000300000000000000aaaaaaaaaaaa080001"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x800) r5 = getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)={[{@norecovery}]}, 0x3, 0x542, &(0x7f0000000800)="$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") r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r8 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x2}]}}, {0x0, 0x4e22, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x200, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0x689aece2b491f820}, {0xc, 0x2}, {0xfff2, 0xffe5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048800}, 0x800) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004) 9m50.849838071s ago: executing program 47 (id=3893): mmap$IORING_OFF_SQES(0x0, 0x11000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000003f0a0000000000000900000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000006a010200839b8eb95d0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000005ef1fba18693d3b2956c5853d7f8bd0d2d81c9a82f3177c1174f2f3c96be73b813f468d53bb1125b3ff12e3cc852221f3292f22154f03f2f786b2968c668cb61103927151a0983bb59e846975b3b92e519eac2fbb8c9b6adb870ee2e26c77c502786e2ce07aecf17a51a5d708c7bf1d6c4b21cc58ec8bd592d7333be792ad2bcdd23cd371d99e5d8f92ec4c53f28924e11f301392e0e069fbc102fa60226e1ffaa676496f7742e33f19569dab21940655db734dbbc3315ea0cf6fbe5e4ca6cc8e04ae1582df52ada59225de2734338fe5b3688eb8fdb6509eb82b6dc3036a964b3f9bd9e14aa36611469c4fc5d09463b2420b3e8af436f7c58f5a58fbaa3a101a0803d8b286e24a6190c29de7d7af1504e7665bd2cb2823acbe8e9463de5a3d012959efd5bc6edff54168bbef7b3aacfdcefab4071"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 9m22.077974695s ago: executing program 48 (id=4146): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1, 0x4d1a}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x8}, 0x10363c, 0x10002, 0x20da, 0x3, 0xa, 0x20005, 0x8, 0x0, 0x330, 0x0, 0x7ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404c001}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd17ad0fd6d8d6b96, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) 9m5.637074296s ago: executing program 49 (id=4290): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xe802, 0x480000000000, 0xfffffffc, 0x9, 0xb1, 0x9, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x5, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x1e, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b00"/129], 0x120}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4c20, 0x31ea, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0xb9cbe71ef3dce98d}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x18, r0}, 0x18) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0\x00'}) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) r6 = io_uring_setup(0x3f0, &(0x7f0000000080)={0x0, 0xa1d4, 0x2, 0x3, 0x2b6}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r6, 0x1a, &(0x7f0000000100)={0xfffffff7}, 0x1) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000300)=[{0x30, 0x9, 0x10, 0x2cd5052e}, {0x6, 0xb, 0x2, 0x5}, {0x5, 0x7, 0x3, 0x20002}, {0x9, 0x1, 0x6, 0x5}, {0x8, 0x75, 0x6, 0x81}]}, 0x10) 8m23.743344622s ago: executing program 50 (id=4720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd0000010000080001"], 0x30}}, 0x0) (fail_nth: 5) 8m13.110708595s ago: executing program 51 (id=4846): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) 5m12.690090804s ago: executing program 52 (id=7128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vcsa(0x0, 0x284d, 0x800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, &(0x7f0000005f40)) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40840) recvmmsg$unix(r4, &(0x7f0000006080), 0x0, 0x40000020, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) 4m29.012465563s ago: executing program 53 (id=7370): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0xc}, 0x1080, 0x0, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x1d10, &(0x7f0000000640)={0x0, 0x5288, 0x400, 0x1, 0x2a6}, 0x0, &(0x7f0000000240), &(0x7f0000000600)) r0 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc1, 0x2000000, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r0, 0x9) syz_io_uring_complete(0x0, r0) 2m57.659737605s ago: executing program 54 (id=8082): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sync() 2m21.365514168s ago: executing program 55 (id=8377): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000000000000000000000900000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000200000000000000000000002ebd70000035000002000400500000000000000060001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa"], 0x150}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 2m20.221424085s ago: executing program 56 (id=8387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x400000000000, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e718e31f5c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYBLOB="ed56dd410ac29f3599470cc9f2327ec4d6563200fffe7ad235c33993356cc35e733ff908d5fe669cadd6881b20d302483a", @ANYRESOCT=r5, @ANYRES16=r4, @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1m57.111476344s ago: executing program 57 (id=8569): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x720, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xc}, 0x209, 0x2, 0x0, 0x5, 0x87a, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28242, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000900)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r3, 0x5, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000d0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f00000000c0)) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) sendfile(r0, r0, 0x0, 0xe3aa6ea) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0xbd) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x12, 0x3, 0x2, 0xf, 0x10, "df8fb83eaa264a1a"}) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r5, 0x409, 0xb) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000e80)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3fb}}, {@noload}, {@journal_checksum}, {@resuid}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0x1, 0x498, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbLul/KitiD9A0CoaiT9aWn7IwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6JV/8C40kvRr1o4lXvhoQYLiBe1szODCztbrul227Lfj5hl/dmXvved2Ze582b6TaAjjWYviUROyLiz4joz7J3Fxis/itFxPi/1y+OJ1GpvPNPUi134/rF8aJo8XXbs0ylkue31Kn30vsRY9PTk+fy/PDcmY+GZ89feGnqzNipyVOTZ0ePHTt8aF/P0dEjLYkzjevGnk9n9u4+/t7lt8ZPXP7glyQNaEe+vjaOVhnMtm5dz7a6sjbrq0kn3el7b5578rdief+6t4rldEVEurvK1f7fH12x9fa6/njji7Y2DlhTlUqlUu/8nJuvAPexJNrdAqA9ihN9ev1bvNZp6LEhXHs1uwBK476Zv7I13dUJj/QCtrzg+raVBiPixPytK+kr1mgeAgCg1g/p+OfFeuO/UjySJXrStwfy+fuBiHgwInZGxEMRsSsiHo6oln00Ih5bYf0L75AsHv+Urt5zcE1Ix3+vRMTNReO/UlFkoCvP9VXjLycnp6YnD+bb5ECUt5ycSiZHlqjjx9f/+KrRuur4rxiMz9+6ktZfjAXzdlztXjBBNzE2N7aamGtd+zxiT3e9+JPqfYHI7+vtjog991jH1PPdDdfVjn9P1I1/CY2/bdMq30Q8l+3/+VgQfyFpeH9y5OWjo0eGe2N68uBwcVQs9uvvl95uVP+q4m+BdP9vq3v8345/IOmNmD1/4XT1fu3syuu49NeXDa9plo//ruP/eF9+/Pck71YX9OQrPhmbmzs3EtGTvLl4+eid71bki/Jp/Af21+//O+POlng8IvZGxL6IeCK9KMzb/lREPB0R+5eI/+fXnvlw5fHXn5UvL1HPvUjjn1hu/0ft/l95ouv0T98vH39vRDTa/4erqQP5kmZ+/jXbwNVsOwAAANgssmfgk9LQnXQyNJQ9w78rtpWmZ2bnXjg58/HZiexZ+YEol4qZrv6a+dCRfG64yI8uyB/K542/7tpazQ+Nz0xPtDt46HDbF/X/Uint/6m/u9rdOmDNteA+GrBJ6f/QufR/6EzJsv2/1Y8cARuJ8z90rnr9/7OGpYe+W9PGAOvK+R86VxP9fz77r/GoANicnP+hc+n/0JEa/m58aVW/8t/SxL5vs7YuVea//CNUNkqb7/9ElJYt07dBmrq5E91Nf5hFo0R5cV+u5H+MIV2ype5XtfXHEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMv8HwAA//8ppeKp") mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write$tun(r6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="400088"], 0xe) 1m52.846840126s ago: executing program 6 (id=8620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="680200000005050700000000000000000300000554020100020000000c0000000af600087f00000073797a300000000000000000000000000000000000000000000000000000000086575a1adbe21429a35b1714e11f269967b325de36e4cb73f0c8026c7d2444086d42a7a736029c11041a9db60cdb5739450abdefca0e5e41075a3adb4f8aa4fc"], 0x268}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x200, r0, 0x4}, 0x38) 1m52.731077219s ago: executing program 6 (id=8623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000002500)=""/4114, 0x1012}, {&(0x7f0000000940)=""/45, 0x2d}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) (fail_nth: 1) 1m52.083748634s ago: executing program 6 (id=8626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) pselect6(0x40, &(0x7f0000000100)={0xc, 0x8, 0x0, 0x1, 0x2, 0x8, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c2e869be9ad7def9dc50fd034e9d1a9dc8963c8e46c126dc6e70c152123cb8216d806f463c190287124260f6dd47adc280d4d08182192065912f3b2846af366e69d272ef6a3f801f1a8b0766020e11d5f95e4e4262b2ec26cf2423303432aeba09ad01104e1a1f210a12a57a4f38315fbe0b5844150dd714a610c8915fbb7aee09f47ead74036f4a8f069651cce649fb8ffdc97a5fb7695d62c63ed44bbdce4422dee9e5fb8397eda7789877b4585b6c025c351eb834e0a5d854f3705445", @ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r3, @ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x20040000) r4 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x7, 0xffe0}, {0x0, 0x10}, {0xfff2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r7, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000002500)=""/4114, 0x1012}, {&(0x7f0000000940)=""/45, 0x2d}], 0x4}, 0x5d}, {{&(0x7f0000000700), 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/112, 0x70}, {&(0x7f0000000b00)=""/30, 0x1e}, {&(0x7f0000000b40)=""/122, 0x7a}], 0x5, &(0x7f0000000c40)=""/212, 0xd4}, 0x4}, {{&(0x7f0000000d40)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/59, 0x3b}, {&(0x7f0000000e00)=""/216, 0xd8}, {&(0x7f0000000f00)=""/224, 0xe0}, {&(0x7f0000001000)=""/10, 0xa}], 0x4}, 0xa32e}], 0x3, 0x10022, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x80, 0x7, 0x5, 0x7, 0xfff2, 0x2, 0xc852, {0x0, @in6={{0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xcb}}, 0x6, 0x3, 0x0, 0x1, 0x401}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000400)={r8, 0x3}, &(0x7f0000000440)=0x8) 1m51.169816386s ago: executing program 58 (id=8632): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e41b0000800ac00060311000000040012000a00ff80000000000000c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 1m50.591736039s ago: executing program 6 (id=8636): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)="7bdf9a3fcc87b9af689dc4fbb36e31f3", 0x10, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000300)="e100000000d6", 0x3e, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_clone3(&(0x7f0000001440)={0x1000400, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m50.242053448s ago: executing program 6 (id=8639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0) 1m49.776124399s ago: executing program 7 (id=8641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="070000000400000000090000050000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) 1m49.618546733s ago: executing program 7 (id=8643): writev(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") io_setup(0xaf, &(0x7f0000000140)) creat(&(0x7f0000000040)='./bus\x00', 0xe0) bpf$MAP_LOOKUP_ELEM(0x21, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$nl_generic(0x10, 0x3, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004d40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb2181c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817c5a45c15c0c9a0ef5b1f08b8a06a31c21bc8e615da86364b"], &(0x7f0000000180)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m49.247064982s ago: executing program 6 (id=8644): r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) lseek(r0, 0xfffffffffffffff8, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x2b, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) setpgid(0x0, 0x0) 1m49.242908662s ago: executing program 7 (id=8645): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x4}, 0x0, 0x2, 0xfffffffe, 0x7, 0x9}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @empty, 'vcan0\x00'}}, 0x1e) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'caif0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m49.217324662s ago: executing program 59 (id=8644): r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) lseek(r0, 0xfffffffffffffff8, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x2b, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) setpgid(0x0, 0x0) 1m49.014969277s ago: executing program 7 (id=8647): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)="7bdf9a3fcc87b9af689dc4fbb36e31f3", 0x10, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000300)="e100000000d6", 0x3e, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_clone3(&(0x7f0000001440)={0x1000400, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m48.549416788s ago: executing program 7 (id=8650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000050900010073797a310000000050000480340001800c0001007061796c6f6164002400028008000140000000090800034000e4884f080004400000003908000240000000021800018008000100647570000c00028008000140"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 1m47.877972614s ago: executing program 7 (id=8652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0) 1m47.877861404s ago: executing program 60 (id=8652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0) 1m10.538379432s ago: executing program 4 (id=9072): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000040)=ANY=[], 0x0, 0x806, &(0x7f0000000200)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000000500000a400020000c0a01010000000003000000000000000900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1031f00140000001100010000000000000000000100000a000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m10.320491607s ago: executing program 4 (id=9076): ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0xe, 0x19, 0x1}) 1m10.287077898s ago: executing program 4 (id=9078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x2c}, 0x1, 0x300, 0x0, 0x84}, 0x4000000) 1m10.2180308s ago: executing program 4 (id=9079): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x11c) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000180)={0xa, 0x0, 0xd, 0x6, 0x1, 0x0, [{0x978, 0x8, 0xf, '\x00', 0x2}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7, 0x3}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89ff, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) statfs(&(0x7f0000000200)='./sys/file0\x00', &(0x7f0000000400)=""/76) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='+', 0x1) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x200, 0xc5) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffee4, 0xc, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x800) 1m10.061217383s ago: executing program 4 (id=9080): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 1m9.821864009s ago: executing program 4 (id=9083): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000740)="7bdf9a3fcc87b9af689dc4fbb36e31f3", 0x10, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$packet(0x11, 0x3, 0x300) close_range(r2, 0xffffffffffffffff, 0x0) 1m9.752982111s ago: executing program 61 (id=9083): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000740)="7bdf9a3fcc87b9af689dc4fbb36e31f3", 0x10, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$packet(0x11, 0x3, 0x300) close_range(r2, 0xffffffffffffffff, 0x0) 45.492973107s ago: executing program 9 (id=9554): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open$cgroup(&(0x7f0000000140)={0xa, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x2000000000, 0x3400000, 0x4, 0x2, 0x0, 0x0, 0x0, 0xc12, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000005c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x80000000004, &(0x7f0000000000)=[{0x800000000, 0x0, 0xffffffffffffffff}], 0x1, 0xfd, 0x1e, 0x0, 0x3f, 0x6e}) 44.452847412s ago: executing program 9 (id=9570): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="18005c85f7a271e37e0000000400", @ANYRES16=0x0, @ANYBLOB="010000000022000000001700000004000680"], 0x18}, 0x1, 0x0, 0x0, 0x8014}, 0x4000004) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0x198, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @multicast2, 0xffffffff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0xfffffffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 0x0, 0x0, [0x0, 0xffff, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22], 0x0, 0x101}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x4, "02528240bf8633cc2316be070461599202291aa7e0265f769d445c3e3f32"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0x5}}, {@grpid}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0xa}}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x129942, 0xc0) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x400c014) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002a00010028bd7000fbdbdf25010117800c00160006ac0f0000000000140001000b"], 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r6, &(0x7f0000000080)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x300, 0x0, 0x1c}, {"9dd9caa39052213c7f4b87"}}}}}, 0x41) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYRES32=r6, @ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC, @ANYRES32=r4], 0x0) r8 = syz_open_dev$sg(0x0, 0x0, 0x8002) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) ioctl$SG_SCSI_RESET(r8, 0x2284, 0x0) fcntl$setlease(r3, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 44.261572427s ago: executing program 9 (id=9576): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x1d, 0x0, 0x2, 0x4}, {0x7c, 0x0, 0x0, 0x7981}]}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x440840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 44.219802428s ago: executing program 9 (id=9578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)) fallocate(r2, 0x20, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x6, 0xfff2}, {0x2, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "41b57012b47bc8e8d8e3484d9c5998b3"}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000001f00000000004e20009c90780100140000000000007b4b143b7461fd77781c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe0947e36bf6879de6c42c504312059bcfa0b1eba8d22a17de4fa6cb6dfed7070f7d21f23a19c2315d3302cc75f9f2628fd29f16"], 0x0) 43.594611193s ago: executing program 9 (id=9585): r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2f, 0x80000000, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x0, 0x40, 0x0, 0x80000, 0x0, 0x1, 0x4, 0x4, 0x82000045, [0x2, 0x9]}}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x8893, 0x800000, 0x168, 0x2, 0x20000009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x204000000000, 0xffffffffffffffff, 0xf) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x8, 0x1c}, 0x18) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="04062abd7000fddbdf25300000000500360001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200c4}, 0x40000) linkat(r4, 0x0, r4, 0x0, 0x1800) 42.936788808s ago: executing program 3 (id=9604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a040016400800154000000003"], 0xd4}}, 0x0) 