last executing test programs: 8m16.360223637s ago: executing program 2 (id=491): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xd0002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkEINrYkQomAMHg2Jd+PRxL/Ak16MejLxqndDQgwXkdOa2Z1hf3S3tMu2g+znkwx9b+YN7333zdt9M283gL41lv2TROyMiD8iYqSWbS4wVvtz4/qF2X+vX5hNolJ59++kWu6f6xdmi6LFeTvyzHgakX6exP429S6dO39qZmFh/myen1w+/eHk0rnzL5w8PXNi/sT8memjR48cnnr5pekXV558c/1x3p+1dd8niwf2vvnelbdnj115/5fvBor4W+LokbHVDj5dqfS4unLtakgngyU2hHXJxkDWXUPV8T8SA1HvvJF447NSGwdsqEquw+GLFeAelkTZLQDKUXzQZ/e/xbZ5s4/yXXu1dgOUxX0j32pHBiPNywy13N/20lhEHLt48+tsi415DgEA0OSHbP7zfLv5XxoPNZS7L18bGs3XUnZHxAMRsSciHoyoln04Ih5ZZ/2tiyQr5z/p1a4CW6Ns/vdKvrbVPP8rZn8xOpDndlXjH0qOn1yYP5S/JuMxtDXLT61Sx4+v//5lp2ON879sy+ov5oJ5O64Obm0+Z25meeZOYm507VLEvsF28Se3VgKSiNgbEfu6rOPks98e6HTs9vGvogfrTJVvIp6p9f/FaIm/kKy+Pjm5LRbmD00WV8VKv/52+Z1O9d9R/D2Q9f/2ttf/rfhHk8b12qX113H5zy863tNMdHX913dsyf9+PLO8fHYqYkvyVq3Rjfun6+cW+aJ8Fv/4wfbjf3fUX4n9EZFdxI9GxGMR8Xjed09ExJMRcbAlrsb7659fe+qDTvHfDf0/19L/o81FWvq/ntgSrXvaJwZO/fR98/9YT67t/e9INTWe71nL+99a2tXd1QwAAAD/P2lE7IwknbiVHk4nJmrf4d8T29OFxaXl544vfnRmrvYbgdEYSosnXSMNz0On8tv60Uu1/HSRz48fzp8bfzUwXM1PzC4uzJUdPPS5HSvGf1od/5m/BspuHbDh/F4L+lfD+E/KbAew+Xz+Q/8y/qF/tRn/w2W0A9h87T7/Py2hHcDmaxn/lv2gj7j/h/5l/EP/ahz/vgAAfWNpOG7/I/l2iW3RzVkS90wi0ruiGb1JJF2OgrUmdpYd4PoTZb8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9MZ/AQAA//8L+fEo") socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520002a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x400c001) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000004}) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0xf3, &(0x7f0000003b00)=""/243, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 8m16.027929442s ago: executing program 2 (id=494): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000400)}], 0x1}, 0x0) recvmsg$kcm(r1, 0x0, 0x22) socket$inet(0x2, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) readv(r2, &(0x7f0000001400)=[{&(0x7f0000000140)=""/249, 0xf9}], 0x1) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x102114, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xe000202b}) 8m15.359168961s ago: executing program 2 (id=499): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) close(0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fremovexattr(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="757365722e6d6d5f706167655f616c6c6f630072693e1e06d32d3e9b0df6854a4df97788431972d4c77617de0855c15a24d72f7933da6f33c1487eb900eb5084e9c984e65eba4f771ac3a0dbbef3eddbd3a23758bb9a4ff31b01102bacc848645e3084e2c384aa419bf6b506b7e1a8fcf5ea7bc9602831b602ac663b"]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000400)="fa", 0x1}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/66, 0x42}], 0x1, &(0x7f00000009c0)=""/192, 0xc0}, 0x22) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) readv(r5, &(0x7f0000001400)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000140)=""/249, 0xf9}], 0x2) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x102114, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010101}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4105, 0x1009}) 8m14.407824295s ago: executing program 2 (id=504): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x19d600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1f) truncate(&(0x7f0000000100)='./file0\x00', 0x747) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x02\x00\x00\xd7\\P\xc1\xde.O\xcb\b\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff', 0x6e93ebbbcc0884f2, 0x77, &(0x7f0000000000)={0x2000000000002000, 0xb, 0x56, 0x3}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='wg1\x00', 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x109410, &(0x7f0000000380)={[{@resgid}], [{@dont_measure}, {@fowner_gt={'fowner>', 0xee01}}, {@flag='rw'}, {@euid_lt}, {@uid_lt}]}, 0x2, 0x25a, &(0x7f0000000ac0)="$eJzs3T1oJGUcBvBnZneNuVvk1EYQP0BENBDOTrA5G4UDOQ4RQYUTERvlTjjvsLu1srHQWuUqm0PsjJaSJtgoglXUFLERNFgYLLRY2Z0kxGRjVje7c2R+P5idmZ2P/zu787wzzTABGutUkjNJWkkWknSSFLtXuL8aTm3NXp9fuZD0+8/8VgzXq+Yr29udTNJL8liS5bLIa+3k6tIL63+sPvXQu1c6D3689Pz8TA9yy8b62tObH51757Ozj1795rtfzhU5k+4/juvoFSO+axfJHdModpMo2nW3gHGcf+vT7we5vzPJA8P8d1Km+vPeu3zLciePfHjQtu//+u3ds2wrcPT6/c7gGtjrA41TJummKBeTVNNlubhY3cP/0DpRvn7p8psLr166cvGVunsq4Kh0k7Unv5j7/OSe/P/cqvIPHF+D/D97/saPg+nNVt2tAWbinmo0yP/CS9cejvzDMTT3r0vlH5pL/qG55B+aa2/+O3U3CJgZ139oLvmHY2znhr43crH8Q3PJPzSX/ENz7c4/ANAs/bm6n0AG6lJ3/wMAAAAAAAAAAAAAAAAAAOx3fX7lwvYwq5pffZBsPJGkPap+a/g+4uTW4eeJ34vBajuKarOJvHjfhDuY0CfTevp6zJc53PbTlOqP6et7661/7WLSezvJ6XZ7//lXbJ1//9/thyzvvDxhgf+o2DP/+HNTLXfoz/fXjanWP9TZ1eTLQf9zelT/U+au4Xh0/9MdP2YHeuPPCXcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzPwdAAD//27xbd8=") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_clone3(&(0x7f0000000040)={0x21000080, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x88080, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a9741, 0x160) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000500)=""/159, 0x9f}], 0x1, 0x2, 0x14) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x8, 0xffffffffffff957e, 0x1000, 0xa95, 0xb, 0x3ff}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 8m12.553808482s ago: executing program 2 (id=515): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) close(0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fremovexattr(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="757365722e6d6d5f706167655f616c6c6f630072693e1e06d32d3e9b0df6854a4df97788431972d4c77617de0855c15a24d72f7933da6f33c1487eb900eb5084e9c984e65eba4f771ac3a0dbbef3eddbd3a23758bb9a4ff31b01102bacc848645e3084e2c384aa419bf6b506b7e1a8fcf5ea7bc9602831b602ac663b"]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000400)="fa", 0x1}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/66, 0x42}], 0x1, &(0x7f00000009c0)=""/192, 0xc0}, 0x22) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) readv(r5, &(0x7f0000001400)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000140)=""/249, 0xf9}], 0x2) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x102114, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010101}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4105, 0x1009}) 8m11.915483031s ago: executing program 2 (id=525): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000001c0), 0x5, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000104c0)={0xa4, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x64, 0x7, 0x1, 0x0, "75e93337be3ec8f1a43f5c13f5451977dac14174319f7968c2a9a6f4f2d4a9b0f86f828186bc59ceb8edb203518a94b2251be2452dc0fa517aad44fb347b84ab921f8b7e64f8288b14069442feb642e6725e9946a1b78df9155a7fdca4e1319d"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xa4}}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x8, 0x0, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000040)=0xe, 0x4) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 8m11.881952912s ago: executing program 32 (id=525): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000001c0), 0x5, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000104c0)={0xa4, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x64, 0x7, 0x1, 0x0, "75e93337be3ec8f1a43f5c13f5451977dac14174319f7968c2a9a6f4f2d4a9b0f86f828186bc59ceb8edb203518a94b2251be2452dc0fa517aad44fb347b84ab921f8b7e64f8288b14069442feb642e6725e9946a1b78df9155a7fdca4e1319d"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xa4}}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x8, 0x0, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000040)=0xe, 0x4) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 2m14.448045074s ago: executing program 1 (id=3883): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x4, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000002180)) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x200}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000340)=0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x904, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x8d8, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x89c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x5, 0x0, 0x4, 0x4, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0xa, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x6, 0x100, 0x5, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x100, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3322ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x9, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x8000006, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x1, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xffff7ffc, 0xffff0001, 0xffffffff, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x80000001, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0xffffffff, 0xfffffffc, 0x8, 0x9, 0x6, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x9, 0x1, 0x3, 0x1, 0x9, 0x7, 0xe, 0x0, 0x1, 0x200009, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x3, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x40000004, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x0, 0x8, 0x7fff, 0x3, 0x4, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x9001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x6836, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x5, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x4, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x800, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x8, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x7f, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x2, 0x5, 0xd9a, 0x5, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x401, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x3, 0xffffffff, 0x7f, {0x5, 0x2, 0x8, 0xfff7, 0x400, 0x8}, {0x1, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x1, 0x6, 0x89fe}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}]}}]}, 0x904}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000200)={0x7, 'ip6tnl0\x00', {0x1}, 0x8000}) 2m14.255406446s ago: executing program 1 (id=3885): socket$nl_netfilter(0x10, 0x3, 0xc) creat(0x0, 0x0) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x80000}}, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc)=0x1, 0x5, 0x1, 0x0, &(0x7f0000000100)=0x2, 0x22fffff9) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000000c0)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000300)={0x0, 0x50}, 0x1, 0x7}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x831, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000180), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x54, r5, 0x1, 0x70bf25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xfffffd4a, 0x90, 0xe1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001340)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "d310b180ead120"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002340)={r6, 0x4}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000180)=""/187, 0xbb, 0x0, 0x0}}, 0x10) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) 2m14.030544077s ago: executing program 1 (id=3889): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000200)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r1) clock_gettime(0x2, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206010300000000000000000700000014000780080008000000004008000640000000060900020073797a3100000000050005000a0000000500010007000000050004000300000014000300686173683a69702c706f72742c697000d5d55fb90400000000000000fb6fb3da0fe33813f24b74952e6715aefb6c93a3e2914432"], 0x60}}, 0xcc000) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {r2, r3+10000000}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00a1f8481a0000a07e14060200002c080000000a800000129400"/41, 0x29}], 0x1}, 0x20000004) timer_gettime(r1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) (async) timer_create(0xfffffffc, 0x0, &(0x7f0000000200)) (async) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) (async) timer_settime(r1, 0x1, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) (async) timer_delete(r1) (async) clock_gettime(0x2, &(0x7f00000000c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206010300000000000000000700000014000780080008000000004008000640000000060900020073797a3100000000050005000a0000000500010007000000050004000300000014000300686173683a69702c706f72742c697000d5d55fb90400000000000000fb6fb3da0fe33813f24b74952e6715aefb6c93a3e2914432"], 0x60}}, 0xcc000) (async) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {r2, r3+10000000}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00a1f8481a0000a07e14060200002c080000000a800000129400"/41, 0x29}], 0x1}, 0x20000004) (async) timer_gettime(r1, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) 2m13.951246037s ago: executing program 1 (id=3891): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "05e000", 0x40, 0x6, 0x0, @private0, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x4, {[@generic={0x13, 0x3, "b5"}, @window={0x3, 0x3, 0x7}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @generic={0x3, 0xf, "a66ded427477214c1f0010c516"}, @timestamp={0x8, 0xa, 0x9, 0x5}]}}}}}}}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r1, 0x0, 0x0, 0x8014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000003440), 0xffffffffffffffff) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, 0x0) fsopen(0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000200)) syz_clone(0x848080, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) getdents(r6, 0x0, 0x0) unshare(0x2c020400) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'dummy0\x00', 0xfffe}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000a5d2db10000000000000000000000000000000000000000003c806f7d80912715f8e4a666519cc82f5ced02e54629289e06cf1f3596d185c3328e98d3ecfb9c8b75c04c7f235b1d7828ed55dbbb07432384436319d72ae63a72b31308564b1e216df8dd04e11a3f84ac97c27c13b5b3ec2d88915f127e8735bc2b29c1f8307f080c61170b565a798722850f0efd87a337faa9e77af390f93ba73ae797bd75a6b2ab931d74e1634027358fb3506166f9e8b2268c4e50a61a2c8eb2c8d28342d51693d5c75f46d5be5e9721f13c9d982ca68da13079"], 0x50) 2m13.727400208s ago: executing program 1 (id=3894): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socket(0x10, 0x803, 0x8) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@arp={0x806, @generic={0x4d99d0b4842805fb, 0x8906, 0x6, 0x0, 0x3, @local, "", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}}}}, 0x0) 2m13.139044721s ago: executing program 1 (id=3909): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) getresuid(&(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xd, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xd, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x44004) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) (async) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") r0 = socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/110, 0x6e}], 0x1, 0x4f, 0xfffffff9) preadv(r2, &(0x7f0000002d00)=[{&(0x7f0000001500)=""/152, 0x98}], 0x1, 0x101, 0x9) ioctl$KDGKBTYPE(r2, 