42.935831608s ago: executing program 3 (id=9606): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000310df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 42.919611868s ago: executing program 3 (id=9607): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 42.901254779s ago: executing program 3 (id=9608): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0xa5, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./mysys\x00', 0x1800040, &(0x7f0000000880)={[{@barrier}, {@nodioread_nolock}, {@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resuid}, {@grpjquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000100)={0x1fffffffbf8, 0x8, 0x0, 0x6e}) r4 = socket(0xa, 0x3, 0x3a) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8080, &(0x7f00000000c0)={[{@dots}, {@dots}, {@fat=@debug}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@dots}]}, 0x2, 0x209, &(0x7f0000000680)="$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") bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r5 = accept4$phonet_pipe(r4, 0x0, &(0x7f0000000080), 0x80000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getenv(0x4201, r6, 0xfffffffffffffe01, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'dvmrp1\x00', 0x2000}) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0xa6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x20) 42.776182552s ago: executing program 3 (id=9609): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000600000004000000010000930100000000000001020001000509000000615f302e"], 0x0, 0x36, 0x0, 0x9, 0xffffffff}, 0x28) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000300), 0x5, 0x500, &(0x7f0000000c40)="$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") recvmsg$can_bcm(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000cc0)}, 0x12060) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd) write(r1, &(0x7f00000001c0)='p:s/p ./file0:0\f-', 0x11) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x40a65ab194bc4c56, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @empty}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x9c, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x88, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0xa00}, @val={0x1, 0x0, 0x7, 0xb56, 0x200, 0x10}, @arp=@generic={0x309, 0x22eb, 0x6, 0xa, 0x9, @broadcast, "350b2f4d7bd82f1c892c", @random="53eb6815d83e", "c1cb0b7eb0db11703402d880"}}, 0x38) 42.570947637s ago: executing program 9 (id=9612): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x800, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f656", 0x3}], 0x1}}], 0x1, 0x4000000) write(r1, &(0x7f0000001f00)="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", 0x696) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) 42.070657748s ago: executing program 3 (id=9621): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 42.070524208s ago: executing program 62 (id=9621): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 26.238401345s ago: executing program 63 (id=9612): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x800, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f656", 0x3}], 0x1}}], 0x1, 0x4000000) write(r1, &(0x7f0000001f00)="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", 0x696) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) 3.821360278s ago: executing program 1 (id=10210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xf40d1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0xa}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0x40006, 0x5, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = memfd_secret(0x0) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e94b00", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000, 0x0) getsockopt(r0, 0x2, 0x44fad0fd, &(0x7f00000003c0)=""/3, &(0x7f0000000500)=0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x4, 0x1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0310000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000007c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="0000000000000000b7030000000f0000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(r4, &(0x7f0000000200)='./file0\x00', 0x20, 0x103) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000180)="0000000000000002ff690000", 0xc, 0xffffffffffffffff) 3.367393019s ago: executing program 0 (id=10216): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setpriority(0x3, 0x0, 0x40) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x200, @multicast1}, {0x2, 0x0, @loopback}, 0x2a0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x10001, 0x2000000}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0xa, 0x8, 0x1, 0xa}, {0x8, 0x3, 0x4, 0x10ff}, {0x3, 0x7e, 0xfe, 0x2}, {0x5, 0x8, 0x1, 0xfffffff9}, {0x5, 0xca, 0x4, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xa, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x43}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x28c4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x800) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x2, 0x2, [0x800, 0x1000]}, &(0x7f0000000380)=0xc) 3.234413832s ago: executing program 1 (id=10220): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000022f0aaaaaaaaaaaa0180c200000286dd6100070000082c"], 0x42) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbcf, &(0x7f0000000c00)="$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") mremap(&(0x7f0000a66000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000056000/0x2000)=nil) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3.186556103s ago: executing program 8 (id=10221): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) unshare(0x22020600) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="3800000003140100000000000000000009"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x3}) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x3c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x70, 0x1, 0x2}, @mss={0x2, 0x4}]}}}}}}}, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) 3.122663225s ago: executing program 0 (id=10222): getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x4, 0x22, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x6, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x81}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x5, @empty, 0x6}}]}, 0x60}, 0x1, 0x7}, 0x0) unshare(0x64000600) socket$kcm(0x29, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1509, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x24, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0x7ff, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0x0}, 0x106, 0x1}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14}}, 0x64}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x4e20, 0x7f000001, @empty}, r3}}, 0x30) setns(0xc9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000414e3f92e5f32a44d533055587ecd5ea17c8b2b8034d9f7821804a474c8fffd7be96e7b6851deeac5b898e40a423f7c33d6294aa9c35cc8884c238b072f8430e77b51613409b24506b7143efb7cf12303f6065eebc2d841b8d3723943f0ceeedd803615e307d2523830b5fb8e7316e99d91be65a01d77fe76b471ddd1e17ad7c3af368aa907d6b87a20895ea0e98e44da20b7c49f821f16bdb538187512704691e09bf7ea91e9fc8ae9b5de133d0ac6e5c75f976ef690b8bcb9af28a9ad71182a00418590375aaafb08822d5e1ca2f3a1b0c4b8089af77d246ca94c78ff92d8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) epoll_create1(0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x2, 0x15, 0x4, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_address={0x5, 0x7, 0x6c, 0xe0, 0x0, @in6={0xa, 0x4e23, 0xffff0000, @private0, 0x5fa10f07}}]}, 0x38}}, 0x48c0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r6, 0x0, 0x17, &(0x7f0000000080)=""/3, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000580)=ANY=[@ANYBLOB="01"]) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90224fc60040002000a740100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x1, 0x106) r9 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x050x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000ac0)={r2}, &(0x7f0000000bc0)=0x8) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r0, 0x301, 0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0xe4e, 0x9, 0x9, 0x4e, 0x120000, 0xffffffffffffffff}) 2.269217175s ago: executing program 8 (id=10226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) unshare(0x26020480) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000003c0)=0x17, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @local}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x4e0, 0x2f8, 0x2f8, 0x0, 0x3f8, 0x3f8, 0x3f8, 0x4, 0x0, {[{{@arp={@local, @empty, 0xffffff00, 0xffffff00, 0xe, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x0, 0x4, 0x80, 0xc0, 0x200, 'pim6reg1\x00', 'pimreg1\x00', {}, {}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, 0x2, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff000000, 0x9, 0x3, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x101, 0x3, 0x8, 0x0, 0x5, 0xd8b, 'veth0_to_team\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0x6f05f9663189ceb3}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716698863742906f9065410a5c45bfdc6f3a623bbc66735e5bf470a6627e"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x530) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 2.201086647s ago: executing program 1 (id=10227): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20020005, 0x0, 0x0, 0x0, 0x0, 0x8000080000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x571f68543cec8180) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0)=0x3465, 0x4) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c001a800800058004000680"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 2.123398459s ago: executing program 0 (id=10228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x17f) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0xfffffffffffffe85, &(0x7f00000000c0)={&(0x7f00000006c0)=""/4096, 0x103d, 0x0, 0x0}}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x9, 0x10000f, 0xb5584abaf48585a0) sendfile(r1, r1, 0x0, 0x9) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1d000000200025a726bd7000fddbdf250a140000fb0000011b000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000) fstat(r2, &(0x7f0000000240)) 2.121714569s ago: executing program 5 (id=10229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) 2.121574159s ago: executing program 8 (id=10230): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}, 0x1c}}, 0x20000080) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c00599c6d0e0000ded650492d"], 0xfe33) 2.090768029s ago: executing program 5 (id=10231): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe903, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x1, 0x15a}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x206, 0x800002, 0x12, r1, 0x8000000) r3 = syz_io_uring_complete(0x0, r2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x68825000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sched_rr_get_interval(r4, &(0x7f0000000b00)) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) unshare(0x6020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote, r10}, 0x14) close(0x3) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c0200000300000000bd5913f0850000002700005fd6809500000500000000004f23e829fe0d8e10afefb1985e3d5a41f1f4467da79c27476664e0ef18f451b0ee67380797b7f231ab7f85b3fda72893f53dde506da32926a73f"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r11, 0x4) recvfrom$inet6(r3, &(0x7f00000009c0)=""/236, 0xec, 0x100, &(0x7f0000000ac0)={0xa, 0x4e23, 0x3a, @remote, 0x5}, 0x1c) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a30"], 0x28}}, 0x0) 1.982613942s ago: executing program 1 (id=10232): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000001980)={[{@noquota}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb}, {@errors_continue}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x5, 0x5a4, &(0x7f0000001a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101242, 0x220) r1 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x43) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x7fffffff, 0x4}, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r5], 0x34}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) r6 = openat(r3, &(0x7f0000000280)='./file1\x00', 0x543242, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7ffffffa}]}) fallocate(r0, 0x3, 0x6ae8, 0xf3d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xc3, 0x0, 0x7fff0000}]}) umount2(&(0x7f0000000040)='.\x00', 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r7) 1.964444622s ago: executing program 0 (id=10233): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001fc0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1e8, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6b07000000000000005b4809088400ed0000006c0000040500"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @multicast2, 0x0, 0x0, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0x836b636e4bafbd70}, {}, 0x62, 0x2, 0x6}, 0x287, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'macvtap0\x00', {}, 'vxcan1\x00', {0xff}, 0x1b, 0x18}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x34, "9c4b4435910fbfcf24e0fae0e0bfd3b90000000000000000000000000001"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a0500000000000000000002000000090001"], 0x74}}, 0x0) 1.956426633s ago: executing program 1 (id=10234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xf, 0x0, r1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x18, 0x4}, @fwd={0x8}]}, {0x0, [0x61, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000400)=""/159, 0x3b, 0x9f, 0x0, 0x1}, 0x28) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4b0, 0x0, r2, 0x57, '\x00', 0x0, r3, 0x1, 0x3, 0x4}, 0x50) socket$igmp6(0xa, 0x3, 0x2) dup(0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f00000000000000000000000000000000040000000000000dffffffffffffffff070000000000000000000000000000ff0000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c0000000200000000000000000000000000ffffac1e01010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_control_io$uac2(r7, &(0x7f0000000840)={0x14, &(0x7f0000000680)={0x40, 0xd, 0x7b, {0x7b, 0x21, "b3154c92d9e476431565e88ad61a5943fc9b61479c31ac90a15a2a135e2c5d82bbc35924715b335d221a13d79b25a7a1ba465c2a20647c6e66ae08007413a2ff1e59f6ea723b90fc4acb005d47413e6194055c05c4fb3b16c707a4c785860e684f395e70872855215dd34cad8dfcbb52056fb35b106c83ff29"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000900)={0x20, 0x0, 0x5a, "020fdc5971f21803735a8e6875ae39d0cf9c1caf7e759ec645d8737e14d0340bd95234c50c90cd68d040ceebf26943bfb51b864062cae4492833fe37e375d2091168c69c5e99ba8272aeb5882cc33540a12e294f9255a437ba68"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a00)={0x20, 0x81, 0x3, "946807"}, &(0x7f0000000a40)={0x20, 0x82, 0x2, "9b9d"}, &(0x7f0000000a80)={0x20, 0x83, 0x3, "0e7fc0"}, &(0x7f0000000ac0)={0x20, 0x84, 0x1, "e5"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "8fb73f"}}) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="ff0100"/20, @ANYRES32, @ANYRES32=r3, @ANYBLOB="03000000782e08ff4e020000000200"/33], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1d, 0x4, 0x4, 0x10, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.874822305s ago: executing program 0 (id=10235): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f00000000000000000000000000000000040000000000000dffffffffffffffff070000000000000000000000000000ff0000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.565210232s ago: executing program 2 (id=10236): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x7, 0x4, 0x4, 0x401}) r1 = socket(0x2a, 0x80000, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) write(0xffffffffffffffff, &(0x7f00000001c0)='-:tes_/event1 ./file0:0', 0x17) bind$netlink(r1, 0x0, 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000002c0)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd80a, 0x3, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x2000000010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_IO_FLUSHER(0x50, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000003000000000000000800000000000087000000950000000000000054ff351cd415fe2d20ebd6b54ee8f4e864042698e3eedf8f2eb243cb0e04fe717b41f6eff166a829b1d62a76f1106ca02436b4b178c82b9dfb3cee95bdc45c1826267cf1e143dbc30354e26ae4ba3b9a33a514e92368cbb829d1150000f25e63116c8910e90007327bb14f1c001a446f45d471f835ae037503a1e9d49800f43f4a2855517d0397999e1b58e90629c877a8c26ca9657f834d6c29c63a044633f027aab6088377a72774bfa8172ed2e164adc13ca29db6d5e9e9d58f6e6714789510f2e1d472614edc132d1a3730f2211430688289658ebdb1dedb12cb896845280c85faf5ac67456ba66c1000"/276], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x48}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, &(0x7f0000002840)=[{{&(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000500)="7536ff020d357df3dc6342dedd74ab57dda374c37b0e128fa65cd5967f08ea5e00dd47c58c9ce80ee39eec323ef7a5ba5be373e925edd5b3466d48d0d106f149ccce4f835e5380d27e21c8bce1c2c2f8b182270f825aefdefa9140b57f4d0ed61f243e8212ee47227d912d91c1e74552c447a7071563594c16111eca5a01686bf28eeb50b8056c6454778c7e260513fd6abeb832abfe0b9e7bde6aace13fc31adc4343a44b535f585420430e1f53ed6a82ccd902c887f3ec5b1ac2f2a3af6653dc66a4d47802c78a4887ea30efc6cf5debedbaaabc603c34346b3651a7c87556802e367eca1221655217121e25b9567141bd38", 0xf3}, {&(0x7f0000000780)="f1c3d2d757d2dd5cdd1cd6981145d5d570b04d3f073341f14de5233b52a268fc1171a1fc4160b5879311cfd7241c7e34b8c71c8e18b6c5c9f8dc79f9c794a4d244f8b06f51f72610268b3de0b189fe61227382bab8937c854fc74880591c4d5f7610edfd160772d5e63735d5629b9bdd497c451df8a012af7d9b95a58381090decab5fe4eabd2a5558a43271af02c04c0d7401497708b31d9822a8f244fd07f88ecef7cb", 0xa4}, {&(0x7f0000000840)="6969e0649616aed2135fb230f8f71ea4d4efe613ae8fcf4de893b55a0133bc78db975e897e2f7a1df28552facf1ae6ced9f5e18bc527d354a83255946f097577b6ba54f30cc48132cd328b2b905e1c57ad0b202959ef1afd9b126f793737fa088e3192e6a124ce0916c573b6bc149dc3fba4d273f67fba0c4a1e37321e3dd085a30fe438b3", 0x85}, {&(0x7f0000000900)="1ccc", 0x2}, {&(0x7f0000000940)="6164193ca17db74d923282eda5f48275d953924aaa710b3be2a079ff256e4788ebe8e8e7b748c24e3343b32956f7ee6ad003348478c5fe48836751ca53537430dbf47b1d2dc4dbaa99ddaaae6cf0d81bb377a8fc0d7d78dc6b0f1ef11ccf4a4b1729b5d00fb487a55ad4ef960053e24919490ea46664f1f775a25187cb0defbf8769ae48611b638ba59808c1f1594471ad766cb3aa0f0a5130a1bd950b11468793f5a3be2e5ca6308544de763f9b64199a75e73744e8707616e0d9c10d87cc21ed307a8ab32512ac3f707f3d6cae69963d3f5b1ac8e8636cfe3b6e5df3678fbd46564ef6f8b4", 0xe6}], 0x5, &(0x7f00000028c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x61, 0x0, 0x6, [0x10, 0x1]}, @noop, @timestamp_addr={0x44, 0x1c, 0x81, 0x1, 0x9, [{@private=0xa010102, 0x4df}, {@loopback, 0x9}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0x44, 0x64, 0x1, 0x4, [{@multicast2, 0x3}, {@multicast2, 0x3}, {@private=0xa010102, 0xd249}, {@multicast2, 0x30a31953}, {@remote, 0xcf}, {@local, 0x2d7}, {@private=0xa010101, 0x212}, {@empty, 0xcdd93105}]}, @timestamp_prespec={0x44, 0x1c, 0x81, 0x3, 0x5, [{@loopback, 0x81}, {@rand_addr=0x64010101, 