0x4b33, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000200)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}]}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040005) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m13.125165991s ago: executing program 33 (id=3909): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) getresuid(&(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xd, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xd, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x44004) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) (async) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") r0 = socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/110, 0x6e}], 0x1, 0x4f, 0xfffffff9) preadv(r2, &(0x7f0000002d00)=[{&(0x7f0000001500)=""/152, 0x98}], 0x1, 0x101, 0x9) ioctl$KDGKBTYPE(r2, 0x4b33, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000200)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}]}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040005) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 7.510536382s ago: executing program 0 (id=4966): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000140)={0xe23, 0xff, 0x9, 0xd, 0x0, "9983b9127bd4259b"}) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/4068, 0xfe4) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0xf, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_usb_connect$midi(0x1, 0xe6, &(0x7f0000001300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0x9, 0x90, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x5, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x0, 0x4, [{0x5, 0x9}, {0x8, 0x6}, {0x0, 0x3a}, {0x2, 0x6}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x4, 0x80, 0x2a, {0xf, 0x25, 0x1, 0xb, "808fc15071e3a9ea6a38f0"}}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xf, 0x2, 0xb, {0x13, 0x25, 0x1, 0xf, "b66cc145316170142a97a5ab72e875"}}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0xf7, 0xfb, 0x43, {0xb, 0x25, 0x1, 0x7, "849d2df23feb26"}}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0xff, 0x7, 0x4, {0x13, 0x25, 0x1, 0xf, "28b29190f432e0eb41c8d1944a9551"}}}, {{0x9, 0x5, 0xa, 0x0, 0x14, 0x0, 0x5, 0xb, {0xb, 0x25, 0x1, 0x7, "e0197a80a76b9e"}}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0xc, 0xaf, {0xf, 0x25, 0x1, 0xb, "2a4ef35a42395e9dba1395"}}}]}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x201, 0x3, 0x5, 0x5, 0x10, 0xf4}, 0x5, &(0x7f0000001440)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x416}}, {0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000011c0)={0x0, 0x5}, &(0x7f0000001200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001240)={0x5, 0x2, 0x9, 0x3, r3}, 0x10) accept4(r1, 0x0, &(0x7f0000000480), 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x1, 0x0, 0x7, 0x58418, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) syz_read_part_table(0x609, &(0x7f0000000640)="$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") splice(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x7, 0xb) 5.301250183s ago: executing program 6 (id=4973): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002100010025bd7000fddbdf250280a0099c0000071200000008000d21010000100800100003000000080002007f"], 0x3c}, 0x1, 0x0, 0x0, 0x44011}, 0x4044050) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x540b, &(0x7f0000000040)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x23, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x22002, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000600)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6d6163677265656b2c756e695f786c6174653d302c696f636861727365743d7574c6382c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c636865636b2e72656c617865642c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c73686f72746e616d653d77696e6e762c00"], 0x0, 0x362, &(0x7f0000000280)="$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") open(0x0, 0x4c27e, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4484, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x40, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x9) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740), 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 5.194058994s ago: executing program 6 (id=4976): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7200000010000d0427bd7000fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="46000600a202010000001300a5b41013385360ba10545d0e7402fef59756242e66003028d4ff8aa15d1589ae4877a9df9f62ba65cd6a1559edd0e25936ee3beaf1b838c966fe6cb2fe163d0dd685da157ed04505ffe361c1d4de1f9efc737587a99ec504105ba71073f5183a9ac6ce1d8644f327a3f09672cb11cf002140071d39682da4046ae3126019d422f8145d7350e2ec81a57a8d9221d0e0f85292ee8fc1315ab3cb1a86c235fe9b1d", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a80)={'veth0_to_bond\x00', &(0x7f0000001040)=@ethtool_flash={0x26, 0x8000, './file0\x00'}}) r4 = socket$kcm(0x10, 0x2, 0x0) setuid(0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x9) fchdir(r6) r7 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) 5.057299275s ago: executing program 0 (id=4978): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x9}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x86) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) dup(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0/../file0/file0\x00', r6, &(0x7f0000000200)='./file0\x00') readlinkat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=""/48, 0x30) sendmsg(r4, &(0x7f0000002600)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="b3a6508b6161ff07cb2004ee89b588e4db7a64b4aa2ed6642aa5e86bc871d7cc", 0x20}, {&(0x7f0000002540)}, {&(0x7f0000002580)="17115b11851fb6f5ab1f1c7c505d79a0e6504b310c4d2dddf948e23d6b77215f3f5f9c182337aff839", 0x29}], 0x4}, 0x20000800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f00000002c0)) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000700)=""/147, 0x93}, {&(0x7f0000000140)=""/123, 0x7b}], 0x2, 0xc9, 0x2) unshare(0x68040200) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000080)={'nat\x00', 0x0, [0x6, 0x0, 0x2, 0xb2c]}, &(0x7f0000000100)=0x54) 4.774326666s ago: executing program 0 (id=4981): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) tgkill(r0, r0, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000"], 0xa4}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.539847907s ago: executing program 4 (id=4982): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno', 0x44) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 3.553438912s ago: executing program 6 (id=4984): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) tgkill(r0, r0, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000"], 0xa4}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.087682985s ago: executing program 4 (id=4986): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xc8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, 0x0, 0x8001) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x240, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1ff}, {0xc, 0x90, 0xffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x12c}, {0xc, 0x90, 0x58}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x8000000000000000}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x2400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xba0d}, {0xc, 0x90, 0x36}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x1a4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x32}, {0xc, 0x90, 0x3}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4040040}, 0x4004001) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0xf0ff, {0xf0, @empty, 'lo\x00'}}, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7156, 0x56}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0xe7, 0x5b, "16efacd9f5bcddcd4137a497380108463f165ea184b911fec08615af61b1cefbf03a50e5229a79910eb9ef94912b9e7619cbb76c72e0636ca65efb63c470ec8fff08fe02d42f270b798b2552e8bed068f0f80068c9fb9ef44043e446b1895af692f86a18a8d39ef892622f96ec23bd7133f37df3ae77fdc4b647161a6c7b68991e18bc1aa9dc328862b18b71bdf50e73e40560a195ce229d217fa55f1b08614b95b2cce0b4a8f318579700d609120cfa142e43e8866129e1d56d8217fb93d51e15ae7e940b792c3f0399acf5b862d4f078d7ce0684a070e1d95e37926c23390031a6a0"}]}, 0x110}, 0x1, 0x0, 0x0, 0x811}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c61e0000000000000001a13bd5c510069d9d0000e01f00ff0200000000000000000000000000010001c204", @ANYRESHEX], 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = io_uring_setup(0x6fa2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.748872826s ago: executing program 0 (id=4987): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f0000000240)="ce325319ca1049e0125e193ead5a034988099c1568ae4127619fa848fb65dfd0d1fb12afba7484462618914dff7db390f336b40ea19f69b4e914c94ecc05e8337b7ee01dc95194b963eb48a12e4a") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6d, 0xfffffffffffffb01, 0x2, 0x9e, 0x6, 0x7}}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x2, {0x1}}]}}}]}, 0x98}}, 0x4040) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x64, 0x0, 0x4cc6ff6c9e32d327, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44081}, 0x4008010) unshare(0x40000800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4044000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 2.737161456s ago: executing program 4 (id=4988): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000140)={0xe23, 0xff, 0x9, 0xd, 0x0, "9983b9127bd4259b"}) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/4068, 0xfe4) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0xf, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_usb_connect$midi(0x1, 0xe6, &(0x7f0000001300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0x9, 0x90, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x5, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x0, 0x4, [{0x5, 0x9}, {0x8, 0x6}, {0x0, 0x3a}, {0x2, 0x6}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x4, 0x80, 0x2a, {0xf, 0x25, 0x1, 0xb, "808fc15071e3a9ea6a38f0"}}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xf, 0x2, 0xb, {0x13, 0x25, 0x1, 0xf, "b66cc145316170142a97a5ab72e875"}}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0xf7, 0xfb, 0x43, {0xb, 0x25, 0x1, 0x7, "849d2df23feb26"}}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0xff, 0x7, 0x4, {0x13, 0x25, 0x1, 0xf, "28b29190f432e0eb41c8d1944a9551"}}}, {{0x9, 0x5, 0xa, 0x0, 0x14, 0x0, 0x5, 0xb, {0xb, 0x25, 0x1, 0x7, "e0197a80a76b9e"}}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0xc, 0xaf, {0xf, 0x25, 0x1, 0xb, "2a4ef35a42395e9dba1395"}}}]}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x201, 0x3, 0x5, 0x5, 0x10, 0xf4}, 0x5, &(0x7f0000001440)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x416}}, {0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000011c0)={0x0, 0x5}, &(0x7f0000001200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001240)={0x5, 0x2, 0x9, 0x3, r3}, 0x10) accept4(r1, 0x0, &(0x7f0000000480), 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x1, 0x0, 0x7, 0x58418, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) syz_read_part_table(0x609, &(0x7f0000000640)="$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") splice(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x7, 0xb) 2.273250038s ago: executing program 3 (id=4990): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3c}, {@in=@broadcast, 0x1, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x1}, {0x12, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}}, 0xf0}}, 0x0) (fail_nth: 6) r1 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)="64e919", 0x3) 2.247361509s ago: executing program 3 (id=4991): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$eJzs3d1vHOW5APBnNrZjGwQBcoATAZkEBQzkOGv7kCji4pDYm2Q5/qhsRyJSK4KIU0WxSkVaCaJKBKnqVVFRVVVqK1UVl71CohflpspV28te9aJSy39QoV6Fqu1UM7tr7zr7EZu1HdLfL1rvfDzvvM87MztvvN6dN/gyy7KseGxx/vwvdzJZ7j6nZz798KP388d7N2Io9sSLya8jhiMijRj4Z3GuDE7PLC7M9djQ1YiLEXEzIomIvVF77mCkZe5iJD+I+9fnb0bys3i8TbHhTTaOnjL+o+32+QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHel6ZlyeSKJ2er8+VfTzoohwLusb2zuk2LU7+STXtUmEUn+iOHhxlDfj+9fX/1o/uNwPFGbe6I28vdwXL/v0X0vPTJQapTvktCOuPbO9auvr66uvFWf35umgz0L7d32tDZvaGvFzlbmq0sL1blTZytpdWkhPXn8ePnYuTNL6ZlqVJYuLC1X5tLpxcqp5YXFdGz6uXTi5MmptDJ+YeH8/NmZ8dlKY+GJ/5ksl4+nr4x/pXJqcWlh/tgr40vT56qzs9X5s0VMvjqPOZGfiP9fXU6XK6fm0vTyldWVqV5J5kETbdckrUGTvbY0WZ6cnJiYHInjL5588US5PFBfMDnRWFDeIG6L2P2Tln77+R1H/qrv12/4Akr1/j9moxrzcT5ejbTtv+mYicVYiLk265L17TX6/yPHKl3rbe7/G7384+urD0TR/z9Vm3uqU//fIdfe/7KstuWtlm/8uxbvxPW4Gq/HaqzGSrz1hbeYxm9b5z/fuP4fWZZtYbtp3tqDzfugD7mejUrMRzWWYiGqMReniiVpfUkaJ+N4HI9yvBbnbmVZXuOZqMZsVGIpLsRSLEelOKOmYzEqacRyLMRipDEW0/FcpDERJ2MkpiKNSozHhViI8zEfZ2MmThVbuRxXiv0+1SXHtaCJOwma7BJ0W2f+xfr/7G78nyDbrc9XcNi6rN7/D3UMyBpTY9M7lhUAAADQT//9+3hg/8O/+3PEYDxZvC9/pjpbKe92WgAAAEAfFR/XeyJ/Gswi4slI2vz+X9ql5AAAAIC+SIrv2CURMRoHa1O1b0LtCR8CAAAAgHtE8ff/p/Kn0XzqYCRrd0K5uNu5AQAAAP3R+x77PSOS4ajf0zK9VHu+VI+o3+d39Ex1tjI+vTD70kQ8U9xloPimwW1b2xORDBZfP3g+DtWiDo3WnkdbtzicR02MvzQRz8fhekPGns6fnh5rEzlZi3y2Fvlsl8ipPBIA7nWHb++PP8822f8/H0drEUcPDAxFxMCBNj1reb1nHdiNhgIAa3qPsdMa8W69XHP//7/rv/8P1le39P8Px+V/5QtXYjzeiDdjNS7F0eLbBsUnDlrq/eoH9fcM1j6GUI6jPd4NaMT+4UQpjvZ4P2C0aaCXoz3eEajFxtciprb3IADADjvcoR/u1P8XEdH44GCt/z/a9Pt/3P77/9rQQiu+UggAd4W1Eez7OpHtaV6y220EAFrdaS89uFMJAQAAAAAAAAAAAAAAAAAAAAAAAAAAwD2gr7f9H95i8b/Ux/WrLcn6Px5B+4mR+j5oLHl3U3vjvWvvXP9hRDSvKuWN2J6ci0z7u+VSH7aTRcROHa+dm4h9EVveq9Fu1VBEbHvyI/2o4vP6RO21Uep28TjfdS0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfAknEnnbLSxF7I6IcEcd2Pqvtc2O3E9h5/9c8k9yKW/F2PLB76QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Jvq9/8vRe35vtqiGChFHImIixGR7XaO/XRrtxPok5Etlmu6/39+zCNLYqB22CMZnJ5ZXJjLD38x9kPp0w8/ev+x1uJ777SeIrC0YXCJeg0bY39xf2PqoaLU6MzKtavfevOb6czpKMVQnF4+Mzszd3bx5fUijyYfR6RRezTk+eaP7xz5zQdtWv5x3tL2NtZ7ptg5M7fX+1i70t3r7ebK6spkXtNy5dXlb3/jyttNqx6OQxFPj0WMtdb09fzRoaZDMdittuSz5HvJA/HjuFgc/3xvJFmSH6IHi/aPXL6yujL+xpurlzrktC8ORsSliOGeOa3t6oPF9aSt4qwrDea1loug/Mf+Hm1sr3mMi9oWJzq04aHilBmtt2GopQ2lDnWmndtQ7PCm/V5qTCTJxoym6hkNRWtGj8QzbY50tjei8154pvuRbi/5LPlTci7+GN9tGv+jlB//I9H51dm6iSKy6UzpGFmqRRYtn2xe8drGyL/+5I6ybztMDZv1/ZYXb6np+l8/Vn26HmVJ1+tRU41THWps/7rYUOPGs6LUseFFj7R/Q4n61adjoVqe+2tRHfL8r3ghYuBAt6vibb31C52vKK3lX26/equv/58mY/G3uGH8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O6XROxpt7wUcSQi9jXm04hsE5vd22lFaTTZbIp9dWPtx5fc/uJnqWXZe72LJbfiVvbudiUFAAAAAAAAwE47PfPphx+9nz+Kv8fvuZVl9b/vpxEDEbEv+dFIzCwuzPXY0GDExYi4mU8Pdwr6e1bTujQvF/evz9+MyB7cepMAgB7+HQAA//8L2HXs") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)={0x8000, 0x404f32a7, 0x1, 0x9, 0xb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x0, 0xc}, 0x20, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x2000, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x8, 0x3}, 0x201, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100}, 0x8016}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 1.99457746s ago: executing program 3 (id=4994): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$phonet(0x23, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000200025a726bd7000bbdbdf250a001404ff0000010200010014000200ff0200000000100000000000000000010800060000000000198aca8680ee30207c385329979313ca20db3081a9ca0ab9bea1eb739c2c5619521ffdc15efeac30"], 0x38}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) syz_emit_ethernet(0x32, &(0x7f0000001b40)=ANY=[], 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x10080, 0x10, 0x4}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x4, 0x0, 0xfff, 0x2, 0xff, 0x6}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x10}}, {0x20000010304, @local}, 0x12, {0x2, 0x4e1e, @multicast1}, 'lo\x00'}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESDEC]) renameat(0xffffffffffffffff, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00') close(0x3) 1.96994095s ago: executing program 4 (id=4995): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, 0x0, 0x7, 0x0) syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffde7fc200000d86dd6000000800783afffe80000000000000000000000000003fff0200000000000000000000007ddeba4d4097cadf55900000018700907800000000fe8000000000000000000000000000aaff0200000000000000000000b6a900000001010a90c250c21562759ec04c4ad7c1cf3ff8a5ddd3ef99d3eee43c651d853d9827ff9b5d7f42610100ad096fcce262a31ceb216d7e525ab30f15c6dde6615c6cc8c1cf4f58c3287055ef8e80722bbdfa75f7c874f94d99efff824b45800c0946e52f399974c919ec161d2ccfa7a19acad43c26"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x161841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "b6a04f1bb4e3a33805c0240284054753afc5f0e68292e85065a4e99abb092fa1729f4755d39cd1b85b3a30bbc3547bb4991d589d6066bfb7362c765795a7f8a4", 0x38}, 0x48, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="aaa2575f137b0062536a004a72d42a66aaaaa2aa0daa"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0xfc, @ipv4={'\x00', '\xff\xff', @local}, 0x10001}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/!