0x3ff}, {@remote, 0xb}]}, @cipso={0x86, 0x32, 0x3, [{0x5, 0x9, "e4dc214d93805a"}, {0x6, 0x5, "900553"}, {0x2, 0xf, "491d2d6915d8b247d4abc254bf"}, {0x7, 0xf, "a660b4e1134b01dc96f23b4b24"}]}, @rr={0x7, 0x1b, 0x56, [@remote, @remote, @local, @loopback, @remote, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x148}}, {{&(0x7f0000000c00)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f00000027c0)=[{&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="b6fb0e3dab705a0214c61fcbcac23bd861374e87ac22b92d89262c2a2db593ff8e1bb8c7ae4b4739da14a19a5e2dae25785c9c2b2c84cd7783089276eb0ef19ff8e5530dcc7b86f8b4aef90e515e9a82a968afee2802b16900943320c7f829dd451c830ed2b9df2c9aa8b582736707f90134f882d9a532acf3fe3577b882df6a28fa2d0bd37d0669a2fc74d2e45106e2ef4a07ebc8665b18a13cdef0923560bff0898b0f4f7d09a757fa8e4c5a4e1ea50584e713ddab7a8c2ade85421bda94874ff33ecb5ed70ac036e5de057d12ede2b0be3fa4a4748fc4bacb19a33aa4ab4f9f82193e0df9", 0xe6}], 0x2, &(0x7f0000002800)=ANY=[@ANYBLOB="1400000000000000000000000100000000000000000000001800000000000000000000070000008907f3ac1e00010000"], 0x30}}], 0x2, 0x20008000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x2, 0x4) 847.990819ms ago: executing program 8 (id=10237): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'pids'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'blkio'}, {0x2d, 'pids'}, {0x2d, 'io'}]}, 0x26) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000ac0)={r2}, &(0x7f0000000bc0)=0x8) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r0, 0x301, 0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0xe4e, 0x9, 0x9, 0x4e, 0x120000, 0xffffffffffffffff}) 794.68642ms ago: executing program 0 (id=10238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc01000000000000000000000000000009000000000000000800120000000200bb6b6e000000000006003200000000000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000005000500000000000a"], 0xa0}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xf, 0x90, 0x7, 0xf, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x9, @local}, @in6={0xa, 0x4e20, 0x7, @loopback, 0x153}}, @sadb_address={0x3, 0x6, 0x0, 0x80, 0x0, @in={0x2, 0x4e20, @multicast2}}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2a, 0x3504}]}, 0x78}}, 0x800) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800faf5560301080000000000e4ffffff00000a0400198000eeb34268de33a3a0b58109b2"], 0x18}, 0x1, 0x0, 0x0, 0xc801}, 0x800) unshare(0x6a040000) 788.149181ms ago: executing program 8 (id=10239): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x10000100}, 0x60c, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4004000000000, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="656acfded2e8bbbbbbbbbbbb86dd61200000006e2f01fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be0000000101000800000086ddfffd0005080088be000000031c08ffff0000000000000003080022eb0000000223022309020000000000000300ebb41b08006558000000049a09ec2c033300f68fa7915d41d26f9b9feafb0690b7ff1a9d9acac8387fc5082c9022fba83a"], 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x6001, 0x0) 730.448432ms ago: executing program 8 (id=10240): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x683af, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x100, 0x0, 0x7, 0x6, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'geneve1\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x106, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0xb}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000300)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x20, &(0x7f0000000480)={[{@noblock_validity}, {@abort}, {@nobh}, {@nouid32}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@audit}, {@smackfshat={'smackfshat', 0x3d, 'ramfs\x00'}}, {@smackfshat={'smackfshat', 0x3d, '+)'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'audit'}}, {@context={'context', 0x3d, 'unconfined_u'}}], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r2 = shmget(0x1, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x10, 0x3, 0xa) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffffffffffff) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) 512.299277ms ago: executing program 2 (id=10241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) 470.289098ms ago: executing program 2 (id=10242): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x242, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_config_ext={0x10001, 0x4}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x101, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x6, 0x431) semtimedop(r3, 0x0, 0x0, 0x0) semop(r3, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x200000000000000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x2, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 302.167162ms ago: executing program 2 (id=10243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x17f) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0xfffffffffffffe85, &(0x7f00000000c0)={&(0x7f00000006c0)=""/4096, 0x103d, 0x0, 0x0}}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x9, 0x10000f, 0xb5584abaf48585a0) sendfile(r1, r1, 0x0, 0x9) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1d000000200025a726bd7000fddbdf250a140000fb0000011b000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000) fstat(r2, &(0x7f0000000240)) 271.060343ms ago: executing program 2 (id=10244): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60140, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x401, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000000, 0xc3072, 0xffffffffffffffff, 0xffffc000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) 182.504885ms ago: executing program 2 (id=10245): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) openat$vcs(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0x4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001540)={&(0x7f000071e000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/155, 0x9b, 0x1, &(0x7f0000000540)=""/4096, 0x1000}, &(0x7f0000001580)=0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x10000}, 0x10dd4, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x301, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000001600)={{{0xb}}, 0x0, 0x0, 0x0}) syz_clone(0x6314e100, 0x0, 0x0, 0x0, 0x0, 0x0) 82.715367ms ago: executing program 5 (id=10246): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x9, 0x7}}}, 0x24}}, 0x4008000) prctl$PR_CAPBSET_READ(0x17, 0xe6) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') read(r2, &(0x7f00000000c0)=""/183, 0xb7) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000080)="97de21", 0x3}], 0x2) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @loopback, r1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x9, 0x7}}}, 0x24}}, 0x4008000) (async) prctl$PR_CAPBSET_READ(0x17, 0xe6) (async) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) read(r2, &(0x7f00000000c0)=""/183, 0xb7) (async) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000080)="97de21", 0x3}], 0x2) (async) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @loopback, r1}, 0xc) (async) 62.782918ms ago: executing program 5 (id=10247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000) sendmsg$NFT_BATCH(r0, 0x0, 0x4007) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_open_pts(0xffffffffffffffff, 0x208000) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000b00)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = io_uring_setup(0x1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, &(0x7f0000003000)={&(0x7f0000002000)={&(0x7f0000001000), 0x1000}, 0x1000000}, 0x1) 0s ago: executing program 5 (id=10248): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c0002800600050001800000", @ANYRES32=r1], 0x68}}, 0x0) kernel console output (not intermixed with test programs): ][T13864] NEXT_ORPHAN(inode)=0 [ 932.170590][T13864] max_ino=32 [ 932.180399][T13864] i_nlink=2 [ 932.245005][T13864] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 932.307482][T13857] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 932.322585][T13857] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 932.358606][T13857] SELinux: ebitmap: truncated map [ 932.366385][T13857] SELinux: invalid class [ 932.375143][T13857] SELinux: failed to load policy [ 932.649830][T13946] loop2: detected capacity change from 0 to 128 [ 932.734171][T13946] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 932.769565][T13946] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 932.825364][T13944] loop1: detected capacity change from 0 to 1024 [ 932.908103][T13944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.933302][T13944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.996108][T13944] ip_tables: iptables: counters copy to user failed while replacing table [ 933.016799][ T9050] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.125538][T13961] __nla_validate_parse: 12 callbacks suppressed [ 933.125562][T13961] netlink: 84 bytes leftover after parsing attributes in process `syz.9.9499'. [ 933.233330][T13976] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9506'. [ 933.240695][T13980] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 933.257206][T13978] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9507'. [ 933.494905][T13997] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 933.548097][T14005] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9515'. [ 933.585049][T12389] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 933.631940][T14011] FAULT_INJECTION: forcing a failure. [ 933.631940][T14011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.662063][T14011] CPU: 0 UID: 0 PID: 14011 Comm: syz.8.9518 Not tainted syzkaller #0 PREEMPT(lazy) [ 933.662121][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 933.662134][T14011] Call Trace: [ 933.662141][T14011] [ 933.662152][T14011] __dump_stack+0x1d/0x30 [ 933.662185][T14011] dump_stack_lvl+0x95/0xd0 [ 933.662214][T14011] dump_stack+0x15/0x1b [ 933.662285][T14011] should_fail_ex+0x262/0x280 [ 933.662449][T14011] should_fail+0xb/0x20 [ 933.662487][T14011] should_fail_usercopy+0x1a/0x20 [ 933.662531][T14011] _copy_to_user+0x20/0xa0 [ 933.662556][T14011] simple_read_from_buffer+0xb5/0x130 [ 933.662635][T14011] proc_fail_nth_read+0x10e/0x150 [ 933.662787][T14011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.662827][T14011] vfs_read+0x18e/0x7c0 [ 933.662849][T14011] ? __rcu_read_unlock+0x4e/0x70 [ 933.662941][T14011] ? __fget_files+0x184/0x1c0 [ 933.663002][T14011] ? mutex_lock+0x57/0x90 [ 933.663090][T14011] ksys_read+0xdc/0x1a0 [ 933.663120][T14011] __x64_sys_read+0x40/0x50 [ 933.663144][T14011] x64_sys_call+0x2135/0x2550 [ 933.663170][T14011] do_syscall_64+0x112/0x360 [ 933.663285][T14011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.663327][T14011] RIP: 0033:0x7f5d8b04e90e [ 933.663351][T14011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 933.663378][T14011] RSP: 002b:00007f5d89ae6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 933.663407][T14011] RAX: ffffffffffffffda RBX: 00007f5d89ae76c0 RCX: 00007f5d8b04e90e [ 933.663432][T14011] RDX: 000000000000000f RSI: 00007f5d89ae70a0 RDI: 0000000000000005 [ 933.663488][T14011] RBP: 00007f5d89ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 933.663506][T14011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.663525][T14011] R13: 00007f5d8b316038 R14: 00007f5d8b315fa0 R15: 00007ffefea41bf8 [ 933.663554][T14011] [ 933.713130][T14014] loop2: detected capacity change from 0 to 1024 [ 933.892964][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9522'. [ 933.975718][T14014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.013223][T14014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.069610][T14028] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 934.097649][T14026] usbip-vudc usbip-vudc.0: gadget not bound [ 934.107079][T14028] 9p: Bad value for 'rfdno' [ 934.117390][T14014] ip_tables: iptables: counters copy to user failed while replacing table [ 934.231786][T14038] loop8: detected capacity change from 0 to 1764 [ 934.247922][T14038] ISOFS: Logical zone size(512) < hardware blocksize(1024) [ 934.361818][T14051] netlink: 'syz.9.9536': attribute type 10 has an invalid length. [ 934.413368][T14050] syzkaller0: entered promiscuous mode [ 934.419061][T14050] syzkaller0: entered allmulticast mode [ 934.440273][T14050] FAULT_INJECTION: forcing a failure. [ 934.440273][T14050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.482033][T14050] CPU: 1 UID: 0 PID: 14050 Comm: syz.1.9534 Not tainted syzkaller #0 PREEMPT(lazy) [ 934.482073][T14050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.482130][T14050] Call Trace: [ 934.482141][T14050] [ 934.482153][T14050] __dump_stack+0x1d/0x30 [ 934.482188][T14050] dump_stack_lvl+0x95/0xd0 [ 934.482220][T14050] dump_stack+0x15/0x1b [ 934.482325][T14050] should_fail_ex+0x262/0x280 [ 934.482368][T14050] should_fail+0xb/0x20 [ 934.482407][T14050] should_fail_usercopy+0x1a/0x20 [ 934.482502][T14050] _copy_from_user+0x1c/0xb0 [ 934.482530][T14050] ___sys_sendmsg+0xc1/0x1e0 [ 934.482586][T14050] __x64_sys_sendmsg+0xd4/0x160 [ 934.482697][T14050] x64_sys_call+0x22ab/0x2550 [ 934.482733][T14050] do_syscall_64+0x112/0x360 [ 934.482827][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.482859][T14050] RIP: 0033:0x7f86e3c6e0d9 [ 934.482881][T14050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.482962][T14050] RSP: 002b:00007f86e26c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.483000][T14050] RAX: ffffffffffffffda RBX: 00007f86e3ef5fa0 RCX: 00007f86e3c6e0d9 [ 934.483020][T14050] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000007 [ 934.483039][T14050] RBP: 00007f86e26c7090 R08: 0000000000000000 R09: 0000000000000000 [ 934.483058][T14050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.483075][T14050] R13: 00007f86e3ef6038 R14: 00007f86e3ef5fa0 R15: 00007ffe253afbf8 [ 934.483135][T14050] [ 934.584741][T14051] team0: Port device dummy0 added [ 934.639224][T14054] loop8: detected capacity change from 0 to 1764 [ 934.666702][T14054] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 934.736971][T14047] syzkaller0: entered promiscuous mode [ 934.742580][T14047] syzkaller0: entered allmulticast mode [ 934.784827][T14070] usbip-vudc usbip-vudc.0: gadget not bound [ 934.984839][T14079] loop9: detected capacity change from 0 to 1024 [ 935.023007][T14079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.023827][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9546'. [ 935.072990][T14079] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.150143][T14098] usbip-vudc usbip-vudc.0: gadget not bound [ 935.204296][T14079] ip_tables: iptables: counters copy to user failed while replacing table [ 935.217181][T14096] loop3: detected capacity change from 0 to 1024 [ 935.233640][T14096] EXT4-fs: Ignoring removed orlov option [ 935.239442][T14096] EXT4-fs: Ignoring removed orlov option [ 935.353647][T14115] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9555'. [ 935.376791][T14096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 935.500010][T14096] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.9548: deleted inode referenced: 15 [ 935.578283][T14124] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9559'. [ 935.611417][ T7920] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.692499][T14128] syzkaller0: entered promiscuous mode [ 935.707457][T14128] syzkaller0: entered allmulticast mode [ 935.723297][T14130] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9562'. [ 935.787627][T14132] netlink: 'syz.8.9563': attribute type 2 has an invalid length. [ 935.816866][T14132] netlink: 14 bytes leftover after parsing attributes in process `syz.8.9563'. [ 935.888549][T14092] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 936.246670][T14140] syzkaller0: entered promiscuous mode [ 936.271771][T14140] syzkaller0: entered allmulticast mode [ 936.349221][T14155] xt_l2tp: invalid flags combination: 8 [ 936.369784][T14155] loop9: detected capacity change from 0 to 1024 [ 936.377133][T14155] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 936.403626][T14155] netlink: 'syz.9.9570': attribute type 1 has an invalid length. [ 936.589986][T14173] FAULT_INJECTION: forcing a failure. [ 936.589986][T14173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.621895][T14169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.632041][T14173] CPU: 0 UID: 0 PID: 14173 Comm: syz.2.9577 Not tainted syzkaller #0 PREEMPT(lazy) [ 936.632168][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 936.632213][T14173] Call Trace: [ 936.632243][T14173] [ 936.632287][T14173] __dump_stack+0x1d/0x30 [ 936.632370][T14173] dump_stack_lvl+0x95/0xd0 [ 936.632483][T14173] dump_stack+0x15/0x1b [ 936.632623][T14173] should_fail_ex+0x262/0x280 [ 936.632728][T14173] should_fail+0xb/0x20 [ 936.632842][T14173] should_fail_usercopy+0x1a/0x20 [ 936.632949][T14173] _copy_to_user+0x20/0xa0 [ 936.633023][T14173] simple_read_from_buffer+0xb5/0x130 [ 936.633208][T14173] proc_fail_nth_read+0x10e/0x150 [ 936.633333][T14173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 936.633487][T14173] vfs_read+0x18e/0x7c0 [ 936.633555][T14173] ? __rcu_read_unlock+0x4e/0x70 [ 936.633661][T14173] ? __fget_files+0x184/0x1c0 [ 936.633765][T14173] ? mutex_lock+0x57/0x90 [ 936.633878][T14173] ksys_read+0xdc/0x1a0 [ 936.633949][T14173] __x64_sys_read+0x40/0x50 [ 936.634030][T14173] x64_sys_call+0x2135/0x2550 [ 936.634156][T14173] do_syscall_64+0x112/0x360 [ 936.634294][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.634369][T14173] RIP: 0033:0x7fd35024e90e [ 936.634431][T14173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 936.634506][T14173] RSP: 002b:00007fd34ece6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 936.634609][T14173] RAX: ffffffffffffffda RBX: 00007fd34ece76c0 RCX: 00007fd35024e90e [ 936.634660][T14173] RDX: 000000000000000f RSI: 00007fd34ece70a0 RDI: 0000000000000003 [ 936.634704][T14173] RBP: 00007fd34ece7090 R08: 0000000000000000 R09: 0000000000000000 [ 936.634749][T14173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.634792][T14173] R13: 00007fd350516038 R14: 00007fd350515fa0 R15: 00007ffe269ae2e8 [ 936.634892][T14173] [ 936.852447][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 936.852466][ T28] audit: type=1400 audit(2000525083.109:16296): avc: denied { write } for pid=14167 comm="syz.8.9575" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 936.900821][ T28] audit: type=1400 audit(2000525083.155:16297): avc: denied { write } for pid=14167 comm="syz.8.9575" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 936.941339][T14169] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 936.999129][T14175] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.005821][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.023721][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.047947][T14175] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 937.048089][ T28] audit: type=1400 audit(2000525083.293:16298): avc: denied { write } for pid=14174 comm="syz.9.9578" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 937.063151][T14175] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 937.096986][T14175] EXT4-fs (loop9): This should not happen!! Data will be lost [ 937.096986][T14175] [ 937.118533][T14175] EXT4-fs (loop9): Total free blocks count 0 [ 937.124705][T14175] EXT4-fs (loop9): Free/Dirty block details [ 937.143820][T14175] EXT4-fs (loop9): free_blocks=2415919504 [ 937.149712][T14175] EXT4-fs (loop9): dirty_blocks=48 [ 937.160007][T14175] EXT4-fs (loop9): Block reservation details [ 937.172734][T14175] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 937.218457][ T9462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.236678][T14196] set_capacity_and_notify: 2 callbacks suppressed [ 937.236701][T14196] loop2: detected capacity change from 0 to 128 [ 937.392541][T14204] xt_NFQUEUE: number of total queues is 0 [ 937.618356][T14231] loop3: detected capacity change from 0 to 164 [ 937.627934][T14231] iso9660: Unknown parameter '' [ 937.640679][T14231] 9p: Bad value for 'rfdno' [ 937.727398][T14239] loop3: detected capacity change from 0 to 1024 [ 937.734820][T14239] EXT4-fs: inline encryption not supported [ 937.753551][T14239] EXT4-fs (loop3): blocks per group (131072) and clusters per group (32) inconsistent [ 937.764050][ T28] audit: type=1400 audit(2000525083.948:16299): avc: denied { create } for pid=14242 comm="syz.1.9603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 937.929537][T14254] loop3: detected capacity change from 0 to 1024 [ 937.943248][T14254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.960338][T14254] ext4 filesystem being mounted at /257/mysys supports timestamps until 2038-01-19 (0x7fffffff) [ 937.988903][ T7920] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /257/mysys: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 938.010396][ T7920] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /257/mysys/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 938.033121][ T28] audit: type=1400 audit(2000525084.206:16300): avc: denied { write } for pid=7920 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 938.033171][ T7920] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 938.077828][ T7920] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /257/mysys/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 938.104419][ T7920] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 938.124469][ T28] audit: type=1400 audit(2000525084.271:16301): avc: denied { write } for pid=7920 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 938.137823][ T7920] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /257/mysys/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 938.168521][ T7920] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 938.188038][ T28] audit: type=1400 audit(2000525084.326:16302): avc: denied { write } for pid=7920 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 938.212688][ T7920] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /257/mysys/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 938.248916][ T7920] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 938.272251][ T28] audit: type=1400 audit(2000525084.400:16303): avc: denied { write } for pid=7920 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 938.296908][ C1] bridge0: port 3(vlan2) entered learning state [ 938.303277][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 938.310448][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 938.316017][ T7920] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /257/mysys/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 938.349524][ T28] audit: type=1400 audit(2000525084.492:16304): avc: denied { write } for pid=7920 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 938.416764][ T28] audit: type=1400 audit(2000525084.520:16305): avc: denied { write } for pid=7920 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 938.615317][T14279] __nla_validate_parse: 11 callbacks suppressed [ 938.615332][T14279] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9618'. [ 938.678257][T14258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 938.754134][ T9039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.777925][ T9039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.856347][ T9039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.879705][ T9039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.895194][T14293] loop1: detected capacity change from 0 to 512 [ 938.914532][T14293] EXT4-fs (loop1): orphan cleanup on readonly fs [ 938.922140][T14293] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 938.930903][T14293] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.9624: invalid indirect mapped block 1819239214 (level 1) [ 938.949885][ T9039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.960398][ T9039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.970794][T14293] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 938.971875][T14293] EXT4-fs (loop1): Remounting filesystem read-only [ 938.981339][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 938.981356][ C0] EXT4-fs (loop1): initial error at time 2000525085: ext4_free_branches:1023: inode 13 [ 938.981383][ C0] EXT4-fs (loop1): last error at time 2000525085: ext4_free_branches:1023: inode 13 [ 939.017478][T14293] EXT4-fs (loop1): 1 truncate cleaned up [ 939.031293][T14293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 939.048455][ T9039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.070856][ T9039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.086489][ T9524] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.228851][ T9039] vlan2: left allmulticast mode [ 939.235670][ T9039] dummy0: left allmulticast mode [ 939.246892][ T9039] vlan2: left promiscuous mode [ 939.255635][ T9039] dummy0: left promiscuous mode [ 939.264486][ T9039] bridge0: port 3(vlan2) entered disabled state [ 939.289409][ T9039] bridge_slave_1: left allmulticast mode [ 939.296057][ T9039] bridge_slave_1: left promiscuous mode [ 939.302103][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.311296][ T9039] bridge_slave_0: left allmulticast mode [ 939.318466][ T9039] bridge_slave_0: left promiscuous mode [ 939.328486][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.435072][ T9039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.445415][ T9039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.457477][ T9039] bond0 (unregistering): Released all slaves [ 939.475167][T14311] 9p: Bad value for 'rfdno' [ 939.486158][T14311] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 939.515964][ T9039] hsr_slave_0: left promiscuous mode [ 939.534797][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.550732][ T9039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.572398][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.589144][ T9039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.619747][ T9039] batman_adv: batadv0: Interface deactivated: dummy0 [ 939.630064][ T9039] batman_adv: batadv0: Removing interface: dummy0 [ 939.650589][ T9039] veth1_macvtap: left promiscuous mode [ 939.658693][ T9039] veth0_macvtap: left promiscuous mode [ 939.678518][T14317] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9631'. [ 939.680445][ T9039] veth1_vlan: left promiscuous mode [ 939.705829][ T9039] veth0_vlan: left promiscuous mode [ 939.741151][T14319] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9632'. [ 939.841135][T14324] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9635'. [ 939.872425][ T9050] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.918826][ T9039] team0 (unregistering): Port device team_slave_1 removed [ 939.929390][ T9039] team0 (unregistering): Port device team_slave_0 removed [ 939.936696][T14328] loop2: detected capacity change from 0 to 256 [ 939.948032][T14328] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 940.065702][T14335] blktrace: Concurrent blktraces are not allowed on sda1 [ 940.129935][T14343] loop8: detected capacity change from 0 to 256 [ 940.147299][T14343] vfat: Unknown parameter 'uni' [ 940.208809][ T9039] IPVS: stop unused estimator thread 0... [ 940.259566][T14285] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.287626][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.324739][T14285] bridge_slave_0: entered allmulticast mode [ 940.351215][T14285] bridge_slave_0: entered promiscuous mode [ 940.358178][T14357] FAULT_INJECTION: forcing a failure. [ 940.358178][T14357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.392199][T14285] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.431339][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.450075][T14362] loop1: detected capacity change from 0 to 128 [ 940.455148][T14285] bridge_slave_1: entered allmulticast mode [ 940.470184][T14357] CPU: 1 UID: 0 PID: 14357 Comm: syz.2.9641 Not tainted syzkaller #0 PREEMPT(lazy) [ 940.470219][T14357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 940.470236][T14357] Call Trace: [ 940.470245][T14357] [ 940.470320][T14357] __dump_stack+0x1d/0x30 [ 940.470349][T14357] dump_stack_lvl+0x95/0xd0 [ 940.470374][T14357] dump_stack+0x15/0x1b [ 940.470430][T14357] should_fail_ex+0x262/0x280 [ 940.470474][T14357] should_fail+0xb/0x20 [ 940.470512][T14357] should_fail_usercopy+0x1a/0x20 [ 940.470555][T14357] _copy_from_user+0x1c/0xb0 [ 940.470595][T14357] ___sys_recvmsg+0xaa/0x3a0 [ 940.470643][T14357] do_recvmmsg+0x1e5/0x560 [ 940.470695][T14357] ? fput+0x91/0xc0 [ 940.470746][T14357] __x64_sys_recvmmsg+0xe5/0x170 [ 940.470784][T14357] x64_sys_call+0x77f/0x2550 [ 940.470876][T14357] do_syscall_64+0x112/0x360 [ 940.470956][T14357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.470988][T14357] RIP: 0033:0x7fd35028e0d9 [ 940.471018][T14357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.471043][T14357] RSP: 002b:00007fd34ece7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 940.471070][T14357] RAX: ffffffffffffffda RBX: 00007fd350515fa0 RCX: 00007fd35028e0d9 [ 940.471148][T14357] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 940.471166][T14357] RBP: 00007fd34ece7090 R08: 0000000000000000 R09: 0000000000000000 [ 940.471180][T14357] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 940.471192][T14357] R13: 00007fd350516038 R14: 00007fd350515fa0 R15: 00007ffe269ae2e8 [ 940.471247][T14357] [ 940.473316][T14362] syz.1.9642: attempt to access beyond end of device [ 940.473316][T14362] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 940.479290][T14285] bridge_slave_1: entered promiscuous mode [ 940.507868][T14362] syz.1.9642: attempt to access beyond end of device [ 940.507868][T14362] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 940.616549][T14285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.685854][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 940.702124][T14285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.777658][T14285] team0: Port device team_slave_0 added [ 940.813652][T14285] team0: Port device team_slave_1 added [ 940.974798][T14285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.992776][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.050491][T14285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.073131][T14285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.084626][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.138696][T14285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.195856][T14285] hsr_slave_0: entered promiscuous mode [ 941.209378][T14285] hsr_slave_1: entered promiscuous mode [ 941.225026][T14285] debugfs: 'hsr0' already exists in 'hsr' [ 941.237016][T14285] Cannot create hsr debugfs directory [ 941.250915][T14388] loop1: detected capacity change from 0 to 8192 [ 941.305566][T14388] loop1: p1 p2 p3 p4 [ 941.310240][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 941.317123][T14388] loop1: p1 size 524291 extends beyond EOD, truncated [ 941.334399][T14388] loop1: p2 start 1828716544 is beyond EOD, truncated [ 941.349153][T14388] loop1: p3 start 3758132516 is beyond EOD, truncated [ 941.380889][T14388] loop1: p4 start 33554432 is beyond EOD, truncated [ 941.525716][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 941.604165][T14415] syz_tun: entered allmulticast mode [ 941.739164][T14437] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9659'. [ 941.754534][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9657'. [ 941.780260][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 942.022524][T14285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 942.051056][T14285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 942.061669][T14285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 942.073207][T14285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 942.081160][T14285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 942.102822][T14461] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9664'. [ 942.115394][T14285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 942.126371][T14285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 942.143245][T14285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 942.252100][T14285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.279605][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 942.307344][T14285] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.334442][ T1637] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.342030][ T1637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.368418][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.375633][ T9039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.502060][ T28] kauditd_printk_skb: 626 callbacks suppressed [ 942.502076][ T28] audit: type=1400 audit(2000525088.320:16932): avc: denied { write } for pid=14476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.584509][ T28] audit: type=1400 audit(2000525088.403:16933): avc: denied { write } for pid=14493 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.674129][T14501] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9666'. [ 942.696584][T14501] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9666'. [ 942.832097][ T28] audit: type=1400 audit(2000525088.634:16934): avc: denied { write } for pid=14498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.860931][T14285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.922967][ T28] audit: type=1400 audit(2000525088.708:16935): avc: denied { write } for pid=14522 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.956020][T14516] loop2: detected capacity change from 0 to 256 [ 942.992015][T14516] msdos: Unknown parameter 'dÛs-’' [ 943.039504][T14531] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9670'. [ 943.120532][T14536] loop2: detected capacity change from 0 to 512 [ 943.165378][T14285] veth0_vlan: entered promiscuous mode [ 943.195955][T14285] veth1_vlan: entered promiscuous mode [ 943.206101][ T28] audit: type=1400 audit(2000525088.975:16936): avc: denied { getopt } for pid=14534 comm="syz.2.9671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 943.234941][T14285] veth0_macvtap: entered promiscuous mode [ 943.242133][T14285] veth1_macvtap: entered promiscuous mode [ 943.253276][T14285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.262127][T14285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.286537][ T28] audit: type=1400 audit(2000525089.040:16937): avc: denied { write } for pid=14529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 943.338878][ T9041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.352571][ T9041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.367302][ T28] audit: type=1400 audit(2000525089.123:16938): avc: denied { write } for pid=14551 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 943.391660][T14536] loop2: detected capacity change from 0 to 512 [ 943.527153][T14536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.558453][T14536] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.587531][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.616410][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.649060][ T28] audit: type=1400 audit(2000525089.381:16939): avc: denied { write } for pid=14534 comm="syz.2.9671" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 943.777814][ T28] audit: type=1400 audit(2000525089.492:16940): avc: denied { write } for pid=14534 comm="syz.2.9671" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 943.841195][T14568] sch_tbf: peakrate 2174 is lower than or equals to rate 2972 ! [ 943.944018][ T28] audit: type=1400 audit(2000525089.648:16941): avc: denied { write } for pid=14560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.082102][T14577] loop8: detected capacity change from 0 to 8192 [ 944.140248][T14587] pimreg: entered allmulticast mode [ 944.543485][T14607] __nla_validate_parse: 5 callbacks suppressed [ 944.543514][T14607] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9680'. [ 944.682963][T14614] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9681'. [ 944.972852][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.129389][T14635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9685'. [ 945.158106][T14635] FAULT_INJECTION: forcing a failure. [ 945.158106][T14635] name failslab, interval 1, probability 0, space 0, times 0 [ 945.205523][T14635] CPU: 1 UID: 0 PID: 14635 Comm: syz.2.9685 Not tainted syzkaller #0 PREEMPT(lazy) [ 945.205562][T14635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.205578][T14635] Call Trace: [ 945.205588][T14635] [ 945.205600][T14635] __dump_stack+0x1d/0x30 [ 945.205675][T14635] dump_stack_lvl+0x95/0xd0 [ 945.205744][T14635] dump_stack+0x15/0x1b [ 945.205767][T14635] should_fail_ex+0x262/0x280 [ 945.205940][T14635] should_failslab+0x8c/0xb0 [ 945.205966][T14635] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 945.205993][T14635] ? radix_tree_node_alloc+0xa0/0x200 [ 945.206215][T14635] ? radix_tree_node_alloc+0xa0/0x200 [ 945.206329][T14635] ? vprintk+0x1d/0x30 [ 945.206359][T14635] radix_tree_node_alloc+0xa0/0x200 [ 945.206398][T14635] idr_get_free+0x1fc/0x560 [ 945.206447][T14635] idr_alloc_u32+0xe9/0x1a0 [ 945.206480][T14635] tcf_idr_check_alloc+0x1fc/0x2e0 [ 945.206693][T14635] tcf_ife_init+0x30a/0x8a0 [ 945.206796][T14635] ? __pfx_tcf_ife_init+0x10/0x10 [ 945.206907][T14635] tcf_action_init_1+0x395/0x4d0 [ 945.206958][T14635] tcf_action_init+0x29d/0x700 [ 945.207031][T14635] tc_ctl_action+0x29e/0x860 [ 945.207079][T14635] ? __pfx_tc_ctl_action+0x10/0x10 [ 945.207108][T14635] rtnetlink_rcv_msg+0x6a7/0x720 [ 945.207259][T14635] netlink_rcv_skb+0x11e/0x220 [ 945.207342][T14635] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.207423][T14635] rtnetlink_rcv+0x1c/0x30 [ 945.207461][T14635] netlink_unicast+0x5a9/0x680 [ 945.207505][T14635] netlink_sendmsg+0x5be/0x6f0 [ 945.207700][T14635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.207734][T14635] ____sys_sendmsg+0x532/0x580 [ 945.207768][T14635] ___sys_sendmsg+0x195/0x1e0 [ 945.207815][T14635] __x64_sys_sendmsg+0xd4/0x160 [ 