\x00'], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) 1.90797958s ago: executing program 3 (id=4996): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno', 0x44) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 1.90222066s ago: executing program 5 (id=4997): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\-\x00', 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000540)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0x8, 0x2}, {0x85, 0x0, 0x0, 0xc9}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) syz_open_procfs(0x0, 0x0) 891.167905ms ago: executing program 5 (id=4998): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xc8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, 0x0, 0x8001) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x240, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1ff}, {0xc, 0x90, 0xffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x12c}, {0xc, 0x90, 0x58}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x8000000000000000}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x2400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xba0d}, {0xc, 0x90, 0x36}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x1a4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x32}, {0xc, 0x90, 0x3}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4040040}, 0x4004001) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0xf0ff, {0xf0, @empty, 'lo\x00'}}, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7156, 0x56}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0xe7, 0x5b, "16efacd9f5bcddcd4137a497380108463f165ea184b911fec08615af61b1cefbf03a50e5229a79910eb9ef94912b9e7619cbb76c72e0636ca65efb63c470ec8fff08fe02d42f270b798b2552e8bed068f0f80068c9fb9ef44043e446b1895af692f86a18a8d39ef892622f96ec23bd7133f37df3ae77fdc4b647161a6c7b68991e18bc1aa9dc328862b18b71bdf50e73e40560a195ce229d217fa55f1b08614b95b2cce0b4a8f318579700d609120cfa142e43e8866129e1d56d8217fb93d51e15ae7e940b792c3f0399acf5b862d4f078d7ce0684a070e1d95e37926c23390031a6a0"}]}, 0x110}, 0x1, 0x0, 0x0, 0x811}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c61e0000000000000001a13bd5c510069d9d0000e01f00ff0200000000000000000000000000010001c204", @ANYRESHEX], 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = io_uring_setup(0x6fa2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 801.392906ms ago: executing program 5 (id=4999): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1fce7f1fff0000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) 799.841766ms ago: executing program 4 (id=5000): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1b95ef2a8c14edc7) write$binfmt_elf32(r2, 0x0, 0x38) fcntl$dupfd(r2, 0x0, r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x10, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x1, 0x6, 0x8, 0x8007, 0x45, 0x8, 0x81}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) mknod(&(0x7f00000007c0)='./file0\x00', 0x604e55e962254ecf, 0x10001) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@nobh}, {@nodelalloc}, {@quota}, {@nobarrier}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001614"], 0x18}}, 0x0) socket$key(0xf, 0x3, 0x2) getpid() 670.943967ms ago: executing program 3 (id=5001): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) readv(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/94, 0x5e}, {0x0}], 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) (async) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) 670.134077ms ago: executing program 5 (id=5002): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setuid(0xee01) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000340)=@v3={0x3000000, [{0x1, 0x3}, {0x8, 0x68e}], r0}, 0x18, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = semget(0x1, 0x3, 0x222) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x2, r0, r2, r0, 0x0, 0x0, 0x3}, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfa}) 608.634597ms ago: executing program 3 (id=5003): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xfffffffa, 0x6, 0x0, 'queue0\x00', 0x25}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000900)=0xf320) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') socket$inet(0x2, 0x3, 0xa) preadv(r2, &(0x7f0000000100), 0x0, 0x200000, 0x0) syz_open_dev$usbfs(0x0, 0x4, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000000)={0x2, 0x7}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000001b80)=ANY=[@ANYBLOB="30000000000000008400000001000000f8ff000004000000000000000000000000eeffffff00000000000000d6cff1e5eee4930f87", @ANYRES32=0x0], 0x30}], 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/103) unshare(0x8040480) openat$cgroup_ro(r2, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xda, @tick=0xb61, 0x4}) 607.944097ms ago: executing program 0 (id=5004): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r2, 0x0, 0x20044045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r3, 0x2219, 0x7f21, 0x96, 0x0, 0x0) 451.435158ms ago: executing program 5 (id=5005): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)={0x8000, 0x404f32a7, 0x1, 0x9, 0xb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x0, 0xc}, 0x20, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x2000, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x8, 0x3}, 0x201, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100}, 0x8016}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 391.652558ms ago: executing program 0 (id=5006): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000140)={0xe23, 0xff, 0x9, 0xd, 0x0, "9983b9127bd4259b"}) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/4068, 0xfe4) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0xf, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000011c0)={0x0, 0x5}, &(0x7f0000001200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001240)={0x5, 0x2, 0x9, 0x3, r3}, 0x10) accept4(r1, 0x0, &(0x7f0000000480), 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x1, 0x0, 0x7, 0x58418, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) syz_read_part_table(0x609, &(0x7f0000000640)="$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") splice(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x7, 0xb) 166.470099ms ago: executing program 6 (id=5007): socket(0xa, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001a00210f29bd7000fadbdf251c000000ff0000", @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x24880) 139.178989ms ago: executing program 5 (id=5008): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x4, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xb2) r3 = getpid() r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000300)="4356b5ec27a003838ff751d0cc8c671bd123ae059db163385a8e45ca4bc5948ec78ff6cf3a9f4a48b956251f9f6ccc9b26b2185b7d8d3e8ce31f4bb17878686e739d58b6ee75c52d0aa731c7d3ff2ed1a28fefcb8d01fd2b385b86ea735ce7c5e699d43aee7118cbaa21b784ea96ca3fcf596d0c3d2b8de864c6e10b4c6171ee5f23f06aac0b6a0d01f06de2017e6680d1e4499d034528caede199372d6a807408c3c11842e511f3e9e588ffe584b25060edcc5edcec1bcb2f92f8b2caf306659955454e55b1df9c3efb9ad49538cc721321ed7a") getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x2b, 0x1, 0x1) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x100, 0x18, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x808, 0x6e, 0x8900, 0x9, 0x1, 0x800, 0x1, 0x0, 0x7f, 0x0, 0xa27}, r3, 0x1, r4, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 7.15412ms ago: executing program 6 (id=5009): socket$nl_netfilter(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) socket(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, 0x0, 0x8001) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x240, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1ff}, {0xc, 0x90, 0xffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x12c}, {0xc, 0x90, 0x58}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x8000000000000000}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x2400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xba0d}, {0xc, 0x90, 0x36}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x1a4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x32}, {0xc, 0x90, 0x3}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4040040}, 0x4004001) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0xf0ff, {0xf0, @empty, 'lo\x00'}}, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7156, 0x56}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0xe7, 0x5b, "16efacd9f5bcddcd4137a497380108463f165ea184b911fec08615af61b1cefbf03a50e5229a79910eb9ef94912b9e7619cbb76c72e0636ca65efb63c470ec8fff08fe02d42f270b798b2552e8bed068f0f80068c9fb9ef44043e446b1895af692f86a18a8d39ef892622f96ec23bd7133f37df3ae77fdc4b647161a6c7b68991e18bc1aa9dc328862b18b71bdf50e73e40560a195ce229d217fa55f1b08614b95b2cce0b4a8f318579700d609120cfa142e43e8866129e1d56d8217fb93d51e15ae7e940b792c3f0399acf5b862d4f078d7ce0684a070e1d95e37926c23390031a6a0"}]}, 0x110}, 0x1, 0x0, 0x0, 0x811}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c61e0000000000000001a13bd5c510069d9d0000e01f00ff0200000000000000000000000000010001c204", @ANYRESHEX], 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = io_uring_setup(0x6fa2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 0s ago: executing program 4 (id=5010): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, 0x0, 0x7, 0x0) syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffde7fc200000d86dd6000000800783afffe80000000000000000000000000003fff0200000000000000000000007ddeba4d4097cadf55900000018700907800000000fe8000000000000000000000000000aaff0200000000000000000000b6a900000001010a90c250c21562759ec04c4ad7c1cf3ff8a5ddd3ef99d3eee43c651d853d9827ff9b5d7f42610100ad096fcce262a31ceb216d7e525ab30f15c6dde6615c6cc8c1cf4f58c3287055ef8e80722bbdfa75f7c874f94d99efff824b45800c0946e52f399974c919ec161d2ccfa7a19acad43c26"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x161841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "b6a04f1bb4e3a33805c0240284054753afc5f0e68292e85065a4e99abb092fa1729f4755d39cd1b85b3a30bbc3547bb4991d589d6066bfb7362c765795a7f8a4", 0x38}, 0x48, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="aaa2575f137b0062536a004a72d42a66aaaaa2aa0daa"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0xfc, @ipv4={'\x00', '\xff\xff', @local}, 0x10001}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/!\x00'], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) kernel console output (not intermixed with test programs): pe 29 has an invalid length. [ 509.918507][T16653] CPU: 0 UID: 0 PID: 16653 Comm: syz.4.4140 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 509.918546][T16653] Tainted: [W]=WARN [ 509.918607][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.918707][T16653] Call Trace: [ 509.918734][T16653] [ 509.918781][T16653] __dump_stack+0x1d/0x30 [ 509.918863][T16653] dump_stack_lvl+0x95/0xd0 [ 509.918989][T16653] dump_stack+0x15/0x1b [ 509.919056][T16653] should_fail_ex+0x25e/0x270 [ 509.919145][T16653] should_fail+0xb/0x20 [ 509.919222][T16653] should_fail_usercopy+0x1a/0x20 [ 509.919371][T16653] _copy_to_user+0x20/0xa0 [ 509.919430][T16653] simple_read_from_buffer+0xb5/0x130 [ 509.919583][T16653] proc_fail_nth_read+0x10e/0x150 [ 509.919658][T16653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 509.919725][T16653] vfs_read+0x18e/0x7c0 [ 509.919821][T16653] ? __rcu_read_unlock+0x4e/0x70 [ 509.919924][T16653] ? __fget_files+0x184/0x1c0 [ 509.920005][T16653] ? mutex_lock+0x57/0x90 [ 509.920102][T16653] ksys_read+0xdc/0x1a0 [ 509.920181][T16653] __x64_sys_read+0x40/0x50 [ 509.920241][T16653] x64_sys_call+0x2886/0x3020 [ 509.920382][T16653] do_syscall_64+0x136/0x3c0 [ 509.920490][T16653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.920630][T16653] RIP: 0033:0x7f03a629d68e [ 509.920687][T16653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 509.920748][T16653] RSP: 002b:00007f03a4d15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 509.920822][T16653] RAX: ffffffffffffffda RBX: 00007f03a4d166c0 RCX: 00007f03a629d68e [ 509.920949][T16653] RDX: 000000000000000f RSI: 00007f03a4d160a0 RDI: 0000000000000004 [ 509.920994][T16653] RBP: 00007f03a4d16090 R08: 0000000000000000 R09: 0000000000000000 [ 509.921042][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.921083][T16653] R13: 00007f03a6556128 R14: 00007f03a6556090 R15: 00007ffe9fec5268 [ 509.921175][T16653] [ 510.271541][T16649] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4143'. [ 510.297468][T16655] netlink: 'syz.6.4145': attribute type 49 has an invalid length. [ 510.319351][T16658] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4144'. [ 510.384598][T16658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.597351][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 510.743378][ T28] kauditd_printk_skb: 241 callbacks suppressed [ 510.743395][ T28] audit: type=1400 audit(2000000722.697:1375): avc: denied { write } for pid=16670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.667028][T16696] xt_CT: No such helper "pptp" [ 511.772902][ T28] audit: type=1400 audit(2000000723.047:1376): avc: denied { write } for pid=16694 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.787441][ T28] audit: type=1400 audit(2000000724.727:1377): avc: denied { ioctl } for pid=16706 comm="syz.6.4156" path="socket:[55790]" dev="sockfs" ino=55790 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.798456][T16721] validate_nla: 1 callbacks suppressed [ 513.798484][T16721] netlink: 'syz.6.4158': attribute type 49 has an invalid length. [ 515.129356][T16730] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4160'. [ 515.548436][ T28] audit: type=1400 audit(2000000727.477:1378): avc: denied { write } for pid=16712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.600893][ T28] audit: type=1400 audit(2000000727.497:1379): avc: denied { write } for pid=16739 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.632648][ T28] audit: type=1400 audit(2000000727.607:1380): avc: denied { getopt } for pid=16746 comm="syz.6.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 515.759832][T16747] loop6: detected capacity change from 0 to 512 [ 515.768588][T16747] EXT4-fs: Ignoring removed mblk_io_submit option [ 515.793259][T16747] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 515.799484][T16756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.812766][T16756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.818461][T16747] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 515.828541][T16747] EXT4-fs (loop6): orphan cleanup on readonly fs [ 516.379931][T16747] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.4166: Invalid block bitmap block 0 in block_group 0 [ 516.886156][T16747] loop6: lost filesystem error report for type 5 error -117 [ 516.887012][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 516.900969][ C0] EXT4-fs (loop6): last error at time 2000000728: ext4_read_block_bitmap_nowait:483 [ 517.011101][T16756] loop5: detected capacity change from 0 to 2048 [ 517.084918][T16747] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.4166: Invalid block bitmap block 0 in block_group 0 [ 517.144132][T16747] loop6: lost filesystem error report for type 5 error -117 [ 517.151032][T16747] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.4166: Invalid block bitmap block 0 in block_group 0 [ 517.285323][T16747] loop6: lost filesystem error report for type 5 error -117 [ 517.292471][T16747] Quota error (device loop6): write_blk: dquota write failed [ 517.370701][T16747] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 517.410354][T16775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4173'. [ 517.432006][T16747] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.4166: Failed to acquire dquot type 1 [ 517.472664][T16747] loop6: lost filesystem error report for type 5 error -28 [ 517.483038][T16747] EXT4-fs (loop6): 1 orphan inode deleted [ 517.640700][T16776] netlink: 'syz.3.4174': attribute type 10 has an invalid length. [ 517.673226][T16776] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4174'. [ 517.836562][ T8901] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 517.856554][ T8901] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:25: Failed to release dquot type 1 [ 517.868192][ T8901] loop6: lost filesystem error report for type 5 error -117 [ 517.868805][T16756] loop5: p2 < > p3 p4 [ 517.887960][T16756] loop5: p3 start 65535 is beyond EOD, truncated [ 517.894636][T16756] loop5: p4 size 8192 extends beyond EOD, truncated [ 517.947171][T16747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.137581][T15637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.242571][ T28] audit: type=1400 audit(2000000730.207:1381): avc: denied { search } for pid=16787 comm="syz.3.4179" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 518.277447][T16793] netlink: 'syz.4.4181': attribute type 1 has an invalid length. [ 518.292911][T16793] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4181'. [ 518.302281][ T28] audit: type=1400 audit(2000000730.247:1382): avc: denied { search } for pid=16787 comm="syz.3.4179" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 518.324818][ T28] audit: type=1400 audit(2000000730.257:1383): avc: denied { read } for pid=16787 comm="syz.3.4179" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 518.369175][ T28] audit: type=1400 audit(2000000730.257:1384): avc: denied { read open } for pid=16787 comm="syz.3.4179" path="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 518.489639][T16801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4183'. [ 518.627788][T16824] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4191'. [ 518.907335][T16849] lo speed is unknown, defaulting to 1000 [ 518.920811][T16849] lo speed is unknown, defaulting to 1000 [ 518.933194][T16849] lo speed is unknown, defaulting to 1000 [ 519.526092][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4200'. [ 519.543280][T16905] loop4: detected capacity change from 0 to 164 [ 519.563247][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4199'. [ 519.574496][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4200'. [ 519.596524][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4199'. [ 519.673611][T16849] infiniband sz1: set active [ 519.678480][ T3377] lo speed is unknown, defaulting to 1000 [ 519.692771][T16849] infiniband sz1: added lo [ 519.701218][T16918] FAULT_INJECTION: forcing a failure. [ 519.701218][T16918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.714293][T16918] CPU: 0 UID: 0 PID: 16918 Comm: syz.5.4203 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 519.714331][T16918] Tainted: [W]=WARN [ 519.714339][T16918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.714369][T16918] Call Trace: [ 519.714375][T16918] [ 519.714383][T16918] __dump_stack+0x1d/0x30 [ 519.714459][T16918] dump_stack_lvl+0x95/0xd0 [ 519.714479][T16918] dump_stack+0x15/0x1b [ 519.714498][T16918] should_fail_ex+0x25e/0x270 [ 519.714531][T16918] should_fail+0xb/0x20 [ 519.714562][T16918] should_fail_usercopy+0x1a/0x20 [ 519.714606][T16918] _copy_from_user+0x1c/0xb0 [ 519.714684][T16918] ___sys_sendmsg+0xc1/0x1e0 [ 519.714773][T16918] __x64_sys_sendmsg+0xd4/0x160 [ 519.714812][T16918] x64_sys_call+0x194c/0x3020 [ 519.714899][T16918] do_syscall_64+0x136/0x3c0 [ 519.714941][T16918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.714965][T16918] RIP: 0033:0x7f5064d3ce59 [ 519.714982][T16918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.715002][T16918] RSP: 002b:00007f506378f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.715046][T16918] RAX: ffffffffffffffda RBX: 00007f5064fb5fa0 RCX: 00007f5064d3ce59 [ 519.715065][T16918] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 519.715082][T16918] RBP: 00007f506378f090 R08: 0000000000000000 R09: 0000000000000000 [ 519.715099][T16918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.715116][T16918] R13: 00007f5064fb6038 R14: 00007f5064fb5fa0 R15: 00007ffd4db5b748 [ 519.715137][T16918] [ 519.895327][T16849] RDS/IB: sz1: added [ 519.902185][T16849] smc: adding ib device sz1 with port count 1 [ 519.914099][T16849] smc: ib device sz1 port 1 has no pnetid [ 519.935677][T16849] lo speed is unknown, defaulting to 1000 [ 519.957072][ T3377] lo speed is unknown, defaulting to 1000 [ 519.983724][ T28] audit: type=1400 audit(2000000731.957:1385): avc: denied { name_bind } for pid=16924 comm="syz.4.4206" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 520.004864][T16926] bond4: option primary_reselect: invalid value (254) [ 520.016256][T16926] bond4 (unregistering): Released all slaves [ 520.110701][T16936] FAULT_INJECTION: forcing a failure. [ 520.110701][T16936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.135200][T16849] lo speed is unknown, defaulting to 1000 [ 520.151752][T16936] CPU: 1 UID: 0 PID: 16936 Comm: syz.5.4208 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 520.151794][T16936] Tainted: [W]=WARN [ 520.151821][T16936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.151837][T16936] Call Trace: [ 520.151872][T16936] [ 520.151884][T16936] __dump_stack+0x1d/0x30 [ 520.151914][T16936] dump_stack_lvl+0x95/0xd0 [ 520.151937][T16936] dump_stack+0x15/0x1b [ 520.151956][T16936] should_fail_ex+0x25e/0x270 [ 520.152036][T16936] should_fail+0xb/0x20 [ 520.152066][T16936] should_fail_usercopy+0x1a/0x20 [ 520.152246][T16936] _copy_to_user+0x20/0xa0 [ 520.152265][T16936] simple_read_from_buffer+0xb5/0x130 [ 520.152361][T16936] proc_fail_nth_read+0x10e/0x150 [ 520.152389][T16936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 520.152439][T16936] vfs_read+0x18e/0x7c0 [ 520.152472][T16936] ? __rcu_read_unlock+0x4e/0x70 [ 520.152502][T16936] ? __fget_files+0x184/0x1c0 [ 520.152593][T16936] ? mutex_lock+0x57/0x90 [ 520.152660][T16936] ksys_read+0xdc/0x1a0 [ 520.152755][T16936] __x64_sys_read+0x40/0x50 [ 520.152778][T16936] x64_sys_call+0x2886/0x3020 [ 520.152879][T16936] do_syscall_64+0x136/0x3c0 [ 520.152913][T16936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.152973][T16936] RIP: 0033:0x7f5064cfd68e [ 520.152989][T16936] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 520.153009][T16936] RSP: 002b:00007f506378efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 520.153031][T16936] RAX: ffffffffffffffda RBX: 00007f506378f6c0 RCX: 00007f5064cfd68e [ 520.153050][T16936] RDX: 000000000000000f RSI: 00007f506378f0a0 RDI: 0000000000000006 [ 520.153108][T16936] RBP: 00007f506378f090 R08: 0000000000000000 R09: 0000000000000000 [ 520.153143][T16936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.153229][T16936] R13: 00007f5064fb6038 R14: 00007f5064fb5fa0 R15: 00007ffd4db5b748 [ 520.153256][T16936] [ 520.199681][T16849] lo speed is unknown, defaulting to 1000 [ 520.430469][T16849] lo speed is unknown, defaulting to 1000 [ 520.470430][T16849] lo speed is unknown, defaulting to 1000 [ 520.631273][T16953] FAULT_INJECTION: forcing a failure. [ 520.631273][T16953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.645756][T16952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.654215][T16952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.672941][T16953] CPU: 1 UID: 0 PID: 16953 Comm: syz.5.4217 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 520.672974][T16953] Tainted: [W]=WARN [ 520.672981][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.672992][T16953] Call Trace: [ 520.672998][T16953] [ 520.673004][T16953] __dump_stack+0x1d/0x30 [ 520.673040][T16953] dump_stack_lvl+0x95/0xd0 [ 520.673065][T16953] dump_stack+0x15/0x1b [ 520.673087][T16953] should_fail_ex+0x25e/0x270 [ 520.673121][T16953] should_fail+0xb/0x20 [ 520.673149][T16953] should_fail_usercopy+0x1a/0x20 [ 520.673211][T16953] _copy_from_user+0x1c/0xb0 [ 520.673232][T16953] __sys_bpf+0x1e2/0xc30 [ 520.673267][T16953] ? get_pid_task+0x92/0xc0 [ 520.673346][T16953] ? vfs_write+0x7a0/0x990 [ 520.673368][T16953] __x64_sys_bpf+0x69/0x80 [ 520.673398][T16953] x64_sys_call+0x10cb/0x3020 [ 520.673474][T16953] do_syscall_64+0x136/0x3c0 [ 520.673504][T16953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.673523][T16953] RIP: 0033:0x7f5064d3ce59 [ 520.673593][T16953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.673614][T16953] RSP: 002b:00007f506378f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 520.673679][T16953] RAX: ffffffffffffffda RBX: 00007f5064fb5fa0 RCX: 00007f5064d3ce59 [ 520.673695][T16953] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 520.673708][T16953] RBP: 00007f506378f090 R08: 0000000000000000 R09: 0000000000000000 [ 520.673720][T16953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.673764][T16953] R13: 00007f5064fb6038 R14: 00007f5064fb5fa0 R15: 00007ffd4db5b748 [ 520.673782][T16953] [ 520.871893][T16952] loop6: detected capacity change from 0 to 2048 [ 520.914682][ T28] audit: type=1400 audit(2000000732.877:1386): avc: denied { create } for pid=16957 comm="syz.5.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 520.937370][T16958] netlink: 'syz.5.4221': attribute type 11 has an invalid length. [ 520.946685][T16958] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4221'. [ 521.001692][T16952] loop6: p2 < > p3 p4 [ 521.007870][T16952] loop6: p3 start 65535 is beyond EOD, truncated [ 521.016285][T16952] loop6: p4 size 8192 extends beyond EOD, truncated [ 521.043125][T16958] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.050449][T16958] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.114197][T16958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.179525][ T8873] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.201588][ T8873] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.220355][ T8873] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.229526][ T8873] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.412608][ T28] audit: type=1400 audit(2000000733.387:1387): avc: denied { mounton } for pid=16969 comm="syz.4.4225" path="/proc/633/task" dev="proc" ino=57036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 521.540321][T16976] loop5: detected capacity change from 0 to 512 [ 521.574784][T16976] EXT4-fs: Ignoring removed bh option [ 521.591719][T16976] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.4226: corrupted xattr block 95: invalid header [ 521.632508][T16976] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 521.637011][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 521.652695][ C1] EXT4-fs (loop5): initial error at time 2000000733: ext4_expand_extra_isize_ea:2810: inode 11 [ 521.663094][ C1] EXT4-fs (loop5): last error at time 2000000733: ext4_expand_extra_isize_ea:2810: inode 11 [ 521.674066][T16976] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4226: bg 0: block 7: invalid block bitmap [ 521.686550][T16976] loop5: lost filesystem error report for type 5 error -117 [ 521.686757][T16976] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 521.704856][T16976] loop5: lost filesystem error report for type 5 error -117 [ 521.705036][T16976] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.4226: corrupted xattr block 95: invalid header [ 521.750115][T16976] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 521.750418][T16976] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 521.768607][T16976] EXT4-fs (loop5): 1 orphan inode deleted [ 521.774871][T16976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.788533][T16989] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4232'. [ 521.975919][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4226'. [ 522.234910][T17026] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4233'. [ 522.302498][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 522.302518][ T28] audit: type=1400 audit(2000000734.257:1400): avc: denied { listen } for pid=17036 comm="syz.3.4234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 522.388423][ T28] audit: type=1400 audit(2000000734.277:1401): avc: denied { lock } for pid=17036 comm="syz.3.4234" path="socket:[56170]" dev="sockfs" ino=56170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 522.448269][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.462940][ T28] audit: type=1400 audit(2000000734.347:1402): avc: denied { sys_module } for pid=17036 