945.207909][T14635] x64_sys_call+0x22ab/0x2550 [ 945.207972][T14635] do_syscall_64+0x112/0x360 [ 945.208068][T14635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.208091][T14635] RIP: 0033:0x7fd35028e0d9 [ 945.208108][T14635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.208156][T14635] RSP: 002b:00007fd34ece7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.208180][T14635] RAX: ffffffffffffffda RBX: 00007fd350515fa0 RCX: 00007fd35028e0d9 [ 945.208264][T14635] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 945.208282][T14635] RBP: 00007fd34ece7090 R08: 0000000000000000 R09: 0000000000000000 [ 945.208312][T14635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.208330][T14635] R13: 00007fd350516038 R14: 00007fd350515fa0 R15: 00007ffe269ae2e8 [ 945.208359][T14635] [ 945.502232][T14642] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9687'. [ 945.681221][T14660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9692'. [ 945.691639][T14659] netlink: 'syz.0.9691': attribute type 3 has an invalid length. [ 945.711957][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9691'. [ 945.749265][T14666] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9693'. [ 945.899576][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9690'. [ 946.137854][T14703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9700'. [ 946.408027][T14733] netlink: 1120 bytes leftover after parsing attributes in process `syz.2.9704'. [ 946.759287][T14729] loop8: detected capacity change from 0 to 32768 [ 946.910154][T14729] loop8: p1 p3 < > [ 948.082270][T14823] ip_tables: iptables: counters copy to user failed while replacing table [ 948.237117][T14830] loop2: detected capacity change from 0 to 1024 [ 948.277579][T14830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.345359][T14841] netlink: 'syz.1.9729': attribute type 1 has an invalid length. [ 948.384702][T14827] batman_adv: batadv0: Adding interface: macvtap1 [ 948.400421][T14827] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.458833][T14827] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 948.503450][T14830] batman_adv: batadv0: Adding interface: macvtap2 [ 948.515444][T14830] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.555860][T14830] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 948.604415][T14849] FAULT_INJECTION: forcing a failure. [ 948.604415][T14849] name failslab, interval 1, probability 0, space 0, times 0 [ 948.645482][T14849] CPU: 0 UID: 0 PID: 14849 Comm: syz.1.9732 Not tainted syzkaller #0 PREEMPT(lazy) [ 948.645513][T14849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 948.645530][T14849] Call Trace: [ 948.645538][T14849] [ 948.645547][T14849] __dump_stack+0x1d/0x30 [ 948.645577][T14849] dump_stack_lvl+0x95/0xd0 [ 948.645671][T14849] dump_stack+0x15/0x1b [ 948.645691][T14849] should_fail_ex+0x262/0x280 [ 948.645729][T14849] should_failslab+0x8c/0xb0 [ 948.645762][T14849] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 948.645823][T14849] ? skb_clone+0x151/0x1f0 [ 948.645852][T14849] ? skb_clone+0x151/0x1f0 [ 948.645883][T14849] skb_clone+0x151/0x1f0 [ 948.645913][T14849] __netlink_deliver_tap+0x2be/0x510 [ 948.646036][T14849] netlink_unicast+0x656/0x680 [ 948.646149][T14849] netlink_sendmsg+0x5be/0x6f0 [ 948.646190][T14849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.646229][T14849] ____sys_sendmsg+0x532/0x580 [ 948.646328][T14849] ___sys_sendmsg+0x195/0x1e0 [ 948.646378][T14849] __x64_sys_sendmsg+0xd4/0x160 [ 948.646415][T14849] x64_sys_call+0x22ab/0x2550 [ 948.646449][T14849] do_syscall_64+0x112/0x360 [ 948.646556][T14849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.646637][T14849] RIP: 0033:0x7f86e3c6e0d9 [ 948.646660][T14849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.646685][T14849] RSP: 002b:00007f86e26c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.646736][T14849] RAX: ffffffffffffffda RBX: 00007f86e3ef5fa0 RCX: 00007f86e3c6e0d9 [ 948.646756][T14849] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 948.646773][T14849] RBP: 00007f86e26c7090 R08: 0000000000000000 R09: 0000000000000000 [ 948.646787][T14849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.646799][T14849] R13: 00007f86e3ef6038 R14: 00007f86e3ef5fa0 R15: 00007ffe253afbf8 [ 948.646821][T14849] [ 948.927730][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.107577][T14871] ip_tables: iptables: counters copy to user failed while replacing table [ 949.238345][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 949.238365][ T28] audit: type=1400 audit(2000525094.537:17007): avc: denied { write } for pid=14874 comm="syz.1.9743" name="c.1" dev="configfs" ino=82507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 949.318098][ T28] audit: type=1400 audit(2000525094.537:17008): avc: denied { write } for pid=14874 comm="syz.1.9743" name="c.1" dev="configfs" ino=82507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 949.360165][T14877] loop8: detected capacity change from 0 to 8192 [ 949.391818][T14879] IPv6: NLM_F_CREATE should be specified when creating new route [ 949.444630][T14877] loop8: p3 p4 < > [ 949.471155][T14877] loop8: p3 start 68026368 is beyond EOD, truncated [ 949.477900][T14868] loop2: detected capacity change from 0 to 2048 [ 949.516396][T14889] FAULT_INJECTION: forcing a failure. [ 949.516396][T14889] name failslab, interval 1, probability 0, space 0, times 0 [ 949.555056][T14889] CPU: 1 UID: 0 PID: 14889 Comm: syz.1.9749 Not tainted syzkaller #0 PREEMPT(lazy) [ 949.555090][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.555155][T14889] Call Trace: [ 949.555165][T14889] [ 949.555176][T14889] __dump_stack+0x1d/0x30 [ 949.555209][T14889] dump_stack_lvl+0x95/0xd0 [ 949.555238][T14889] dump_stack+0x15/0x1b [ 949.555325][T14889] should_fail_ex+0x262/0x280 [ 949.555368][T14889] ? alloc_fs_context+0x41/0x570 [ 949.555438][T14889] should_failslab+0x8c/0xb0 [ 949.555474][T14889] __kmalloc_cache_noprof+0x7b/0x3f0 [ 949.555511][T14889] ? alloc_fs_context+0x41/0x570 [ 949.555579][T14889] alloc_fs_context+0x41/0x570 [ 949.555657][T14889] ? fs_context_for_mount+0x11/0x30 [ 949.555702][T14889] fs_context_for_mount+0x22/0x30 [ 949.555740][T14889] do_new_mount+0xe7/0x8d0 [ 949.555772][T14889] ? security_capable+0x7b/0x90 [ 949.555881][T14889] path_mount+0x4ad/0xb90 [ 949.556007][T14889] __se_sys_mount+0x28c/0x2e0 [ 949.556045][T14889] ? fput+0x91/0xc0 [ 949.556090][T14889] __x64_sys_mount+0x67/0x80 [ 949.556132][T14889] x64_sys_call+0xc3b/0x2550 [ 949.556159][T14889] do_syscall_64+0x112/0x360 [ 949.556205][T14889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.556238][T14889] RIP: 0033:0x7f86e3c6e0d9 [ 949.556270][T14889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.556305][T14889] RSP: 002b:00007f86e26c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 949.556365][T14889] RAX: ffffffffffffffda RBX: 00007f86e3ef5fa0 RCX: 00007f86e3c6e0d9 [ 949.556379][T14889] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 949.556398][T14889] RBP: 00007f86e26c7090 R08: 0000200000000100 R09: 0000000000000000 [ 949.556416][T14889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.556433][T14889] R13: 00007f86e3ef6038 R14: 00007f86e3ef5fa0 R15: 00007ffe253afbf8 [ 949.556462][T14889] [ 949.903923][T14900] blktrace: Concurrent blktraces are not allowed on sda1 [ 949.958104][T14903] FAULT_INJECTION: forcing a failure. [ 949.958104][T14903] name failslab, interval 1, probability 0, space 0, times 0 [ 950.006828][T14903] CPU: 1 UID: 0 PID: 14903 Comm: syz.1.9755 Not tainted syzkaller #0 PREEMPT(lazy) [ 950.006914][T14903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.006927][T14903] Call Trace: [ 950.006935][T14903] [ 950.006947][T14903] __dump_stack+0x1d/0x30 [ 950.006982][T14903] dump_stack_lvl+0x95/0xd0 [ 950.007062][T14903] dump_stack+0x15/0x1b [ 950.007090][T14903] should_fail_ex+0x262/0x280 [ 950.007189][T14903] should_failslab+0x8c/0xb0 [ 950.007222][T14903] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 950.007253][T14903] ? skb_clone+0x151/0x1f0 [ 950.007326][T14903] ? skb_clone+0x151/0x1f0 [ 950.007357][T14903] skb_clone+0x151/0x1f0 [ 950.007385][T14903] __netlink_deliver_tap+0x2be/0x510 [ 950.007422][T14903] netlink_dump+0x803/0x870 [ 950.007559][T14903] netlink_recvmsg+0x420/0x550 [ 950.007620][T14903] ? __pfx_netlink_recvmsg+0x10/0x10 [ 950.007670][T14903] sock_recvmsg_nosec+0xc2/0xf0 [ 950.007705][T14903] ____sys_recvmsg+0x26f/0x280 [ 950.007798][T14903] ___sys_recvmsg+0x11f/0x3a0 [ 950.007833][T14903] do_recvmmsg+0x1e5/0x560 [ 950.007862][T14903] ? fput+0x91/0xc0 [ 950.007901][T14903] __x64_sys_recvmmsg+0xe5/0x170 [ 950.007928][T14903] x64_sys_call+0x77f/0x2550 [ 950.007953][T14903] do_syscall_64+0x112/0x360 [ 950.008030][T14903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.008106][T14903] RIP: 0033:0x7f86e3c6e0d9 [ 950.008125][T14903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.008149][T14903] RSP: 002b:00007f86e26c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 950.008176][T14903] RAX: ffffffffffffffda RBX: 00007f86e3ef5fa0 RCX: 00007f86e3c6e0d9 [ 950.008238][T14903] RDX: 0000000000000008 RSI: 0000200000002380 RDI: 0000000000000003 [ 950.008255][T14903] RBP: 00007f86e26c7090 R08: 0000000000000000 R09: 0000000000000000 [ 950.008269][T14903] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000002 [ 950.008282][T14903] R13: 00007f86e3ef6038 R14: 00007f86e3ef5fa0 R15: 00007ffe253afbf8 [ 950.008303][T14903] [ 950.249504][T14915] ip_tables: iptables: counters copy to user failed while replacing table [ 950.420143][T14926] loop2: detected capacity change from 0 to 2048 [ 950.445129][T14930] blktrace: Concurrent blktraces are not allowed on sda1 [ 950.465526][T14933] netlink: 'syz.1.9768': attribute type 29 has an invalid length. [ 950.477747][T14926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.491619][ T28] audit: type=1400 audit(2000525095.699:17009): avc: denied { write } for pid=14924 comm="syz.2.9764" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 950.495106][T14926] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 950.537566][T14926] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 950.550594][T14926] EXT4-fs (loop2): This should not happen!! Data will be lost [ 950.550594][T14926] [ 950.560415][T14926] EXT4-fs (loop2): Total free blocks count 0 [ 950.566847][T14926] EXT4-fs (loop2): Free/Dirty block details [ 950.573650][T14926] EXT4-fs (loop2): free_blocks=2415919504 [ 950.579473][T14926] EXT4-fs (loop2): dirty_blocks=48 [ 950.584669][T14926] EXT4-fs (loop2): Block reservation details [ 950.590685][T14926] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 950.615543][T14933] netlink: 'syz.1.9768': attribute type 29 has an invalid length. [ 950.663203][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.818236][T14956] 9p: Bad value for 'rfdno' [ 950.866788][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.895253][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.926511][T14945] __nla_validate_parse: 7 callbacks suppressed [ 950.926532][T14945] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9772'. [ 950.998091][ T28] audit: type=1400 audit(2000525096.160:17010): avc: denied { read } for pid=14969 comm="syz.8.9782" dev="sockfs" ino=139450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 951.128451][T14984] loop2: detected capacity change from 0 to 512 [ 951.147367][T14984] ext4: Unknown parameter 'subj_role' [ 951.296525][T15009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9790'. [ 951.343932][T15016] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9788'. [ 951.583969][T15040] 9pnet: p9_errstr2errno: server reported unknown error p [ 951.607635][T15052] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9796'. [ 951.873835][T15047] loop2: detected capacity change from 0 to 512 [ 951.966232][T15047] EXT4-fs: Ignoring removed bh option [ 951.989339][T15047] EXT4-fs: Ignoring removed mblk_io_submit option [ 952.093710][T15047] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 952.233230][T15047] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 952.253149][T15047] EXT4-fs (loop2): orphan cleanup on readonly fs [ 952.316804][T15047] Quota error (device loop2): v2_read_file_info: Free block number 117440512 out of range (1, 6). [ 952.350856][T15047] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 952.397916][T15047] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 952.442897][T15047] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.9797: Invalid block bitmap block 0 in block_group 0 [ 952.481379][T15047] loop2: lost filesystem error report for type 5 error -117 [ 952.482554][T15047] EXT4-fs (loop2): Remounting filesystem read-only [ 952.491431][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 952.491597][ C1] EXT4-fs (loop2): last error at time 2000525097: ext4_read_block_bitmap_nowait:487 [ 952.548378][T15047] EXT4-fs (loop2): 1 orphan inode deleted [ 952.588035][T15047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 952.640306][T15047] 9p: Bad value for 'rfdno' [ 952.756321][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.817742][ T3630] lg-g15 0003:046D:0A07.0060: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 952.833176][ T3630] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0060/input/input10 [ 952.882275][T15158] loop2: detected capacity change from 0 to 128 [ 952.891340][ T28] audit: type=1400 audit(2000525097.912:17011): avc: denied { read } for pid=2965 comm="acpid" name="event2" dev="devtmpfs" ino=7483 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 952.919121][T15158] FAT-fs (loop2): bogus number of reserved sectors [ 952.940066][T15158] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 952.972152][ T28] audit: type=1400 audit(2000525097.912:17012): avc: denied { open } for pid=2965 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=7483 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 952.977191][T15158] FAT-fs (loop2): Can't find a valid FAT filesystem [ 953.064297][ T28] audit: type=1400 audit(2000525097.912:17013): avc: denied { ioctl } for pid=2965 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=7483 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 953.111607][T15173] loop8: detected capacity change from 0 to 1024 [ 953.176966][T15173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 953.220433][T15173] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.254952][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9820'. [ 953.337689][ T28] audit: type=1400 audit(2000525098.318:17014): avc: denied { write } for pid=15172 comm="syz.8.9818" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 953.369625][T15172] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: comm syz.8.9818: lblock 0 mapped to illegal pblock 0 (length 1) [ 953.386725][T15172] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.9818: lblock 0 mapped to illegal pblock 0 (length 1) [ 953.451590][T15172] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.9818: lblock 0 mapped to illegal pblock 0 (length 1) [ 953.513403][T15172] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.9818: lblock 0 mapped to illegal pblock 0 (length 1) [ 953.543997][T15173] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.9818: lblock 0 mapped to illegal pblock 0 (length 1) [ 953.614069][T15173] EXT4-fs error (device loop8): ext4_free_blocks:6719: comm syz.8.9818: Freeing blocks not in datazone - block = 0, count = 1 [ 953.656423][T15172] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: comm syz.8.9818: lblock 0 mapped to illegal pblock 0 (length 1) [ 953.708290][T15207] hub 5-0:1.0: USB hub found [ 953.713939][T15207] hub 5-0:1.0: 8 ports detected [ 953.747338][T15172] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.9818: lblock 0 mapped to illegal pblock 0 (length 1) [ 953.808010][T15172] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.9818: lblock 0 mapped to illegal pblock 0 (length 1) [ 953.849952][T15172] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #15: comm syz.8.9818: lblock 0 mapped to illegal pblock 0 (length 1) [ 953.946827][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9832'. [ 954.396497][ T9050] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 954.448658][T15239] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9839'. [ 954.761677][T15251] loop8: detected capacity change from 0 to 512 [ 954.849332][T15266] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.856597][T15266] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.878377][T15251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.890981][T15251] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 954.965803][T15266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.977554][T15266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.060736][T15251] geneve3: entered promiscuous mode [ 955.066011][T15251] geneve3: entered allmulticast mode [ 955.086037][T30257] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.114435][ T9041] netdevsim netdevsim8 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 955.124699][ T37] netdevsim netdevsim8 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 955.150907][ T37] netdevsim netdevsim8 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 955.164774][ T37] netdevsim netdevsim8 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 955.176002][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.189556][ T9050] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.203370][T30257] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.275877][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.291098][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.307114][T30257] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.340909][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.383154][T15290] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9852'. [ 955.433643][T15253] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.453320][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.468285][T15253] bridge_slave_0: entered allmulticast mode [ 955.477224][T15253] bridge_slave_0: entered promiscuous mode [ 955.485216][T15253] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.493413][T15253] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.500747][T15253] bridge_slave_1: entered allmulticast mode [ 955.507711][T15253] bridge_slave_1: entered promiscuous mode [ 955.513097][ T28] audit: type=1400 audit(2000525100.319:17015): avc: denied { ioctl } for pid=15301 comm="syz.2.9855" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 955.551890][T30257] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.593318][T15253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.604149][T15253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.624969][T15309] FAULT_INJECTION: forcing a failure. [ 955.624969][T15309] name failslab, interval 1, probability 0, space 0, times 0 [ 955.637794][T15309] CPU: 1 UID: 0 PID: 15309 Comm: syz.2.9857 Not tainted syzkaller #0 PREEMPT(lazy) [ 