comm="syz.3.4234" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 522.570848][T17079] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4243'. [ 522.626895][T17105] loop5: detected capacity change from 0 to 1024 [ 522.730323][T17105] EXT4-fs: Ignoring removed i_version option [ 522.733676][T17078] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4244'. [ 522.762161][T17105] EXT4-fs: Ignoring removed orlov option [ 522.878309][T17105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.904783][T17105] EXT4-fs (loop5): shut down requested (0) [ 522.991525][T17105] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 523.000497][T17105] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 523.009826][T17105] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 523.019705][T17105] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 523.028787][ T28] audit: type=1400 audit(2000000735.007:1403): avc: denied { setattr } for pid=17082 comm="syz.5.4245" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 523.080932][T17131] loop4: detected capacity change from 0 to 512 [ 523.096831][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4256'. [ 523.098404][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.247657][T17135] netlink: 'syz.6.4256': attribute type 2 has an invalid length. [ 523.329917][T17151] loop4: detected capacity change from 0 to 512 [ 523.380865][T17151] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4260: bg 0: block 127: padding at end of block bitmap is not set [ 523.395209][T17151] loop4: lost filesystem error report for type 5 error -117 [ 523.416476][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 523.430276][ C1] EXT4-fs (loop4): initial error at time 2000000735: ext4_validate_block_bitmap:441 [ 523.439711][ C1] EXT4-fs (loop4): last error at time 2000000735: ext4_validate_block_bitmap:441 [ 523.465173][T17151] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.4260: bit already cleared for inode 11 [ 523.478147][T17151] loop4: lost filesystem error report for type 5 error -117 [ 523.481827][T17151] EXT4-fs (loop4): 1 orphan inode deleted [ 523.546225][ T8893] Bluetooth: hci0: Frame reassembly failed (-84) [ 523.557275][T17151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.575296][T17163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4265'. [ 523.587595][T17151] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4260'. [ 523.893378][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b4f7800: rx timeout, send abort [ 524.393453][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a6cbc00: rx timeout, send abort [ 524.401851][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b4f7800: abort rx timeout. Force session deactivation [ 524.425110][T12656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.522887][ T28] audit: type=1400 audit(2000000736.497:1404): avc: denied { read } for pid=17284 comm="syz.4.4269" path="socket:[57276]" dev="sockfs" ino=57276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 524.612118][T17298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.632519][T17298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.695107][T17298] loop4: detected capacity change from 0 to 2048 [ 524.851366][ T1041] IPVS: starting estimator thread 0... [ 524.889289][T17298] loop4: p2 < > p3 p4 [ 524.896635][T17298] loop4: p3 start 65535 is beyond EOD, truncated [ 524.903218][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a6cbc00: abort rx timeout. Force session deactivation [ 524.919901][T17298] loop4: p4 size 8192 extends beyond EOD, truncated [ 524.977050][T17310] IPVS: using max 2304 ests per chain, 115200 per kthread [ 525.559984][T15399] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 526.095561][ T28] audit: type=1400 audit(2000000738.047:1405): avc: denied { ioctl } for pid=17325 comm="syz.6.4281" path="socket:[57432]" dev="sockfs" ino=57432 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 526.128572][T17323] loop5: detected capacity change from 0 to 512 [ 526.182912][T17323] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4280: bg 0: block 127: padding at end of block bitmap is not set [ 526.232400][T17323] loop5: lost filesystem error report for type 5 error -117 [ 526.236976][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 526.250760][ C1] EXT4-fs (loop5): initial error at time 2000000738: ext4_validate_block_bitmap:441 [ 526.260210][ C1] EXT4-fs (loop5): last error at time 2000000738: ext4_validate_block_bitmap:441 [ 526.282144][T17323] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.4280: bit already cleared for inode 11 [ 526.309894][T17337] Cannot find del_set index 0 as target [ 526.323288][T17323] loop5: lost filesystem error report for type 5 error -117 [ 526.326100][T17323] EXT4-fs (loop5): 1 orphan inode deleted [ 526.440968][T17323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.465965][T17323] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4280'. [ 526.476407][T17341] veth3: entered allmulticast mode [ 526.506504][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.731817][ T8875] Bluetooth: hci0: Frame reassembly failed (-84) [ 526.829930][T17352] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4289'. [ 526.966900][T17355] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4291'. [ 526.978858][T17355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.120534][T17367] netlink: 424 bytes leftover after parsing attributes in process `syz.0.4297'. [ 527.130001][T17367] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 527.200434][T17373] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4299'. [ 528.034673][ T28] audit: type=1400 audit(2000000739.977:1406): avc: denied { connect } for pid=17404 comm="syz.4.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 528.757077][ T3700] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 528.829475][T17419] loop6: detected capacity change from 0 to 1764 [ 528.972425][ T28] audit: type=1326 audit(2000000740.917:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.6.4318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cdabbce59 code=0x0 [ 529.037431][T17430] SELinux: policydb magic number 0xd49127a5 does not match expected magic number 0xf97cff8c [ 529.052439][T17430] SELinux: failed to load policy [ 529.071143][T17432] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 529.146824][T17440] loop5: detected capacity change from 0 to 256 [ 529.177054][T17440] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 529.263719][T17445] loop6: detected capacity change from 0 to 764 [ 529.271008][T17445] iso9660: Unknown parameter 'ocompsess' [ 529.303706][T17445] lo speed is unknown, defaulting to 1000 [ 529.475024][T17445] netlink: 208 bytes leftover after parsing attributes in process `syz.6.4318'. [ 529.484298][T17445] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4318'. [ 529.525196][T17443] FAULT_INJECTION: forcing a failure. [ 529.525196][T17443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.582150][T17440] FAULT_INJECTION: forcing a failure. [ 529.582150][T17440] name failslab, interval 1, probability 0, space 0, times 0 [ 529.694592][T17443] CPU: 0 UID: 0 PID: 17443 Comm: syz.0.4326 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 529.694685][T17443] Tainted: [W]=WARN [ 529.694695][T17443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.694709][T17443] Call Trace: [ 529.694715][T17443] [ 529.694723][T17443] __dump_stack+0x1d/0x30 [ 529.694748][T17443] dump_stack_lvl+0x95/0xd0 [ 529.694811][T17443] dump_stack+0x15/0x1b [ 529.694837][T17443] should_fail_ex+0x25e/0x270 [ 529.694871][T17443] should_fail+0xb/0x20 [ 529.694897][T17443] should_fail_usercopy+0x1a/0x20 [ 529.694969][T17443] _copy_from_user+0x1c/0xb0 [ 529.694991][T17443] __sys_bpf+0x1e2/0xc30 [ 529.695038][T17443] __x64_sys_bpf+0x69/0x80 [ 529.695069][T17443] x64_sys_call+0x10cb/0x3020 [ 529.695163][T17443] do_syscall_64+0x136/0x3c0 [ 529.695195][T17443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.695217][T17443] RIP: 0033:0x7f217010ce59 [ 529.695232][T17443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.695271][T17443] RSP: 002b:00007f216eb67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.695298][T17443] RAX: ffffffffffffffda RBX: 00007f2170385fa0 RCX: 00007f217010ce59 [ 529.695358][T17443] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 529.695375][T17443] RBP: 00007f216eb67090 R08: 0000000000000000 R09: 0000000000000000 [ 529.695393][T17443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.695410][T17443] R13: 00007f2170386038 R14: 00007f2170385fa0 R15: 00007ffe37637558 [ 529.695436][T17443] [ 529.749966][T17440] CPU: 1 UID: 0 PID: 17440 Comm: syz.5.4325 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 529.750137][T17440] Tainted: [W]=WARN [ 529.750159][T17440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.750206][T17440] Call Trace: [ 529.750234][T17440] [ 529.750256][T17440] __dump_stack+0x1d/0x30 [ 529.750346][T17440] dump_stack_lvl+0x95/0xd0 [ 529.750417][T17440] dump_stack+0x15/0x1b [ 529.750476][T17440] should_fail_ex+0x25e/0x270 [ 529.750604][T17440] should_failslab+0x8c/0xb0 [ 529.750688][T17440] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 529.750757][T17440] ? do_getname+0x2e/0x1c0 [ 529.750835][T17440] ? do_getname+0x2e/0x1c0 [ 529.750919][T17440] do_getname+0x2e/0x1c0 [ 529.750996][T17440] getname_flags+0x1d/0x30 [ 529.751144][T17440] do_sys_openat2+0x6c/0x130 [ 529.751249][T17440] __x64_sys_openat+0xf2/0x120 [ 529.751409][T17440] x64_sys_call+0x1e39/0x3020 [ 529.751551][T17440] do_syscall_64+0x136/0x3c0 [ 529.751657][T17440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.751737][T17440] RIP: 0033:0x7f5064d3ce59 [ 529.751784][T17440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.751857][T17440] RSP: 002b:00007f506378f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.751915][T17440] RAX: ffffffffffffffda RBX: 00007f5064fb5fa0 RCX: 00007f5064d3ce59 [ 529.751960][T17440] RDX: 000000000000275a RSI: 0000200000000840 RDI: ffffffffffffff9c [ 529.751998][T17440] RBP: 00007f506378f090 R08: 0000000000000000 R09: 0000000000000000 [ 529.752031][T17440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.752131][T17440] R13: 00007f5064fb6038 R14: 00007f5064fb5fa0 R15: 00007ffd4db5b748 [ 529.752186][T17440] [ 530.121142][ T28] audit: type=1326 audit(2000000742.097:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bd96ce59 code=0x7ffc0000 [ 530.200607][ T28] audit: type=1326 audit(2000000742.097:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f22bd96ce59 code=0x7ffc0000 [ 530.226134][ T28] audit: type=1326 audit(2000000742.097:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bd96ce59 code=0x7ffc0000 [ 530.251679][ T28] audit: type=1326 audit(2000000742.097:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22bd96ce59 code=0x7ffc0000 [ 530.301379][ T28] audit: type=1326 audit(2000000742.097:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bd96ce59 code=0x7ffc0000 [ 530.328748][ T28] audit: type=1326 audit(2000000742.097:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22bd96ce59 code=0x7ffc0000 [ 530.366305][ T28] audit: type=1326 audit(2000000742.097:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bd96ce59 code=0x7ffc0000 [ 530.427114][ T28] audit: type=1326 audit(2000000742.097:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f22bd96ce59 code=0x7ffc0000 [ 530.709970][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 530.771713][T17506] netlink: 'syz.4.4338': attribute type 2 has an invalid length. [ 530.906029][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'. [ 530.973984][T17538] netlink: 'syz.3.4339': attribute type 2 has an invalid length. [ 531.173212][T17579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4341'. [ 531.192043][T17579] lo: entered promiscuous mode [ 531.197210][T17579] lo: entered allmulticast mode [ 531.228111][T17582] loop5: detected capacity change from 0 to 1024 [ 531.234957][T17582] ext4: Unknown parameter 'nouser_xattr' [ 531.241227][T17580] x_tables: duplicate entry at hook 2 [ 531.361322][T17582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.458645][T17593] netlink: 'syz.5.4350': attribute type 4 has an invalid length. [ 531.467897][T17593] .`: renamed from bond0 [ 531.506708][T17594] netlink: 'syz.3.4351': attribute type 27 has an invalid length. [ 531.526023][T17595] loop5: detected capacity change from 0 to 512 [ 531.533969][T17595] EXT4-fs: Ignoring removed i_version option [ 531.552388][T17594] bond0: (slave bond_slave_1): Releasing backup interface [ 531.566640][T17595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.582021][T17595] EXT4-fs: Mount option(s) incompatible with ext3 [ 531.642969][T17597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17597 comm=syz.0.4352 [ 531.822731][T17614] netlink: 'syz.0.4359': attribute type 3 has an invalid length. [ 531.839991][T17614] __nla_validate_parse: 3 callbacks suppressed [ 531.840007][T17614] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4359'. [ 531.869876][T17619] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 532.030231][T17625] loop5: detected capacity change from 0 to 4096 [ 532.166793][T17625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.317702][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4364'. [ 532.545165][T17631] netlink: 'syz.6.4364': attribute type 2 has an invalid length. [ 532.932704][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4362'. [ 532.998360][T17622] bond1 (unregistering): Released all slaves [ 533.024679][T17645] lo speed is unknown, defaulting to 1000 [ 533.080986][T17624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4363'. [ 533.163094][T17647] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4367'. [ 533.594981][T17653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4369'. [ 533.631801][T17653] geneve2: entered allmulticast mode [ 533.718472][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 533.718489][ T28] audit: type=1400 audit(2000000745.657:1438): avc: denied { bind } for pid=17654 comm="syz.3.4371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 533.791073][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.816447][ T28] audit: type=1400 audit(2000000745.787:1439): avc: denied { connect } for pid=17660 comm="syz.4.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 533.836042][ T28] audit: type=1400 audit(2000000745.797:1440): avc: denied { read write } for pid=17666 comm="syz.0.4376" name="file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 533.860518][T17662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4372'. [ 533.886023][ T28] audit: type=1400 audit(2000000745.797:1441): avc: denied { open } for pid=17666 comm="syz.0.4376" path="/133/file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 533.918691][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4377'. [ 533.931491][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4376'. [ 533.969348][ T28] audit: type=1400 audit(2000000745.797:1442): avc: denied { ioctl } for pid=17666 comm="syz.0.4376" path="/133/file0" dev="tmpfs" ino=726 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 533.993707][ T28] audit: type=1400 audit(2000000745.797:1443): avc: denied { rename } for pid=17666 comm="syz.0.4376" name="file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 534.016275][ T28] audit: type=1400 audit(2000000745.877:1444): avc: denied { map } for pid=17668 comm="syz.5.4375" path="/160" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 534.051681][T17672] netlink: 'syz.6.4377': attribute type 2 has an invalid length. [ 534.109465][ T28] audit: type=1400 audit(2000000746.087:1445): avc: denied { name_bind } for pid=17686 comm="syz.3.4382" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 534.143069][T17689] loop5: detected capacity change from 0 to 1024 [ 534.151902][T17689] EXT4-fs: Ignoring removed orlov option [ 534.302020][T17689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.327427][T17689] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4384'. [ 534.336778][ T28] audit: type=1400 audit(2000000746.277:1446): avc: denied { setattr } for pid=17688 comm="syz.5.4384" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 534.881916][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.973912][T17775] loop4: detected capacity change from 0 to 1024 [ 536.031297][T17775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.142509][T12656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.211478][T17792] netlink: 'syz.0.4399': attribute type 2 has an invalid length. [ 536.268731][T17800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.277381][T17800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.373657][T17800] loop4: detected capacity change from 0 to 2048 [ 536.391412][T17797] 9pnet_fd: p9_fd_create_tcp (17797): problem connecting socket to 127.0.0.1 [ 536.464243][T17800] loop4: p2 < > p3 p4 [ 536.470747][T17800] loop4: p3 start 65535 is beyond EOD, truncated [ 536.477122][T17800] loop4: p4 size 8192 extends beyond EOD, truncated [ 536.558547][ T2981] loop4: p2 < > p3 p4 [ 536.563246][ T2981] loop4: p3 start 65535 is beyond EOD, truncated [ 536.576143][ T2981] loop4: p4 size 8192 extends beyond EOD, truncated [ 536.877790][T17838] loop5: detected capacity change from 0 to 4096 [ 536.940489][T17838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.038746][ T28] audit: type=1400 audit(2000000748.967:1447): avc: denied { write } for pid=17828 comm="syz.5.4406" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.950447][T17885] __nla_validate_parse: 2 callbacks suppressed [ 537.950467][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4412'. [ 538.093539][T17883] loop6: detected capacity change from 0 to 1024 [ 538.108059][T17883] ext4: Unknown parameter 'nouser_xattr' [ 538.139035][T17883] loop6: detected capacity change from 0 to 1024 [ 538.161511][T17883] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 538.231034][T17895] netlink: 'syz.0.4412': attribute type 2 has an invalid length. [ 538.625013][T17883] netlink: 6 bytes leftover after parsing attributes in process `syz.6.4411'. [ 538.636156][T17883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.651506][ T1041] lo speed is unknown, defaulting to 1000 [ 538.657871][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.933019][T17935] xt_NFQUEUE: number of total queues is 0 [ 538.970388][T17934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.979259][T17934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.597274][T17934] loop6: detected capacity change from 0 to 2048 [ 539.628990][T17975] loop4: detected capacity change from 0 to 512 [ 539.638690][T17975] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4421: bg 0: block 127: padding at end of block bitmap is not set [ 539.653024][T17975] loop4: lost filesystem error report for type 5 error -117 [ 539.660147][T17975] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.4421: bit already cleared for inode 11 [ 539.678583][T17975] loop4: lost filesystem error report for type 5 error -117 [ 539.680240][T17975] EXT4-fs (loop4): 1 orphan inode deleted [ 539.693348][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4425'. [ 539.706210][T17975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.727026][T17975] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4421'. [ 539.738988][T17934] loop6: p2 < > p3 p4 [ 539.749081][T17934] loop6: p3 start 65535 is beyond EOD, truncated [ 539.755477][T17934] loop6: p4 size 8192 extends beyond EOD, truncated [ 539.765826][ T2981] loop6: p2 < > p3 p4 [ 539.772345][ T2981] loop6: p3 start 65535 is beyond EOD, truncated [ 539.778720][ T2981] loop6: p4 size 8192 extends beyond EOD, truncated [ 539.807733][T17984] netlink: 'syz.5.4425': attribute type 2 has an invalid length. [ 540.147097][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b7d4400: rx timeout, send abort [ 540.521368][T18068] hub 8-0:1.0: USB hub found [ 540.526095][T18068] hub 8-0:1.0: 8 ports detected [ 540.576120][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b7c3e00: rx timeout, send abort [ 540.655478][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b7d4400: abort rx timeout. Force session deactivation [ 540.721727][T12656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.753339][T18083] FAULT_INJECTION: forcing a failure. [ 540.753339][T18083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.766441][T18083] CPU: 0 UID: 0 PID: 18083 Comm: syz.6.4435 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 540.766564][T18083] Tainted: [W]=WARN [ 540.766606][T18083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.766620][T18083] Call Trace: [ 540.766627][T18083] [ 540.766712][T18083] __dump_stack+0x1d/0x30 [ 540.766755][T18083] dump_stack_lvl+0x95/0xd0 [ 540.766784][T18083] dump_stack+0x15/0x1b [ 540.766865][T18083] should_fail_ex+0x25e/0x270 [ 540.766902][T18083] should_fail+0xb/0x20 [ 540.766934][T18083] should_fail_usercopy+0x1a/0x20 [ 540.767010][T18083] _copy_from_user+0x1c/0xb0 [ 540.767081][T18083] proc_ioctl_default+0x43/0xa0 [ 540.767106][T18083] usbdev_ioctl+0xe16/0x16a0 [ 540.767195][T18083] ? __pfx_usbdev_ioctl+0x10/0x10 [ 540.767218][T18083] __se_sys_ioctl+0xce/0x140 [ 540.767243][T18083] __x64_sys_ioctl+0x43/0x50 [ 540.767280][T18083] x64_sys_call+0x1563/0x3020 [ 540.767390][T18083] do_syscall_64+0x136/0x3c0 [ 540.767443][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.767545][T18083] RIP: 0033:0x7f3cdabbce59 [ 540.767562][T18083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.767581][T18083] RSP: 002b:00007f3cd9617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.767615][T18083] RAX: ffffffffffffffda RBX: 00007f3cdae35fa0 RCX: 00007f3cdabbce59 [ 540.767634][T18083] RDX: 00002000000000c0 RSI: 00000000c0105512 RDI: 0000000000000005 [ 540.767651][T18083] RBP: 00007f3cd9617090 R08: 0000000000000000 R09: 0000000000000000 [ 540.767668][T18083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.767684][T18083] R13: 00007f3cdae36038 R14: 00007f3cdae35fa0 R15: 00007ffd98eff828 [ 540.767744][T18083] [ 540.982228][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4439'. [ 541.051827][T18115] netlink: 'syz.3.4439': attribute type 2 has an invalid length. [ 541.084417][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b7c3e00: abort rx timeout. Force session deactivation [ 541.148724][T18134] 9p: Bad value for 'rfdno' [ 541.166708][ T28] audit: type=1400 audit(2000000753.127:1448): avc: denied { listen } for pid=18105 comm="syz.4.4437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 541.296870][ T28] audit: type=1400 audit(2000000753.267:1449): avc: denied { setopt } for pid=18153 comm="syz.5.4447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 541.453887][T18160] loop6: detected capacity change from 0 to 512 [ 541.479451][T18160] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4448: bg 0: block 127: padding at end of block bitmap is not set [ 541.500746][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4452'. [ 541.521677][T18160] loop6: lost filesystem error report for type 5 error -117 [ 541.522391][T18160] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.4448: bit already cleared for inode 11 [ 541.541016][T18160] loop6: lost filesystem error report for type 5 error -117 [ 541.541242][T18160] EXT4-fs (loop6): 1 orphan inode deleted [ 541.554775][T18160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.603765][T18160] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4448'. [ 541.635537][T18181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 541.897983][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ba9b800: rx timeout, send abort [ 542.154174][T18256] loop5: detected capacity change from 0 to 512 [ 542.428071][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a6dae00: rx timeout, send abort [ 542.437900][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ba9b800: abort rx timeout. Force session deactivation [ 542.468487][T15637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.489493][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4463'. [ 542.729172][T18336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.750551][T18336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.758981][T18342] FAULT_INJECTION: forcing a failure. [ 542.758981][T18342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.773012][T18342] CPU: 1 UID: 0 PID: 18342 Comm: syz.0.4470 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 542.773124][T18342] Tainted: [W]=WARN [ 542.773135][T18342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.773151][T18342] Call Trace: [ 542.773160][T18342] [ 542.773170][T18342] __dump_stack+0x1d/0x30 [ 542.773250][T18342] dump_stack_lvl+0x95/0xd0 [ 542.773271][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4471'. [ 542.773274][T18342] dump_stack+0x15/0x1b [ 542.773400][T18342] should_fail_ex+0x25e/0x270 [ 542.773538][T18342] should_fail+0xb/0x20 [ 542.773615][T18342] should_fail_usercopy+0x1a/0x20 [ 542.773704][T18342] _copy_to_user+0x20/0xa0 [ 542.773855][T18342] simple_read_from_buffer+0xb5/0x130 [ 542.773941][T18342] proc_fail_nth_read+0x10e/0x150 [ 542.774017][T18342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.774078][T18342] vfs_read+0x18e/0x7c0 [ 542.774261][T18342] ? __rcu_read_unlock+0x4e/0x70 [ 542.774346][T18342] ? __fget_files+0x184/0x1c0 [ 542.774477][T18342] ? mutex_lock+0x57/0x90 [ 542.774560][T18342] ksys_read+0xdc/0x1a0 [ 542.774623][T18342] __x64_sys_read+0x40/0x50 [ 542.774711][T18342] x64_sys_call+0x2886/0x3020 [ 542.774875][T18342] do_syscall_64+0x136/0x3c0 [ 542.775049][T18342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.775129][T18342] RIP: 0033:0x7f21700cd68e [ 542.775227][T18342] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 542.775295][T18342] RSP: 002b:00007f216eb66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 542.775357][T18342] RAX: ffffffffffffffda RBX: 00007f216eb676c0 RCX: 00007f21700cd68e [ 542.775409][T18342] RDX: 000000000000000f RSI: 00007f216eb670a0 RDI: 0000000000000007 [ 542.775453][T18342] RBP: 00007f216eb67090 R08: 0000000000000000 R09: 0000000000000000 [ 542.775495][T18342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.775601][T18342] R13: 00007f2170386038 R14: 00007f2170385fa0 R15: 00007ffe37637558 [ 542.775671][T18342] [ 542.831825][T18336] loop4: detected capacity change from 0 to 2048 [ 542.859056][ T28] audit: type=1400 audit(2000000754.837:1450): avc: denied { getopt } for pid=18339 comm="syz.5.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 542.881746][T18347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4468'. [ 542.883022][T18347] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 542.938928][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a6dae00: abort rx timeout. Force session deactivation [ 543.081157][T18336] loop4: p2 < > p3 p4 [ 543.087308][T18336] loop4: p3 start 65535 is beyond EOD, truncated [ 543.094411][T18336] loop4: p4 size 8192 extends beyond EOD, truncated [ 543.129191][ T2981] loop4: p2 < > p3 p4 [ 543.139795][ T2981] loop4: p3 start 65535 is beyond EOD, truncated [ 543.153433][ T2981] loop4: p4 size 8192 extends beyond EOD, truncated [ 543.215196][T18359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4474'. [ 543.381320][ T8903] Bluetooth: hci0: Frame reassembly failed (-84) [ 544.115779][T18459] netlink: 'syz.4.4484': attribute type 13 has an invalid length. [ 544.193896][T18459] gretap0: refused to change device tx_queue_len [ 544.206030][T18459] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 544.224915][T18462] netlink: 'syz.3.4485': attribute type 4 has an invalid length. [ 544.306361][ T28] audit: type=1400 audit(2000000756.277:1451): avc: denied { create } for pid=18468 comm="syz.5.4489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 544.328712][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4491'. [ 544.387698][ T28] audit: type=1400 audit(2000000756.367:1452): avc: denied { write } for pid=18479 comm="syz.0.4493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 544.455285][T18482] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4492'. [ 544.464171][T18482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.510433][T18484] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18484 comm=syz.0.4493 [ 544.511342][T18469] netlink: 34 bytes leftover after parsing attributes in process `syz.5.4489'. [ 544.637310][T18487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.647861][T18487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.767286][T18487] loop5: detected capacity change from 0 to 2048 [ 544.819727][T18487] loop5: p2 < > p3 p4 [ 544.826127][T18487] loop5: p3 start 65535 is beyond EOD, truncated [ 544.833233][T18487] loop5: p4 size 8192 extends beyond EOD, truncated [ 545.397042][ T3700] Bluetooth: hci0: command 0x1003 tx timeout [ 545.403229][T15399] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 545.566467][T18513] loop6: detected capacity change from 0 to 1764 [ 545.724753][T18516] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 545.733232][T18516] bond0: option packets_per_slave: allowed values 0 - 65535 [ 545.779900][T18516] bond0 (unregistering): Released all slaves [ 546.000134][T18533] loop6: detected capacity change from 0 to 128 [ 546.310370][T18564] loop6: detected capacity change from 0 to 1024 [ 546.328854][T18564] ext4: Unknown parameter 'nouser_xattr' [ 546.363352][T18564] loop6: detected capacity change from 0 to 1024 [ 546.383924][T18564] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 546.546070][T18564] netlink: 6 bytes leftover after parsing attributes in process `syz.6.4505'. [ 546.654979][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4507'. [ 546.663848][T18564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.762114][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4504'. [ 546.903162][T18583] 9p: Bad value for 