955.637828][T15309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.637885][T15309] Call Trace: [ 955.637893][T15309] [ 955.637903][T15309] __dump_stack+0x1d/0x30 [ 955.637987][T15309] dump_stack_lvl+0x95/0xd0 [ 955.638014][T15309] dump_stack+0x15/0x1b [ 955.638109][T15309] should_fail_ex+0x262/0x280 [ 955.638153][T15309] should_failslab+0x8c/0xb0 [ 955.638186][T15309] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 955.638216][T15309] ? skb_clone+0x151/0x1f0 [ 955.638240][T15309] ? skb_clone+0x151/0x1f0 [ 955.638264][T15309] skb_clone+0x151/0x1f0 [ 955.638286][T15309] dev_queue_xmit_nit+0x13e/0x510 [ 955.638335][T15309] dev_hard_start_xmit+0xba/0x380 [ 955.638434][T15309] __dev_queue_xmit+0xbfd/0x1e90 [ 955.638464][T15309] ? __dev_queue_xmit+0x151/0x1e90 [ 955.638494][T15309] ? should_fail_ex+0xdb/0x280 [ 955.638595][T15309] __netlink_deliver_tap+0x3c8/0x510 [ 955.638716][T15309] netlink_unicast+0x656/0x680 [ 955.638747][T15309] netlink_sendmsg+0x5be/0x6f0 [ 955.638784][T15309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.638888][T15309] ____sys_sendmsg+0x532/0x580 [ 955.638968][T15309] ___sys_sendmsg+0x195/0x1e0 [ 955.639017][T15309] __x64_sys_sendmsg+0xd4/0x160 [ 955.639045][T15309] x64_sys_call+0x22ab/0x2550 [ 955.639102][T15309] do_syscall_64+0x112/0x360 [ 955.639145][T15309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.639219][T15309] RIP: 0033:0x7fd35028e0d9 [ 955.639243][T15309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.639269][T15309] RSP: 002b:00007fd34ece7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.639302][T15309] RAX: ffffffffffffffda RBX: 00007fd350515fa0 RCX: 00007fd35028e0d9 [ 955.639341][T15309] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 955.639357][T15309] RBP: 00007fd34ece7090 R08: 0000000000000000 R09: 0000000000000000 [ 955.639371][T15309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.639384][T15309] R13: 00007fd350516038 R14: 00007fd350515fa0 R15: 00007ffe269ae2e8 [ 955.639411][T15309] [ 955.865441][T15253] team0: Port device team_slave_0 added [ 955.884795][T15253] team0: Port device team_slave_1 added [ 955.907060][T15253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.914548][T15253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.944782][T15253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.979806][T15253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.997262][T15253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.024476][T15253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.056203][T15317] loop2: detected capacity change from 0 to 512 [ 956.074679][T30257] bridge_slave_1: left allmulticast mode [ 956.084910][T30257] bridge_slave_1: left promiscuous mode [ 956.091435][T30257] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.099324][T15322] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9863'. [ 956.102162][T15317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.121622][T15317] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.136607][T30257] bridge_slave_0: left allmulticast mode [ 956.144243][T30257] bridge_slave_0: left promiscuous mode [ 956.153964][T30257] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.168142][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.183250][T30257] dvmrp1: left allmulticast mode [ 956.341324][T30257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.355648][T30257] bond_slave_1: left allmulticast mode [ 956.362424][T30257] bond0 (unregistering): Released all slaves [ 956.427350][T15253] hsr_slave_0: entered promiscuous mode [ 956.433392][T15253] hsr_slave_1: entered promiscuous mode [ 956.459310][ T28] audit: type=1326 audit(2000525101.186:17016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.0.9868" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325837e0d9 code=0x7ffc0000 [ 956.490027][T15253] debugfs: 'hsr0' already exists in 'hsr' [ 956.497604][T15253] Cannot create hsr debugfs directory [ 956.512839][ T28] audit: type=1326 audit(2000525101.186:17017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.0.9868" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f325837e0d9 code=0x7ffc0000 [ 956.557673][T30257] hsr_slave_0: left promiscuous mode [ 956.566658][T30257] hsr_slave_1: left promiscuous mode [ 956.580047][T30257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.590679][T30257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.605401][T30257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.619740][T15343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9869'. [ 956.637630][T30257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.662089][ T28] audit: type=1400 audit(2000525101.380:17018): avc: denied { write } for pid=15341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.693763][T30257] veth1_macvtap: left promiscuous mode [ 956.699311][T30257] veth0_macvtap: left promiscuous mode [ 956.704865][T30257] veth1_vlan: left promiscuous mode [ 956.710169][T30257] veth0_vlan: left promiscuous mode [ 956.718418][T15368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9873'. [ 956.743193][ T28] audit: type=1400 audit(2000525101.463:17019): avc: denied { write } for pid=15370 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.796222][T15374] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9874'. [ 956.841711][T30257] team0 (unregistering): Port device team_slave_1 removed [ 956.867373][T30257] team0 (unregistering): Port device team_slave_0 removed [ 956.878935][T15379] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9875'. [ 956.916675][T30257] team0 (unregistering): Port device dummy0 removed [ 956.948369][T15368] vlan2: entered promiscuous mode [ 956.954270][T15368] macvtap0: entered promiscuous mode [ 956.961450][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 957.002063][T15388] FAULT_INJECTION: forcing a failure. [ 957.002063][T15388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.015761][T15388] CPU: 1 UID: 0 PID: 15388 Comm: syz.0.9877 Not tainted syzkaller #0 PREEMPT(lazy) [ 957.015797][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.015865][T15388] Call Trace: [ 957.015874][T15388] [ 957.015885][T15388] __dump_stack+0x1d/0x30 [ 957.015914][T15388] dump_stack_lvl+0x95/0xd0 [ 957.015954][T15388] dump_stack+0x15/0x1b [ 957.015987][T15388] should_fail_ex+0x262/0x280 [ 957.016076][T15388] should_fail+0xb/0x20 [ 957.016104][T15388] should_fail_usercopy+0x1a/0x20 [ 957.016196][T15388] _copy_from_user+0x1c/0xb0 [ 957.016224][T15388] ___sys_sendmsg+0xc1/0x1e0 [ 957.016266][T15388] __x64_sys_sendmsg+0xd4/0x160 [ 957.016312][T15388] x64_sys_call+0x22ab/0x2550 [ 957.016392][T15388] do_syscall_64+0x112/0x360 [ 957.016427][T15388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.016452][T15388] RIP: 0033:0x7f325837e0d9 [ 957.016472][T15388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.016526][T15388] RSP: 002b:00007f3256dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.016571][T15388] RAX: ffffffffffffffda RBX: 00007f3258605fa0 RCX: 00007f325837e0d9 [ 957.016599][T15388] RDX: 0000000000004000 RSI: 0000200000006040 RDI: 0000000000000004 [ 957.016616][T15388] RBP: 00007f3256dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 957.016634][T15388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.016726][T15388] R13: 00007f3258606038 R14: 00007f3258605fa0 R15: 00007fff3af87b58 [ 957.016749][T15388] [ 957.441959][T15413] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9884'. [ 957.477552][ T28] audit: type=1400 audit(2000525102.127:17020): avc: denied { write } for pid=15396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.503940][ T28] audit: type=1400 audit(2000525102.164:17021): avc: denied { write } for pid=15419 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.510438][T15416] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 957.567613][T15422] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9885'. [ 957.613115][T15426] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9887'. [ 957.634577][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 957.747364][T15436] FAULT_INJECTION: forcing a failure. [ 957.747364][T15436] name failslab, interval 1, probability 0, space 0, times 0 [ 957.763748][T15436] CPU: 1 UID: 0 PID: 15436 Comm: syz.2.9888 Not tainted syzkaller #0 PREEMPT(lazy) [ 957.763836][T15436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.763920][T15436] Call Trace: [ 957.763928][T15436] [ 957.763937][T15436] __dump_stack+0x1d/0x30 [ 957.763962][T15436] dump_stack_lvl+0x95/0xd0 [ 957.763989][T15436] dump_stack+0x15/0x1b [ 957.764010][T15436] should_fail_ex+0x262/0x280 [ 957.764157][T15436] should_failslab+0x8c/0xb0 [ 957.764205][T15436] __kmalloc_noprof+0xd4/0x4c0 [ 957.764238][T15436] ? ethnl_default_set_doit+0xac/0x940 [ 957.764279][T15436] ? ethnl_default_set_doit+0xac/0x940 [ 957.764345][T15436] ethnl_default_set_doit+0xac/0x940 [ 957.764367][T15436] ? genl_family_rcv_msg_attrs_parse+0x154/0x1b0 [ 957.764410][T15436] ? genl_family_rcv_msg_attrs_parse+0x1ad/0x1b0 [ 957.764483][T15436] genl_family_rcv_msg_doit+0x187/0x1f0 [ 957.764523][T15436] genl_rcv_msg+0x42f/0x470 [ 957.764634][T15436] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 957.764689][T15436] netlink_rcv_skb+0x11e/0x220 [ 957.764724][T15436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 957.764789][T15436] genl_rcv+0x28/0x40 [ 957.764817][T15436] netlink_unicast+0x5a9/0x680 [ 957.764854][T15436] netlink_sendmsg+0x5be/0x6f0 [ 957.764955][T15436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.764997][T15436] ____sys_sendmsg+0x532/0x580 [ 957.765034][T15436] ___sys_sendmsg+0x195/0x1e0 [ 957.765082][T15436] __x64_sys_sendmsg+0xd4/0x160 [ 957.765226][T15436] x64_sys_call+0x22ab/0x2550 [ 957.765252][T15436] do_syscall_64+0x112/0x360 [ 957.765287][T15436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.765316][T15436] RIP: 0033:0x7fd35028e0d9 [ 957.765405][T15436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.765477][T15436] RSP: 002b:00007fd34ece7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.765504][T15436] RAX: ffffffffffffffda RBX: 00007fd350515fa0 RCX: 00007fd35028e0d9 [ 957.765523][T15436] RDX: 0000000000040090 RSI: 0000200000000540 RDI: 0000000000000004 [ 957.765541][T15436] RBP: 00007fd34ece7090 R08: 0000000000000000 R09: 0000000000000000 [ 957.765555][T15436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.765632][T15436] R13: 00007fd350516038 R14: 00007fd350515fa0 R15: 00007ffe269ae2e8 [ 957.765654][T15436] [ 958.119464][ T28] audit: type=1400 audit(2000525102.727:17022): avc: denied { write } for pid=15437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.182220][T15459] lo: entered allmulticast mode [ 958.197977][ T28] audit: type=1400 audit(2000525102.800:17023): avc: denied { write } for pid=15460 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.268439][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 958.349513][T15253] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 958.361835][T15474] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9895'. [ 958.373213][T15253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 958.389235][T15253] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 958.398352][T15475] loop2: detected capacity change from 0 to 1024 [ 958.412308][T15253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 958.432856][T15253] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 958.445550][T15475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.464315][T15253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 958.487130][T15253] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 958.496333][ T28] audit: type=1400 audit(2000525103.050:17024): avc: denied { write } for pid=15467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.501494][T15253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 958.592451][T15493] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9896'. [ 958.635963][T15253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.667500][T15253] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.671993][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.672027][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.676791][T30257] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.676828][T30257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.730135][T15253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 958.730165][T15253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.833425][T15511] loop8: detected capacity change from 0 to 128 [ 959.014613][T15527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 959.068201][T15253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.089599][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.182416][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 959.336805][T15253] veth0_vlan: entered promiscuous mode [ 959.352030][T15253] veth1_vlan: entered promiscuous mode [ 959.357954][T15573] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9905'. [ 959.384337][T15253] veth0_macvtap: entered promiscuous mode [ 959.393261][T15253] veth1_macvtap: entered promiscuous mode [ 959.416791][T15253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.442029][T15253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.506549][T30257] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.528751][T30257] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.569678][ T9041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.588539][ T9041] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.875798][T15677] FAULT_INJECTION: forcing a failure. [ 960.875798][T15677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.930515][T15682] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 960.942654][T15677] CPU: 1 UID: 0 PID: 15677 Comm: syz.8.9915 Not tainted syzkaller #0 PREEMPT(lazy) [ 960.942761][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 960.942822][T15677] Call Trace: [ 960.942829][T15677] [ 960.942913][T15677] __dump_stack+0x1d/0x30 [ 960.942947][T15677] dump_stack_lvl+0x95/0xd0 [ 960.942983][T15677] dump_stack+0x15/0x1b [ 960.943008][T15677] should_fail_ex+0x262/0x280 [ 960.943074][T15677] should_fail+0xb/0x20 [ 960.943107][T15677] should_fail_usercopy+0x1a/0x20 [ 960.943213][T15677] _copy_from_user+0x1c/0xb0 [ 960.943234][T15677] memdup_user+0x5e/0xd0 [ 960.943255][T15677] strndup_user+0x68/0xb0 [ 960.943280][T15677] __se_sys_mount+0x4d/0x2e0 [ 960.943387][T15677] ? fput+0x91/0xc0 [ 960.943418][T15677] ? ksys_write+0x194/0x1a0 [ 960.943449][T15677] __x64_sys_mount+0x67/0x80 [ 960.943548][T15677] x64_sys_call+0xc3b/0x2550 [ 960.943582][T15677] do_syscall_64+0x112/0x360 [ 960.943622][T15677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.943695][T15677] RIP: 0033:0x7f5d8b08e0d9 [ 960.943719][T15677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.943744][T15677] RSP: 002b:00007f5d89ae7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.943767][T15677] RAX: ffffffffffffffda RBX: 00007f5d8b315fa0 RCX: 00007f5d8b08e0d9 [ 960.943852][T15677] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 960.943867][T15677] RBP: 00007f5d89ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 960.943880][T15677] R10: 0000000001000080 R11: 0000000000000246 R12: 0000000000000001 [ 960.943897][T15677] R13: 00007f5d8b316038 R14: 00007f5d8b315fa0 R15: 00007ffefea41bf8 [ 960.943921][T15677] [ 961.162544][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 961.162562][ T28] audit: type=1400 audit(2000525105.531:17040): avc: denied { write } for pid=15672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.265211][ T28] audit: type=1400 audit(2000525105.632:17041): avc: denied { write } for pid=15699 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.441629][T15701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 961.450445][T15686] loop5: detected capacity change from 0 to 512 [ 961.457957][T15701] IPv6: NLM_F_CREATE should be set when creating new route [ 961.544008][ T28] audit: type=1400 audit(2000525105.853:17042): avc: denied { write } for pid=15705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.600462][ T28] audit: type=1400 audit(2000525105.918:17043): avc: denied { write } for pid=15723 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.699016][T15735] /dev/md0: Can't lookup blockdev [ 961.714270][ T28] audit: type=1400 audit(2000525106.038:17044): avc: denied { setopt } for pid=15670 comm="syz.1.9913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 961.785520][T15743] xt_hashlimit: size too large, truncated to 1048576 [ 961.793710][ T28] audit: type=1400 audit(2000525106.121:17045): avc: denied { write } for pid=15725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.876223][ T28] audit: type=1400 audit(2000525106.195:17046): avc: denied { write } for pid=15752 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.038919][ T28] audit: type=1400 audit(2000525106.342:17047): avc: denied { write } for pid=15757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.079212][ T28] audit: type=1400 audit(2000525106.379:17048): avc: denied { write } for pid=15771 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.144876][T15776] blktrace: Concurrent blktraces are not allowed on sda1 [ 962.190943][T15781] blktrace: Concurrent blktraces are not allowed on sda1 [ 962.230487][T15786] loop8: detected capacity change from 0 to 2048 [ 962.254409][T15785] __nla_validate_parse: 10 callbacks suppressed [ 962.254495][T15785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9936'. [ 962.271785][T15785] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.279096][T15785] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.294133][T15786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.314021][T15799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=15799 comm=syz.2.9936 [ 962.346418][ T9050] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.348658][T15785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9936'. [ 962.393131][ T28] audit: type=1400 audit(2000525106.674:17049): avc: denied { write } for pid=15779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.458262][T15806] loop5: detected capacity change from 0 to 512 [ 962.546370][T15806] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -ENXIO [ 962.580770][T15822] blktrace: Concurrent blktraces are not allowed on sda1 [ 962.627128][T15828] xt_hashlimit: size too large, truncated to 1048576 [ 962.893517][T15854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 963.041010][T15878] blktrace: Concurrent blktraces are not allowed on sda1 [ 963.138930][T15889] loop2: detected capacity change from 0 to 1024 [ 963.189742][T15889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.197547][T15887] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9961'. [ 963.429354][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.531899][T15903] loop5: detected capacity change from 0 to 164 [ 963.553870][T15903] iso9660: Unknown parameter 'ÿÿ' [ 963.577067][T15935] blktrace: Concurrent blktraces are not allowed on sda1 [ 963.741797][T15957] loop5: detected capacity change from 0 to 512 [ 963.842274][T15967] hsr_slave_0: left promiscuous mode [ 963.867779][T15967] hsr_slave_1: left promiscuous mode [ 963.977214][T15969] loop8: detected capacity change from 0 to 1024 [ 963.996988][T15969] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.010990][T15969] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.101292][T15987] ip6_vti0: entered promiscuous mode [ 964.106738][T15987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9979'. [ 964.224463][T15991] device-mapper: ioctl: Invalid data size in the ioctl structure: 1969382756 [ 964.338339][T16015] netlink: 'syz.5.9982': attribute type 1 has an invalid length. [ 964.388206][T16003] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 964.420110][T16030] blktrace: Concurrent blktraces are not allowed on sda1 [ 964.527015][T16037] netlink: 'syz.1.9986': attribute type 1 has an invalid length. [ 964.602992][T16045] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 964.643117][T16045] 9p: Bad value for 'rfdno' [ 964.822900][T16055] loop5: detected capacity change from 0 to 1024 [ 964.832833][T16055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.927670][T15253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.953781][T16060] blktrace: Concurrent blktraces are not allowed on sda1 [ 965.038519][T16065] loop5: detected capacity change from 0 to 512 [ 965.046020][T16065] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 965.117548][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10000'. [ 965.130222][T16073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10001'. [ 965.548744][T16087] blktrace: Concurrent blktraces are not allowed on sda1 [ 965.578148][T16089] loop2: detected capacity change from 0 to 2048 [ 965.628622][T16089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.656864][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.790212][T16107] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10013'. [ 965.830207][T16115] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 965.852635][T16115] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 965.875441][T16115] 9p: Bad value for 'rfdno' [ 966.137367][T16125] pim6reg: entered allmulticast mode [ 966.143242][T16135] netlink: 'syz.8.10024': attribute type 3 has an invalid length. [ 966.186159][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10024'. [ 966.199358][T16125] pim6reg: left allmulticast mode [ 966.225519][T16130] pim6reg: entered allmulticast mode [ 966.299346][T16145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10027'. [ 966.324503][T16125] loop5: detected capacity change from 0 to 8192 [ 966.335064][T16147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10028'. [ 966.467380][T16151] FAULT_INJECTION: forcing a failure. [ 966.467380][T16151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.484202][T16151] CPU: 0 UID: 0 PID: 16151 Comm: syz.8.10026 Not tainted syzkaller #0 PREEMPT(lazy) [ 966.484301][T16151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 966.484314][T16151] Call Trace: [ 966.484364][T16151] [ 966.484375][T16151] __dump_stack+0x1d/0x30 [ 966.484408][T16151] dump_stack_lvl+0x95/0xd0 [ 966.484437][T16151] dump_stack+0x15/0x1b [ 966.484471][T16151] should_fail_ex+0x262/0x280 [ 966.484503][T16151] should_fail+0xb/0x20 [ 966.484534][T16151] should_fail_usercopy+0x1a/0x20 [ 966.484572][T16151] _copy_from_user+0x1c/0xb0 [ 966.484606][T16151] do_ipv6_setsockopt+0x127/0x2040 [ 966.484730][T16151] ? kstrtoull+0x111/0x140 [ 966.484824][T16151] ? __rcu_read_unlock+0x4e/0x70 [ 966.484859][T16151] ? avc_has_perm_noaudit+0xa3/0x120 [ 966.484983][T16151] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 966.485024][T16151] ipv6_setsockopt+0x59/0x130 [ 966.485105][T16151] rawv6_setsockopt+0x1cc/0x3f0 [ 966.485144][T16151] sock_common_setsockopt+0x69/0x80 [ 966.485195][T16151] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 966.485294][T16151] __sys_setsockopt+0x184/0x200 [ 966.485363][T16151] __x64_sys_setsockopt+0x64/0x80 [ 966.485394][T16151] x64_sys_call+0x248f/0x2550 [ 966.485427][T16151] do_syscall_64+0x112/0x360 [ 966.485477][T16151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.485507][T16151] RIP: 0033:0x7f5d8b08e0d9 [ 966.485529][T16151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.485556][T16151] RSP: 002b:00007f5d89aa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 966.485583][T16151] RAX: ffffffffffffffda RBX: 00007f5d8b316180 RCX: 00007f5d8b08e0d9 [ 966.485602][T16151] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 000000000000000a [ 966.485654][T16151] RBP: 00007f5d89aa5090 R08: 000000000000000c R09: 0000000000000000 [ 966.485672][T16151] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.485689][T16151] R13: 00007f5d8b316218 R14: 00007f5d8b316180 R15: 00007ffefea41bf8 [ 966.485825][T16151] [ 966.785951][T16157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.795660][T16157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.175609][T16162] loop2: p1 p2 p3 p4[DM] [ 967.180133][T16162] loop2: p1 size 835329 extends beyond EOD, truncated [ 967.187891][T16162] loop2: p2 size 327680 extends beyond EOD, truncated [ 967.195584][T16162] loop2: p3 start 1052673 is beyond EOD, truncated [ 967.204998][T16162] loop2: p4 size 262144 extends beyond EOD, truncated [ 967.285578][T16178] FAULT_INJECTION: forcing a failure. [ 967.285578][T16178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.312402][T16178] CPU: 1 UID: 0 PID: 16178 Comm: syz.0.10039 Not tainted syzkaller #0 PREEMPT(lazy) [ 967.312439][T16178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 967.312457][T16178] Call Trace: [ 967.312468][T16178] [ 967.312479][T16178] __dump_stack+0x1d/0x30 [ 967.312564][T16178] dump_stack_lvl+0x95/0xd0 [ 967.312586][T16178] dump_stack+0x15/0x1b [ 967.312606][T16178] should_fail_ex+0x262/0x280 [ 967.312658][T16178] should_fail+0xb/0x20 [ 967.312838][T16178] should_fail_usercopy+0x1a/0x20 [ 967.312884][T16178] _copy_from_user+0x1c/0xb0 [ 967.312910][T16178] __se_sys_add_key+0x218/0x360 [ 967.312943][T16178] __x64_sys_add_key+0x67/0x80 [ 967.313003][T16178] x64_sys_call+0x1fa9/0x2550 [ 967.313038][T16178] do_syscall_64+0x112/0x360 [ 967.313078][T16178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.313174][T16178] RIP: 0033:0x7f325837e0d9 [ 967.313191][T16178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.313215][T16178] RSP: 002b:00007f3256dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 967.313240][T16178] RAX: ffffffffffffffda RBX: 00007f3258605fa0 RCX: 00007f325837e0d9 [ 967.313280][T16178] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 967.313293][T16178] RBP: 00007f3256dd7090 R08: ffffffffffffffff R09: 0000000000000000 [ 967.313308][T16178] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 967.313378][T16178] R13: 00007f3258606038 R14: 00007f3258605fa0 R15: 00007fff3af87b58 [ 967.313407][T16178] [ 967.504844][T16183] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 967.536411][T16184] FAULT_INJECTION: forcing a failure. [ 967.536411][T16184] name failslab, interval 1, probability 0, space 0, times 0 [ 967.563143][T16183] 9p: Bad value for 'rfdno' [ 967.592701][T16184] CPU: 1 UID: 0 PID: 16184 Comm: syz.5.10041 Not tainted syzkaller #0 PREEMPT(lazy) [ 967.592728][T16184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 967.592741][T16184] Call Trace: [ 967.592754][T16184] [ 967.592765][T16184] __dump_stack+0x1d/0x30 [ 967.592793][T16184] dump_stack_lvl+0x95/0xd0 [ 967.592816][T16184] dump_stack+0x15/0x1b [ 967.592849][T16184] should_fail_ex+0x262/0x280 [ 967.592893][T16184] ? mctp_newroute+0x76/0x5a0 [ 967.593013][T16184] should_failslab+0x8c/0xb0 [ 967.593046][T16184] __kmalloc_cache_noprof+0x7b/0x3f0 [ 967.593082][T16184] ? mctp_newroute+0x76/0x5a0 [ 967.593122][T16184] mctp_newroute+0x76/0x5a0 [ 967.593208][T16184] ? _raw_spin_unlock+0x9/0x30 [ 967.593296][T16184] ? finish_task_switch+0x121/0x340 [ 967.593328][T16184] ? __schedule+0x79b/0xd20 [ 967.593350][T16184] ? __rcu_read_unlock+0x4e/0x70 [ 967.593464][T16184] ? _raw_spin_lock+0x53/0xa0 [ 967.593499][T16184] ? __mutex_lock+0xaa2/0xf30 [ 967.593544][T16184] ? __mutex_lock_slowpath+0xa/0x10 [ 967.593614][T16184] ? __pfx_mctp_newroute+0x10/0x10 [ 967.593660][T16184] rtnetlink_rcv_msg+0x6a7/0x720 [ 967.593772][T16184] netlink_rcv_skb+0x11e/0x220 [ 967.593814][T16184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 967.593941][T16184] rtnetlink_rcv+0x1c/0x30 [ 967.593972][T16184] netlink_unicast+0x5a9/0x680 [ 967.594008][T16184] netlink_sendmsg+0x5be/0x6f0 [ 967.594079][T16184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.594124][T16184] ____sys_sendmsg+0x532/0x580 [ 967.594161][T16184] ___sys_sendmsg+0x195/0x1e0 [ 967.594233][T16184] __x64_sys_sendmsg+0xd4/0x160 [ 967.594266][T16184] x64_sys_call+0x22ab/0x2550 [ 967.594307][T16184] do_syscall_64+0x112/0x360 [ 967.594351][T16184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.594374][T16184] RIP: 0033:0x7fadc901e0d9 [ 967.594395][T16184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.594421][T16184] RSP: 002b:00007fadc7a77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.594447][T16184] RAX: ffffffffffffffda RBX: 00007fadc92a5fa0 RCX: 00007fadc901e0d9 [ 967.594581][T16184] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 967.594600][T16184] RBP: 00007fadc7a77090 R08: 0000000000000000 R09: 0000000000000000 [ 967.594617][T16184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.594638][T16184] R13: 00007fadc92a6038 R14: 00007fadc92a5fa0 R15: 00007ffed0d41258 [ 967.594660][T16184] [ 967.626753][ T3965] udevd[3965]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 967.739822][ T3901] udevd[3901]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 967.750221][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 967.854171][T16193] tipc: Invalid UDP bearer configuration [ 967.942551][T16193] tipc: Enabling of bearer rejected, failed to enable media [ 968.045156][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 968.045173][ T28] audit: type=1400 audit(2000525111.885:17179): avc: denied { name_bind } for pid=16207 comm="syz.1.10051" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 968.175000][T16215] FAULT_INJECTION: forcing a failure. [ 968.175000][T16215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.206338][T16215] CPU: 0 UID: 0 PID: 16215 Comm: syz.1.10053 Not tainted syzkaller #0 PREEMPT(lazy) [ 968.206440][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 968.206458][T16215] Call Trace: [ 968.206518][T16215] [ 968.206530][T16215] __dump_stack+0x1d/0x30 [ 968.206568][T16215] dump_stack_lvl+0x95/0xd0 [ 968.206596][T16215] dump_stack+0x15/0x1b [ 968.206621][T16215] should_fail_ex+0x262/0x280 [ 968.206713][T16215] should_fail+0xb/0x20 [ 968.206743][T16215] should_fail_usercopy+0x1a/0x20 [ 968.206850][T16215] _copy_to_user+0x20/0xa0 [ 968.206877][T16215] inet_gifconf+0x16a/0x270 [ 968.206909][T16215] dev_ifconf+0x182/0x210 [ 968.206944][T16215] sock_ioctl+0xe3/0x610 [ 968.207040][T16215] ? mutex_lock+0x57/0x90 [ 968.207126][T16215] ? __pfx_sock_ioctl+0x10/0x10 [ 968.207160][T16215] __se_sys_ioctl+0xce/0x140 [ 968.207262][T16215] __x64_sys_ioctl+0x43/0x50 [ 968.207292][T16215] x64_sys_call+0x239d/0x2550 [ 968.207322][T16215] do_syscall_64+0x112/0x360 [ 968.207421][T16215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.207470][T16215] RIP: 0033:0x7f86e3c6e0d9 [ 968.207487][T16215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.207506][T16215] RSP: 002b:00007f86e26c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.207528][T16215] RAX: ffffffffffffffda RBX: 00007f86e3ef5fa0 RCX: 00007f86e3c6e0d9 [ 968.207547][T16215] RDX: 0000200000002c00 RSI: 0000000000008912 RDI: 0000000000000003 [ 968.207568][T16215] RBP: 00007f86e26c7090 R08: 0000000000000000 R09: 0000000000000000 [ 968.207586][T16215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.207603][T16215] R13: 00007f86e3ef6038 R14: 00007f86e3ef5fa0 R15: 00007ffe253afbf8 [ 968.207632][T16215] [ 968.414633][T16218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=16218 comm=syz.5.10054 [ 968.557010][T16227] netlink: 'syz.0.10058': attribute type 1 has an invalid length. [ 968.685685][T16249] __nla_validate_parse: 2 callbacks suppressed [ 968.685705][T16249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10065'. [ 968.765846][T16251] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 968.803400][T16251] 9p: Bad value for 'rfdno' [ 968.813386][T16255] set_capacity_and_notify: 1 callbacks suppressed [ 968.813405][T16255] loop8: detected capacity change from 0 to 512 [ 968.842543][T16260] netlink: 'syz.0.10070': attribute type 3 has an invalid length. [ 968.867580][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10070'. [ 968.977754][T16266] tipc: Started in network mode [ 968.984708][T16266] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 968.992726][T16266] tipc: Enabled bearer , priority 0 [ 969.071584][T16281] FAULT_INJECTION: forcing a failure. [ 969.071584][T16281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.085510][T16281] CPU: 1 UID: 0 PID: 16281 Comm: syz.1.10079 Not tainted syzkaller #0 PREEMPT(lazy) [ 969.085545][T16281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 969.085593][T16281] Call Trace: [ 969.085602][T16281] [ 969.085614][T16281] __dump_stack+0x1d/0x30 [ 969.085707][T16281] dump_stack_lvl+0x95/0xd0 [ 969.085736][T16281] dump_stack+0x15/0x1b [ 969.085811][T16281] should_fail_ex+0x262/0x280 [ 969.085854][T16281] should_fail+0xb/0x20 [ 969.085890][T16281] should_fail_usercopy+0x1a/0x20 [ 969.086001][T16281] _copy_from_user+0x1c/0xb0 [ 969.086027][T16281] __sys_sendto+0x1b5/0x470 [ 969.086095][T16281] __x64_sys_sendto+0x76/0x90 [ 969.086120][T16281] x64_sys_call+0x200c/0x2550 [ 969.086152][T16281] do_syscall_64+0x112/0x360 [ 969.086212][T16281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.086312][T16281] RIP: 0033:0x7f86e3c6e0d9 [ 969.086332][T16281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.086355][T16281] RSP: 002b:00007f86e26c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 969.086380][T16281] RAX: ffffffffffffffda RBX: 00007f86e3ef5fa0 RCX: 00007f86e3c6e0d9 [ 969.086443][T16281] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 969.086460][T16281] RBP: 00007f86e26c7090 R08: 000020000005ffe4 R09: 000000000000001c [ 969.086513][T16281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.086529][T16281] R13: 00007f86e3ef6038 R14: 00007f86e3ef5fa0 R15: 00007ffe253afbf8 [ 969.086557][T16281] [ 969.293606][T16288] netlink: 'syz.1.10082': attribute type 3 has an invalid length. [ 969.301613][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10082'. [ 969.329044][ T28] audit: type=1326 audit(2000525113.075:17180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.0.10083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325837e0d9 code=0x7ffc0000 [ 969.356001][ T28] audit: type=1326 audit(2000525113.075:17181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.0.10083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325837e0d9 code=0x7ffc0000 [ 969.384747][T16295] FAULT_INJECTION: forcing a failure. [ 969.384747][T16295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.384862][T16295] CPU: 1 UID: 0 PID: 16295 Comm: syz.8.10084 Not tainted syzkaller #0 PREEMPT(lazy) [ 969.384964][T16295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 969.384978][T16295] Call Trace: [ 969.384998][T16295] [ 969.385008][T16295] __dump_stack+0x1d/0x30 [ 969.385049][T16295] dump_stack_lvl+0x95/0xd0 [ 969.385079][T16295] dump_stack+0x15/0x1b [ 969.385101][T16295] should_fail_ex+0x262/0x280 [ 969.385204][T16295] should_fail+0xb/0x20 [ 969.385233][T16295] should_fail_usercopy+0x1a/0x20 [ 969.385266][T16295] _copy_from_user+0x1c/0xb0 [ 969.385332][T16295] generic_map_update_batch+0x4f1/0x680 [ 969.385455][T16295] ? __pfx_generic_map_update_batch+0x10/0x10 [ 969.385488][T16295] bpf_map_do_batch+0x25b/0x380 [ 969.385557][T16295] __sys_bpf+0xa8e/0xc30 [ 969.385582][T16295] ? vfs_write+0x800/0x9a0 [ 969.385624][T16295] __x64_sys_bpf+0x69/0x80 [ 969.385693][T16295] x64_sys_call+0xf26/0x2550 [ 969.385724][T16295] do_syscall_64+0x112/0x360 [ 969.385772][T16295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.385799][T16295] RIP: 0033:0x7f5d8b08e0d9 [ 969.385867][T16295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.385886][T16295] RSP: 002b:00007f5d89ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 969.385906][T16295] RAX: ffffffffffffffda RBX: 00007f5d8b316090 RCX: 00007f5d8b08e0d9 [ 969.385962][T16295] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 969.385980][T16295] RBP: 00007f5d89ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 969.386027][T16295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 969.386044][T16295] R13: 00007f5d8b316128 R14: 00007f5d8b316090 R15: 00007ffefea41bf8 [ 969.386070][T16295] [ 969.386127][ T28] audit: type=1326 audit(2000525113.093:17182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.0.10083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325837e0d9 code=0x7ffc0000 [ 969.386176][ T28] audit: type=1326 audit(2000525113.093:17183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.0.10083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325837e0d9 code=0x7ffc0000 [ 969.386242][ T28] audit: type=1326 audit(2000525113.093:17184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.0.10083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f325833e90e code=0x7ffc0000 [ 969.412746][ T28] audit: type=1326 audit(2000525113.093:17185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.0.10083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325837e0d9 code=0x7ffc0000 [ 969.412790][ T28] audit: type=1326 audit(2000525113.093:17186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.0.10083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f325837de42 code=0x7ffc0000 [ 969.412846][ T28] audit: type=1326 audit(2000525113.093:17187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.0.10083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f325837ded7 code=0x7ffc0000 [ 969.412985][ T28] audit: type=1326 audit(2000525113.093:17188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.0.10083" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f325833add1 code=0x7ffc0000 [ 969.427875][T16294] FAULT_INJECTION: forcing a failure. [ 969.427875][T16294] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 969.427933][T16294] CPU: 1 UID: 0 PID: 16294 Comm: syz.1.10085 Not tainted syzkaller #0 PREEMPT(lazy) [ 969.427972][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 969.427990][T16294] Call Trace: [ 969.427998][T16294] [ 969.428007][T16294] __dump_stack+0x1d/0x30 [ 969.428083][T16294] dump_stack_lvl+0x95/0xd0 [ 969.428108][T16294] dump_stack+0x15/0x1b [ 969.428128][T16294] should_fail_ex+0x262/0x280 [ 969.428162][T16294] should_fail_alloc_page+0xf2/0x100 [ 969.428268][T16294] __alloc_frozen_pages_noprof+0x157/0x400 [ 969.428373][T16294] alloc_pages_mpol+0xaf/0x1d0 [ 