'rfdno' [ 547.009389][ T8895] Bluetooth: hci0: Frame reassembly failed (-84) [ 547.073077][T18592] netlink: 'syz.5.4514': attribute type 13 has an invalid length. [ 547.097848][T18592] gretap0: refused to change device tx_queue_len [ 547.104420][T18592] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 547.320456][T18594] loop5: detected capacity change from 0 to 512 [ 547.515849][T18600] loop5: detected capacity change from 0 to 512 [ 547.625439][T18605] loop4: detected capacity change from 0 to 1024 [ 547.648528][T18605] ext4: Unknown parameter 'nouser_xattr' [ 547.685847][T18605] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4519'. [ 547.697716][T18605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.717852][T18600] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4517: bg 0: block 127: padding at end of block bitmap is not set [ 547.732144][T18600] loop5: lost filesystem error report for type 5 error -117 [ 547.739934][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 547.741707][T18600] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.4517: bit already cleared for inode 11 [ 547.747342][ C1] EXT4-fs (loop5): initial error at time 2000000759: ext4_validate_block_bitmap:441 [ 547.753683][T18600] loop5: lost filesystem error report for type 5 error -117 [ 547.764738][ C1] [ 547.774631][T18600] EXT4-fs (loop5): 1 orphan inode deleted [ 547.781453][ C1] EXT4-fs (loop5): last error at time 2000000759: ext4_free_inode:356 [ 547.784828][T18600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.789493][ C1] [ 547.807965][T18600] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4517'. [ 547.833092][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.884296][T18611] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 547.892038][T18611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.901241][T18611] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4520'. [ 547.901735][T18610] tmpfs: Unknown parameter '' [ 548.070238][T18629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18629 comm=syz.5.4520 [ 548.242358][T18635] loop5: detected capacity change from 0 to 512 [ 548.264854][T18635] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 548.291586][T18635] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.5.4530: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 548.329987][T18635] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 548.337089][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 548.352718][ C1] EXT4-fs (loop5): initial error at time 2000000760: ext4_map_blocks:791: inode 15: block 1803188595 [ 548.363633][ C1] EXT4-fs (loop5): last error at time 2000000760: ext4_map_blocks:791: inode 15: block 1803188595 [ 548.506357][T18639] random: crng reseeded on system resumption [ 548.633590][T18635] EXT4-fs (loop5): Remounting filesystem read-only [ 548.645642][T18635] EXT4-fs (loop5): mount failed [ 548.657758][ T28] audit: type=1400 audit(2000000760.477:1453): avc: denied { read } for pid=18628 comm="syz.0.4528" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 548.808932][ T28] audit: type=1400 audit(2000000760.477:1454): avc: denied { ioctl } for pid=18628 comm="syz.0.4528" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 548.965570][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.974510][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.985651][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.996442][ T28] audit: type=1400 audit(2000000760.907:1455): avc: denied { write } for pid=18637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.007112][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.039657][ T28] audit: type=1400 audit(2000000760.927:1456): avc: denied { write } for pid=18651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.077363][ T3700] Bluetooth: hci0: command 0x1003 tx timeout [ 549.083516][T15399] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 549.147733][T18657] loop5: detected capacity change from 0 to 512 [ 549.183468][T18657] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4531: bg 0: block 127: padding at end of block bitmap is not set [ 549.204736][T18665] loop6: detected capacity change from 0 to 1024 [ 549.211352][T18657] loop5: lost filesystem error report for type 5 error -117 [ 549.211696][T18657] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.4531: bit already cleared for inode 11 [ 549.230048][T18657] loop5: lost filesystem error report for type 5 error -117 [ 549.234449][T18661] __nla_validate_parse: 1 callbacks suppressed [ 549.234466][T18661] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4532'. [ 549.257732][T18661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.258616][T18657] EXT4-fs (loop5): 1 orphan inode deleted [ 549.280081][T18665] EXT4-fs: Ignoring removed orlov option [ 549.307356][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 549.314056][ C0] EXT4-fs (loop5): initial error at time 2000000761: ext4_validate_block_bitmap:441 [ 549.323656][ C0] EXT4-fs (loop5): last error at time 2000000761: ext4_free_inode:356 [ 549.326235][T18657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.382020][T18657] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4531'. [ 549.447884][T18665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.465144][ T28] audit: type=1400 audit(2000000761.437:1457): avc: denied { write } for pid=18668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.540729][ T28] audit: type=1400 audit(2000000761.497:1458): avc: denied { write } for pid=18680 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.570595][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.585666][T18665] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 549.595928][T18665] netlink: 'syz.6.4533': attribute type 4 has an invalid length. [ 549.604076][ T28] audit: type=1400 audit(2000000761.547:1459): avc: denied { bind } for pid=18663 comm="syz.6.4533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 549.624277][T18665] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4533'. [ 549.776195][T15637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.783679][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4537'. [ 549.874722][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4539'. [ 550.013051][T18713] loop5: detected capacity change from 0 to 512 [ 550.028308][ T8865] Bluetooth: hci0: Frame reassembly failed (-84) [ 550.104958][T18719] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4546'. [ 550.114302][T18719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.132080][T18713] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4544: bg 0: block 127: padding at end of block bitmap is not set [ 550.146368][T18713] loop5: lost filesystem error report for type 5 error -117 [ 550.146819][T18713] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.4544: bit already cleared for inode 11 [ 550.154368][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 550.154395][ C1] EXT4-fs (loop5): initial error at time 2000000762: ext4_validate_block_bitmap:441 [ 550.154597][ C1] EXT4-fs (loop5): last error at time 2000000762: ext4_validate_block_bitmap:441 [ 550.217582][T18713] loop5: lost filesystem error report for type 5 error -117 [ 550.311519][T18713] EXT4-fs (loop5): 1 orphan inode deleted [ 550.363170][T18713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.431969][T18713] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4544'. [ 550.628508][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.873021][T18727] lo speed is unknown, defaulting to 1000 [ 551.194491][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4552'. [ 551.265739][T18741] dvmrp0: entered allmulticast mode [ 551.499398][T18746] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4554'. [ 551.508610][T18746] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4554'. [ 551.517704][T18746] netlink: 'syz.0.4554': attribute type 5 has an invalid length. [ 551.567162][T18748] netlink: 'syz.0.4555': attribute type 2 has an invalid length. [ 551.623976][T18759] netlink: 'syz.0.4559': attribute type 1 has an invalid length. [ 551.639907][T18759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.884403][T18769] SELinux: Context system_u:object is not valid (left unmapped). [ 551.911653][ T28] audit: type=1400 audit(2000000763.867:1460): avc: denied { relabelto } for pid=18761 comm="syz.5.4560" name="cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 551.937441][ T28] audit: type=1400 audit(2000000763.867:1461): avc: denied { associate } for pid=18761 comm="syz.5.4560" name="cgroup.procs" dev="cgroup" ino=347 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 552.038530][T15399] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 553.231523][T18782] netlink: 'syz.4.4566': attribute type 2 has an invalid length. [ 553.445724][ T28] audit: type=1400 audit(2000000765.417:1462): avc: denied { create } for pid=18789 comm="syz.6.4568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 553.572544][T18793] loop6: detected capacity change from 0 to 1764 [ 553.914329][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 553.914349][ T28] audit: type=1400 audit(2000000765.887:1464): avc: denied { read write } for pid=18798 comm="syz.6.4571" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 554.015686][ T28] audit: type=1400 audit(2000000765.887:1465): avc: denied { open } for pid=18798 comm="syz.6.4571" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 554.105143][ T28] audit: type=1400 audit(2000000765.927:1466): avc: denied { ioctl } for pid=18798 comm="syz.6.4571" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 554.150184][ T28] audit: type=1400 audit(2000000765.957:1467): avc: denied { name_bind } for pid=18801 comm="syz.5.4572" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 554.202197][T18805] FAULT_INJECTION: forcing a failure. [ 554.202197][T18805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.226140][T18805] CPU: 1 UID: 0 PID: 18805 Comm: syz.5.4573 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 554.226256][T18805] Tainted: [W]=WARN [ 554.226265][T18805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.226281][T18805] Call Trace: [ 554.226289][T18805] [ 554.226299][T18805] __dump_stack+0x1d/0x30 [ 554.226328][T18805] dump_stack_lvl+0x95/0xd0 [ 554.226352][T18805] dump_stack+0x15/0x1b [ 554.226452][T18805] should_fail_ex+0x25e/0x270 [ 554.226511][T18805] should_fail+0xb/0x20 [ 554.226540][T18805] should_fail_usercopy+0x1a/0x20 [ 554.226575][T18805] strncpy_from_user+0x27/0x250 [ 554.226623][T18805] __x64_sys_getxattr+0xa5/0x150 [ 554.226696][T18805] x64_sys_call+0x24ce/0x3020 [ 554.226749][T18805] do_syscall_64+0x136/0x3c0 [ 554.226790][T18805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.226828][T18805] RIP: 0033:0x7f5064d3ce59 [ 554.226849][T18805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.226872][T18805] RSP: 002b:00007f506378f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 554.226962][T18805] RAX: ffffffffffffffda RBX: 00007f5064fb5fa0 RCX: 00007f5064d3ce59 [ 554.227060][T18805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.227075][T18805] RBP: 00007f506378f090 R08: 0000000000000000 R09: 0000000000000000 [ 554.227091][T18805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.227184][T18805] R13: 00007f5064fb6038 R14: 00007f5064fb5fa0 R15: 00007ffd4db5b748 [ 554.227209][T18805] [ 554.557168][T18825] loop5: detected capacity change from 0 to 256 [ 554.563642][T18818] loop4: detected capacity change from 0 to 512 [ 554.564418][T18825] vfat: Unknown parameter 'check.relaxed' [ 554.576478][T18823] loop6: detected capacity change from 0 to 1024 [ 554.653138][T18823] ext4: Unknown parameter 'nouser_xattr' [ 554.917533][T18818] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4577: bg 0: block 127: padding at end of block bitmap is not set [ 554.931861][T18818] loop4: lost filesystem error report for type 5 error -117 [ 554.934684][T18818] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.4577: bit already cleared for inode 11 [ 554.953046][T18818] loop4: lost filesystem error report for type 5 error -117 [ 554.953297][T18818] EXT4-fs (loop4): 1 orphan inode deleted [ 554.966926][T18818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.980794][T18823] __nla_validate_parse: 4 callbacks suppressed [ 554.980808][T18823] netlink: 6 bytes leftover after parsing attributes in process `syz.6.4579'. [ 554.998415][T18823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.026322][T18818] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4577'. [ 555.375194][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b767400: rx timeout, send abort [ 555.875219][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b599800: rx timeout, send abort [ 555.883493][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b767400: abort rx timeout. Force session deactivation [ 556.383490][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b599800: abort rx timeout. Force session deactivation [ 556.409000][T12656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.061399][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 557.510196][T18854] netlink: 'syz.6.4586': attribute type 2 has an invalid length. [ 558.179237][T18875] loop5: detected capacity change from 0 to 512 [ 558.206278][T18878] loop4: detected capacity change from 0 to 256 [ 558.222361][T18878] vfat: Unknown parameter 'check.relaxed' [ 558.308321][T18875] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 558.319912][T18875] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 558.330049][T18875] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4596: Corrupt directory, running e2fsck is recommended [ 558.401272][T18875] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 558.409551][T18875] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4596: corrupted in-inode xattr: e_name out of bounds [ 558.423405][T18875] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 558.468681][T18873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4594'. [ 558.486930][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 558.486965][ C0] EXT4-fs (loop5): initial error at time 2000000770: ext4_iget_extra_inode:5180: inode 15 [ 558.487017][ C0] EXT4-fs (loop5): last error at time 2000000770: ext4_iget_extra_inode:5180: inode 15 [ 558.520562][T18886] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4598'. [ 558.530164][T18886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.548530][T18875] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4596: couldn't read orphan inode 15 (err -117) [ 558.560463][T18875] loop5: lost filesystem error report for type 5 error -117 [ 558.572569][T18875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.780289][T18873] bond1 (unregistering): Released all slaves [ 558.809432][T18875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.900958][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4602'. [ 558.973065][T18915] netlink: 