969.428414][T16294] alloc_pages_noprof+0x94/0x140 [ 969.428446][T16294] pte_alloc_one+0x1c/0xc0 [ 969.428493][T16294] __pte_alloc+0x32/0x2a0 [ 969.428528][T16294] handle_mm_fault+0x2fc8/0x3ae0 [ 969.428577][T16294] ? vma_is_secretmem+0x16/0x30 [ 969.428677][T16294] __get_user_pages+0x12b8/0x1e70 [ 969.428735][T16294] get_user_pages_remote+0x1d5/0x6b0 [ 969.428853][T16294] ? down_read+0x77/0xb0 [ 969.428961][T16294] copy_string_kernel+0x1c6/0x460 [ 969.429002][T16294] do_execveat_common+0x650/0x8a0 [ 969.429041][T16294] __x64_sys_execveat+0x76/0xa0 [ 969.429140][T16294] x64_sys_call+0x21ae/0x2550 [ 969.429166][T16294] do_syscall_64+0x112/0x360 [ 969.429254][T16294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.429323][T16294] RIP: 0033:0x7f86e3c6e0d9 [ 969.429372][T16294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.429394][T16294] RSP: 002b:00007f86e26c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 969.429421][T16294] RAX: ffffffffffffffda RBX: 00007f86e3ef5fa0 RCX: 00007f86e3c6e0d9 [ 969.429441][T16294] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 969.429460][T16294] RBP: 00007f86e26c7090 R08: 0000000000000000 R09: 0000000000000000 [ 969.429543][T16294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 969.429561][T16294] R13: 00007f86e3ef6038 R14: 00007f86e3ef5fa0 R15: 00007ffe253afbf8 [ 969.429591][T16294] [ 970.196165][T31416] tipc: Node number set to 9480874 [ 970.220606][T16318] netlink: 'syz.1.10095': attribute type 3 has an invalid length. [ 970.236219][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10095'. [ 970.286284][T16326] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10099'. [ 970.594960][T16349] IPv6: addrconf: prefix option has invalid lifetime [ 970.675046][T16355] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10106'. [ 970.702852][T16365] netlink: 'syz.8.10108': attribute type 3 has an invalid length. [ 970.711744][T16355] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10106'. [ 970.721484][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10108'. [ 970.731888][T16355] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.739342][T16355] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.800529][T16373] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10112'. [ 970.826706][T16373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10112'. [ 970.892314][T16383] netlink: 'syz.8.10117': attribute type 11 has an invalid length. [ 970.972844][T16386] /dev/loop1: Can't lookup blockdev [ 971.067883][T16392] netlink: 'syz.0.10120': attribute type 1 has an invalid length. [ 971.700922][T16399] loop5: detected capacity change from 0 to 4096 [ 971.715999][T16399] ext2: Unknown parameter 'func' [ 971.957606][T16422] loop8: detected capacity change from 0 to 128 [ 971.964364][T16422] ext4: Unknown parameter 'dont_appraise' [ 971.981351][T16424] loop5: detected capacity change from 0 to 512 [ 972.136783][T16434] loop2: detected capacity change from 0 to 256 [ 972.271276][T16439] loop5: detected capacity change from 0 to 512 [ 972.324981][T16439] EXT4-fs: Ignoring removed nobh option [ 972.666782][T16439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.683965][T16439] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 973.163262][T16472] netlink: 'syz.0.10143': attribute type 3 has an invalid length. [ 973.200606][T16473] loop8: detected capacity change from 0 to 512 [ 973.244254][T16473] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 973.478184][T15253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.692675][T16498] netlink: 'syz.0.10155': attribute type 3 has an invalid length. [ 973.746287][T16500] loop2: detected capacity change from 0 to 512 [ 973.790021][T16500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.815259][T16500] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 973.871796][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.982552][T16517] netlink: 'syz.0.10162': attribute type 2 has an invalid length. [ 974.048317][T16522] FAULT_INJECTION: forcing a failure. [ 974.048317][T16522] name failslab, interval 1, probability 0, space 0, times 0 [ 974.092353][T16522] CPU: 0 UID: 0 PID: 16522 Comm: syz.2.10164 Not tainted syzkaller #0 PREEMPT(lazy) [ 974.092389][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.092406][T16522] Call Trace: [ 974.092416][T16522] [ 974.092428][T16522] __dump_stack+0x1d/0x30 [ 974.092459][T16522] dump_stack_lvl+0x95/0xd0 [ 974.092486][T16522] dump_stack+0x15/0x1b [ 974.092513][T16522] should_fail_ex+0x262/0x280 [ 974.092555][T16522] should_failslab+0x8c/0xb0 [ 974.092589][T16522] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 974.092622][T16522] ? vm_area_dup+0x33/0x2c0 [ 974.092651][T16522] ? vm_area_dup+0x33/0x2c0 [ 974.092685][T16522] vm_area_dup+0x33/0x2c0 [ 974.092715][T16522] __split_vma+0xe3/0x670 [ 974.092749][T16522] vms_gather_munmap_vmas+0x176/0x7f0 [ 974.092795][T16522] ? flush_tlb_mm_range+0x350/0x560 [ 974.092824][T16522] do_vmi_align_munmap+0x1e1/0x400 [ 974.092873][T16522] do_vmi_munmap+0x1da/0x220 [ 974.092907][T16522] move_vma+0x976/0xc40 [ 974.092932][T16522] ? cap_mmap_addr+0xb1/0x250 [ 974.092979][T16522] mremap_to+0x3ef/0x450 [ 974.093007][T16522] ? check_prep_vma+0x463/0x640 [ 974.093032][T16522] __se_sys_mremap+0x89e/0xc40 [ 974.093070][T16522] ? ksys_write+0x194/0x1a0 [ 974.093095][T16522] __x64_sys_mremap+0x67/0x80 [ 974.093118][T16522] x64_sys_call+0x1072/0x2550 [ 974.093149][T16522] do_syscall_64+0x112/0x360 [ 974.093188][T16522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.093211][T16522] RIP: 0033:0x7fd35028e0d9 [ 974.093231][T16522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.093255][T16522] RSP: 002b:00007fd34ece7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 974.093280][T16522] RAX: ffffffffffffffda RBX: 00007fd350515fa0 RCX: 00007fd35028e0d9 [ 974.093295][T16522] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 974.093308][T16522] RBP: 00007fd34ece7090 R08: 0000200000ff5000 R09: 0000000000000000 [ 974.093331][T16522] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 974.093347][T16522] R13: 00007fd350516038 R14: 00007fd350515fa0 R15: 00007ffe269ae2e8 [ 974.093375][T16522] [ 974.311001][T16529] loop8: detected capacity change from 0 to 512 [ 974.311365][T16529] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 974.323251][T16527] netlink: 'syz.0.10167': attribute type 3 has an invalid length. [ 974.323272][T16527] __nla_validate_parse: 19 callbacks suppressed [ 974.323328][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10167'. [ 974.428135][T16535] loop5: detected capacity change from 0 to 512 [ 974.446634][T16535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.446723][T16535] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 974.499931][T15253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.556046][T16540] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10172'. [ 974.580134][T16541] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10171'. [ 974.825821][T16559] loop5: detected capacity change from 0 to 512 [ 974.857098][T16559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.857225][T16559] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 975.064490][T16571] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10184'. [ 975.091637][T15253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.220547][T16582] FAULT_INJECTION: forcing a failure. [ 975.220547][T16582] name failslab, interval 1, probability 0, space 0, times 0 [ 975.275813][T16582] CPU: 0 UID: 0 PID: 16582 Comm: syz.1.10189 Not tainted syzkaller #0 PREEMPT(lazy) [ 975.275861][T16582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 975.275877][T16582] Call Trace: [ 975.275884][T16582] [ 975.275893][T16582] __dump_stack+0x1d/0x30 [ 975.275926][T16582] dump_stack_lvl+0x95/0xd0 [ 975.276039][T16582] dump_stack+0x15/0x1b [ 975.276066][T16582] should_fail_ex+0x262/0x280 [ 975.276103][T16582] ? rtnl_newlink+0x5c/0x1510 [ 975.276139][T16582] should_failslab+0x8c/0xb0 [ 975.276177][T16582] __kmalloc_cache_noprof+0x7b/0x3f0 [ 975.276208][T16582] ? rtnl_newlink+0x5c/0x1510 [ 975.276241][T16582] ? __pfx_rtnl_newlink+0x10/0x10 [ 975.276294][T16582] rtnl_newlink+0x5c/0x1510 [ 975.276340][T16582] ? __rcu_read_unlock+0x4e/0x70 [ 975.276391][T16582] ? avc_has_perm_noaudit+0xa3/0x120 [ 975.276495][T16582] ? cred_has_capability+0x224/0x2a0 [ 975.276610][T16582] ? selinux_capable+0x31/0x40 [ 975.276633][T16582] ? security_capable+0x7b/0x90 [ 975.276729][T16582] ? ns_capable+0x80/0xb0 [ 975.276751][T16582] ? __pfx_rtnl_newlink+0x10/0x10 [ 975.276834][T16582] rtnetlink_rcv_msg+0x64b/0x720 [ 975.276872][T16582] netlink_rcv_skb+0x11e/0x220 [ 975.276907][T16582] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 975.276946][T16582] rtnetlink_rcv+0x1c/0x30 [ 975.277016][T16582] netlink_unicast+0x5a9/0x680 [ 975.277051][T16582] netlink_sendmsg+0x5be/0x6f0 [ 975.277097][T16582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.277185][T16582] ____sys_sendmsg+0x532/0x580 [ 975.277216][T16582] ___sys_sendmsg+0x195/0x1e0 [ 975.277263][T16582] __x64_sys_sendmsg+0xd4/0x160 [ 975.277294][T16582] x64_sys_call+0x22ab/0x2550 [ 975.277373][T16582] do_syscall_64+0x112/0x360 [ 975.277421][T16582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.277449][T16582] RIP: 0033:0x7f86e3c6e0d9 [ 975.277470][T16582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.277513][T16582] RSP: 002b:00007f86e26c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.277540][T16582] RAX: ffffffffffffffda RBX: 00007f86e3ef5fa0 RCX: 00007f86e3c6e0d9 [ 975.277560][T16582] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 975.277577][T16582] RBP: 00007f86e26c7090 R08: 0000000000000000 R09: 0000000000000000 [ 975.277607][T16582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.277684][T16582] R13: 00007f86e3ef6038 R14: 00007f86e3ef5fa0 R15: 00007ffe253afbf8 [ 975.277707][T16582] [ 975.299502][T16587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10190'. [ 975.583245][T16583] loop2: detected capacity change from 0 to 512 [ 975.754678][T16583] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 975.789815][T16583] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 975.813292][T16583] System zones: 0-1, 15-15, 18-18, 34-34 [ 975.828425][T16583] EXT4-fs (loop2): orphan cleanup on readonly fs [ 975.843628][T16583] __quota_error: 537 callbacks suppressed [ 975.843847][T16583] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 975.887956][T16583] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 975.903535][T16583] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 975.970772][T16583] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.10188: bad orphan inode 16 [ 975.982092][T16583] loop2: lost filesystem error report for type 5 error -117 [ 975.983427][T16583] ext4_test_bit(bit=15, block=18) = 1 [ 976.006460][T16583] is_bad_inode(inode)=0 [ 976.012464][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 976.018978][ C1] EXT4-fs (loop2): initial error at time 2000525119: ext4_orphan_get:1429 [ 976.027554][ C1] EXT4-fs (loop2): last error at time 2000525119: ext4_orphan_get:1429 [ 976.044939][T16583] NEXT_ORPHAN(inode)=0 [ 976.063662][T16583] max_ino=32 [ 976.082639][T16583] i_nlink=2 [ 976.105893][T16603] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10196'. [ 976.121076][T16583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 976.129205][ T28] audit: type=1400 audit(2000525119.342:17726): avc: denied { setopt } for pid=16598 comm="syz.8.10193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 976.158106][T16601] loop8: detected capacity change from 0 to 512 [ 976.164993][T16580] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 976.173841][T16601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 976.187458][T16580] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 976.196894][T16608] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10198'. [ 976.215684][T16580] SELinux: ebitmap: truncated map [ 976.229076][T16601] EXT4-fs error (device loop8) in ext4_process_orphan:346: Out of memory [ 976.244137][T16580] SELinux: invalid class [ 976.265758][T16580] SELinux: failed to load policy [ 976.280939][T16601] loop8: lost filesystem error report for type 5 error -12 [ 976.281265][T16601] EXT4-fs (loop8): 2 truncates cleaned up [ 976.288633][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 976.288658][ C1] EXT4-fs (loop8): initial error at time 2000525119: ext4_process_orphan:346 [ 976.288698][ C1] EXT4-fs (loop8): last error at time 2000525119: ext4_process_orphan:346 [ 976.380360][T16601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.409531][T16601] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.916679][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.967773][T16640] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10209'. [ 977.008763][T16647] loop2: detected capacity change from 0 to 512 [ 977.037179][ T28] audit: type=1326 audit(2000525120.182:17727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16646 comm="syz.1.10210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e3c6e0d9 code=0x7ffc0000 [ 977.094466][T16647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.112407][T16647] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 977.122949][ T28] audit: type=1326 audit(2000525120.182:17728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16646 comm="syz.1.10210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e3c6e0d9 code=0x7ffc0000 [ 977.153718][ T28] audit: type=1326 audit(2000525120.182:17729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16646 comm="syz.1.10210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e3c6e0d9 code=0x7ffc0000 [ 977.188102][T16647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.198262][T16647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.211074][ T28] audit: type=1326 audit(2000525120.182:17730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16646 comm="syz.1.10210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e3c6e0d9 code=0x7ffc0000 [ 977.237510][T16647] netlink: 388 bytes leftover after parsing attributes in process `syz.2.10208'. [ 977.246942][ T28] audit: type=1326 audit(2000525120.182:17731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16646 comm="syz.1.10210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f86e3c6e0d9 code=0x7ffc0000 [ 977.273124][ T28] audit: type=1326 audit(2000525120.182:17732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16646 comm="syz.1.10210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e3c6e0d9 code=0x7ffc0000 [ 977.298829][ T28] audit: type=1326 audit(2000525120.182:17733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16646 comm="syz.1.10210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e3c6e0d9 code=0x7ffc0000 [ 977.324723][ T28] audit: type=1326 audit(2000525120.182:17734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16646 comm="syz.1.10210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e3c6e0d9 code=0x7ffc0000 [ 977.517073][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10218'. [ 977.600501][T16687] loop5: detected capacity change from 0 to 2048 [ 977.622531][T16697] sctp: [Deprecated]: syz.8.10221 (pid 16697) Use of int in max_burst socket option deprecated. [ 977.622531][T16697] Use struct sctp_assoc_value instead [ 977.751031][T16687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.804208][T16694] bridge_slave_0: left allmulticast mode [ 977.834962][T16694] bridge_slave_0: left promiscuous mode [ 977.840816][T16694] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.867617][T12389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.878687][T16694] bridge_slave_1: left allmulticast mode [ 977.884380][T16694] bridge_slave_1: left promiscuous mode [ 977.890204][T16694] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.898363][T16710] netlink: 'syz.0.10222': attribute type 1 has an invalid length. [ 977.952096][T16694] bond0: (slave bond_slave_0): Releasing backup interface [ 977.969877][T16694] bond0: (slave bond_slave_1): Releasing backup interface [ 977.989313][T16694] team0: Port device team_slave_0 removed [ 978.002563][T16694] team0: Port device team_slave_1 removed [ 978.016320][T16694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.031206][T16694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.057926][T16687] bond0: no command found in slaves file - use +ifname or -ifname [ 978.087018][T15253] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 978.108747][T15253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.352999][T16729] loop5: detected capacity change from 0 to 512 [ 978.549188][T16736] syzkaller1: entered allmulticast mode [ 978.572118][T16733] blktrace: Concurrent blktraces are not allowed on sda1 [ 978.848567][T16754] 9p: Bad value for 'wfdno' [ 978.857703][T16756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.867242][T16756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.971232][T16792] blktrace: Concurrent blktraces are not allowed on sda1 [ 980.102558][T16807] loop8: detected capacity change from 0 to 512 [ 980.125374][T16807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.144368][T16807] ext4 filesystem being mounted at /328/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.815705][ T2980] ================================================================== [ 980.823876][ T2980] BUG: KCSAN: data-race in dont_mount / path_lookupat [ 980.830699][ T2980] [ 980.833057][ T2980] read-write to 0xffff88811a992180 of 4 bytes by task 3482 on cpu 0: [ 980.841159][ T2980] dont_mount+0x2a/0x40 [ 980.845378][ T2980] vfs_unlink+0x202/0x490 [ 980.849758][ T2980] filename_unlinkat+0x1dc/0x410 [ 980.854740][ T2980] __se_sys_unlink+0x2b/0xe0 [ 980.859372][ T2980] __x64_sys_unlink+0x1f/0x30 [ 980.864114][ T2980] x64_sys_call+0x18ee/0x2550 [ 980.868847][ T2980] do_syscall_64+0x112/0x360 [ 980.873473][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.879405][ T2980] [ 980.881756][ T2980] read to 0xffff88811a992180 of 4 bytes by task 2980 on cpu 1: [ 980.889329][ T2980] path_lookupat+0x19b/0x4c0 [ 980.893970][ T2980] filename_lookup+0x18f/0x390 [ 980.898787][ T2980] do_readlinkat+0x74/0x2f0 [ 980.903344][ T2980] __x64_sys_readlink+0x47/0x60 [ 980.908246][ T2980] x64_sys_call+0x1d41/0x2550 [ 980.912971][ T2980] do_syscall_64+0x112/0x360 [ 980.917607][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.923534][ T2980] [ 980.925917][ T2980] value changed: 0x00300080 -> 0x00004080 [ 980.931660][ T2980] [ 980.934009][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 980.940187][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 980.949078][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 980.959167][ T2980] ================================================================== [ 980.979408][T16867] __nla_validate_parse: 3 callbacks suppressed [ 980.979424][T16867] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10248'. [ 981.077471][ T9050] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.