'syz.3.4602': attribute type 2 has an invalid length. [ 559.022365][T18925] xt_CT: No such helper "snmp_trap" [ 559.028847][T18875] loop5: detected capacity change from 0 to 512 [ 559.066325][T18875] EXT4-fs: Ignoring removed nobh option [ 559.160277][T18942] netlink: 'syz.6.4605': attribute type 9 has an invalid length. [ 559.168207][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4605'. [ 559.180426][T18942] gretap0: entered promiscuous mode [ 559.185705][T18942] macvlan2: entered promiscuous mode [ 559.192106][T18942] macvlan2: entered allmulticast mode [ 559.197665][T18942] gretap0: entered allmulticast mode [ 559.373737][T18875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.391752][T18875] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 559.418740][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4596'. [ 559.459380][T18978] FAULT_INJECTION: forcing a failure. [ 559.459380][T18978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.472545][T18978] CPU: 0 UID: 0 PID: 18978 Comm: syz.4.4608 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 559.472588][T18978] Tainted: [W]=WARN [ 559.472598][T18978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 559.472611][T18978] Call Trace: [ 559.472618][T18978] [ 559.472696][T18978] __dump_stack+0x1d/0x30 [ 559.472727][T18978] dump_stack_lvl+0x95/0xd0 [ 559.472751][T18978] dump_stack+0x15/0x1b [ 559.472770][T18978] should_fail_ex+0x25e/0x270 [ 559.472861][T18978] should_fail+0xb/0x20 [ 559.472884][T18978] should_fail_usercopy+0x1a/0x20 [ 559.472918][T18978] _copy_from_user+0x1c/0xb0 [ 559.472985][T18978] __sys_bpf+0x1e2/0xc30 [ 559.473062][T18978] ? get_pid_task+0x92/0xc0 [ 559.473083][T18978] ? vfs_write+0x7a0/0x990 [ 559.473114][T18978] __x64_sys_bpf+0x69/0x80 [ 559.473149][T18978] x64_sys_call+0x10cb/0x3020 [ 559.473207][T18978] do_syscall_64+0x136/0x3c0 [ 559.473309][T18978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.473335][T18978] RIP: 0033:0x7f03a62dce59 [ 559.473354][T18978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.473376][T18978] RSP: 002b:00007f03a4d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 559.473406][T18978] RAX: ffffffffffffffda RBX: 00007f03a6555fa0 RCX: 00007f03a62dce59 [ 559.473427][T18978] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 559.473457][T18978] RBP: 00007f03a4d37090 R08: 0000000000000000 R09: 0000000000000000 [ 559.473473][T18978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.473489][T18978] R13: 00007f03a6556038 R14: 00007f03a6555fa0 R15: 00007ffe9fec5268 [ 559.473513][T18978] [ 559.473709][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.681749][T18983] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4611'. [ 559.691225][T18983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.810065][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4613'. [ 559.866756][T18989] loop5: detected capacity change from 0 to 4096 [ 559.879124][T18991] netlink: 'syz.0.4613': attribute type 2 has an invalid length. [ 559.887763][T19000] FAULT_INJECTION: forcing a failure. [ 559.887763][T19000] name failslab, interval 1, probability 0, space 0, times 0 [ 559.902423][T18989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.917110][T19000] CPU: 0 UID: 0 PID: 19000 Comm: syz.4.4616 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 559.917153][T19000] Tainted: [W]=WARN [ 559.917164][T19000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 559.917223][T19000] Call Trace: [ 559.917230][T19000] [ 559.917238][T19000] __dump_stack+0x1d/0x30 [ 559.917261][T19000] dump_stack_lvl+0x95/0xd0 [ 559.917364][T19000] dump_stack+0x15/0x1b [ 559.917385][T19000] should_fail_ex+0x25e/0x270 [ 559.917419][T19000] should_failslab+0x8c/0xb0 [ 559.917502][T19000] __kmalloc_noprof+0xd4/0x4a0 [ 559.917530][T19000] ? hci_get_dev_list+0x91/0x250 [ 559.917564][T19000] ? hci_get_dev_list+0x91/0x250 [ 559.917601][T19000] hci_get_dev_list+0x91/0x250 [ 559.917699][T19000] hci_sock_ioctl+0x4d1/0x7e0 [ 559.917804][T19000] sock_do_ioctl+0x73/0x230 [ 559.917851][T19000] sock_ioctl+0x439/0x610 [ 559.917933][T19000] ? mutex_lock+0x57/0x90 [ 559.918038][T19000] ? __pfx_sock_ioctl+0x10/0x10 [ 559.918073][T19000] __se_sys_ioctl+0xce/0x140 [ 559.918092][T19000] __x64_sys_ioctl+0x43/0x50 [ 559.918210][T19000] x64_sys_call+0x1563/0x3020 [ 559.918291][T19000] do_syscall_64+0x136/0x3c0 [ 559.918343][T19000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.918457][T19000] RIP: 0033:0x7f03a62dce59 [ 559.918549][T19000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.918574][T19000] RSP: 002b:00007f03a4d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.918617][T19000] RAX: ffffffffffffffda RBX: 00007f03a6555fa0 RCX: 00007f03a62dce59 [ 559.918636][T19000] RDX: 0000200000000000 RSI: 00000000800448d2 RDI: 0000000000000004 [ 559.918653][T19000] RBP: 00007f03a4d37090 R08: 0000000000000000 R09: 0000000000000000 [ 559.918671][T19000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.918688][T19000] R13: 00007f03a6556038 R14: 00007f03a6555fa0 R15: 00007ffe9fec5268 [ 559.918715][T19000] [ 559.920130][ T28] audit: type=1400 audit(2000000771.897:1468): avc: denied { write } for pid=18985 comm="syz.5.4609" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 560.181961][T19017] loop6: detected capacity change from 0 to 512 [ 560.305268][ T28] audit: type=1400 audit(2000000772.267:1469): avc: denied { write } for pid=19006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.326122][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4620'. [ 560.353780][ T28] audit: type=1400 audit(2000000772.307:1470): avc: denied { write } for pid=19032 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.460349][T19033] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4623'. [ 560.469499][T19041] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4626'. [ 560.470541][T19033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.491108][T19041] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4626'. [ 560.504321][T19041] netlink: 'syz.3.4626': attribute type 5 has an invalid length. [ 560.512378][T19041] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4626'. [ 560.646009][T19051] loop4: detected capacity change from 0 to 512 [ 560.664951][T19051] loop4: detected capacity change from 0 to 164 [ 560.689899][T19051] iso9660: Unknown parameter 'GPL' [ 560.829145][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.074329][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4632'. [ 561.655842][T19067] loop5: detected capacity change from 0 to 512 [ 561.665212][T19067] EXT4-fs: Ignoring removed nobh option [ 562.176279][ T28] audit: type=1400 audit(2000000774.117:1471): avc: denied { write } for pid=19068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.210454][T19083] netlink: 'syz.0.4632': attribute type 2 has an invalid length. [ 562.238152][T19086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.246761][T19086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.267265][T19067] EXT4-fs (loop5): orphan cleanup on readonly fs [ 562.283040][T19067] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.4631: EA inode hash validation failed [ 562.295646][T19067] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 562.308794][T19067] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.4631: corrupted inode contents [ 562.329673][ T28] audit: type=1400 audit(2000000774.137:1472): avc: denied { write } for pid=19081 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.488415][T19086] loop6: detected capacity change from 0 to 2048 [ 562.509467][T19067] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 562.518763][T19067] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.4631: mark_inode_dirty error [ 562.539230][T19067] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 562.559793][T19098] loop4: detected capacity change from 0 to 128 [ 562.582491][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 562.588992][ C0] EXT4-fs (loop5): initial error at time 2000000774: ext4_do_update_inode:5742: inode 15 [ 562.598881][ C0] EXT4-fs (loop5): last error at time 2000000774: ext4_dirty_inode:6639: inode 15 [ 562.622446][T19067] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.4631: corrupted inode contents [ 562.634404][T19067] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 562.637848][T19067] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.4631: mark_inode_dirty error [ 562.664036][T19100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4638'. [ 562.695662][T19067] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 562.695915][T19067] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.4631: mark inode dirty (error -117) [ 562.751163][T19067] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 562.753271][T19067] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 562.772653][T19067] EXT4-fs (loop5): 1 orphan inode deleted [ 562.773519][T19086] loop6: p2 < > p3 p4 [ 562.779629][T19067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 562.790110][T19098] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 562.794446][T19098] EXT4-fs: failed to create workqueue [ 562.811712][T19086] loop6: p3 start 65535 is beyond EOD, truncated [ 562.811844][T19086] loop6: p4 size 8192 extends beyond EOD, truncated [ 562.851179][T19098] EXT4-fs (loop4): mount failed [ 562.892270][T19111] loop4: detected capacity change from 0 to 1024 [ 562.900808][T19111] ext4: Unknown parameter 'nouser_xattr' [ 562.914698][T19111] loop4: detected capacity change from 0 to 1024 [ 562.933015][T19111] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 562.945268][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.027041][T19111] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4641'. [ 563.038133][T19111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.293740][T19118] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 563.312437][T19118] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 563.328379][T19118] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4642: Corrupt directory, running e2fsck is recommended [ 563.346286][T19118] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 563.354509][T19118] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4642: corrupted in-inode xattr: e_name out of bounds [ 563.368345][T19118] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 563.368556][T19118] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4642: couldn't read orphan inode 15 (err -117) [ 563.389496][T19118] loop5: lost filesystem error report for type 5 error -117 [ 563.390096][T19118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.483451][T19122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.507288][T19122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.596758][T19118] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 563.608312][T19118] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 563.618494][T19118] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4642: Corrupt directory, running e2fsck is recommended [ 563.631390][T19118] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.4642: path /222/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 563.691957][T19118] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz.5.4642: path /222/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 563.754843][T19124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4645'. [ 563.793744][T19124] bond5 (unregistering): Released all slaves [ 563.810815][T19133] EXT4-fs: Ignoring removed bh option [ 563.824694][T19133] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.4646: corrupted xattr block 95: invalid header [ 563.838661][T19133] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 563.838844][T19133] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 563.861308][T19133] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4646: bg 0: block 7: invalid block bitmap [ 563.873623][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 563.873642][ C0] EXT4-fs (loop6): initial error at time 2000000775: ext4_expand_extra_isize_ea:2810: inode 11 [ 563.873690][ C0] EXT4-fs (loop6): last error at time 2000000775: ext4_expand_extra_isize_ea:2810: inode 11 [ 563.903244][T19133] loop6: lost filesystem error report for type 5 error -117 [ 563.904130][T19133] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 563.932051][T19133] loop6: lost filesystem error report for type 5 error -117 [ 563.932199][T19133] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.4646: corrupted xattr block 95: invalid header [ 563.969414][T19133] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 563.969604][T19133] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 564.057725][T19133] EXT4-fs (loop6): 1 orphan inode deleted [ 564.064087][T19133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.117401][ T28] audit: type=1400 audit(2000000776.067:1473): avc: denied { write } for pid=19130 comm="syz.6.4646" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 564.609199][T19133] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4646'. [ 564.832267][T15637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.880161][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 565.092931][T19167] set_capacity_and_notify: 2 callbacks suppressed [ 565.092963][T19167] loop4: detected capacity change from 0 to 512 [ 565.150518][T19167] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 565.166764][T19167] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 565.190539][T19167] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4658: Corrupt directory, running e2fsck is recommended [ 565.217554][T19167] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 565.320481][T19167] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.4658: corrupted in-inode xattr: e_name out of bounds [ 565.335782][T19167] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 565.336966][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 565.352603][ C0] EXT4-fs (loop4): initial error at time 2000000777: ext4_iget_extra_inode:5180: inode 15 [ 565.362558][ C0] EXT4-fs (loop4): last error at time 2000000777: ext4_iget_extra_inode:5180: inode 15 [ 565.373026][T19167] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4658: couldn't read orphan inode 15 (err -117) [ 565.386106][T19167] loop4: lost filesystem error report for type 5 error -117 [ 565.394044][T19167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.429277][T19167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.480159][T19167] loop4: detected capacity change from 0 to 512 [ 565.486700][T19167] EXT4-fs: Ignoring removed nobh option [ 565.609766][T19167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.633902][T19167] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 565.659987][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.672880][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4658'. [ 565.706198][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4660'. [ 565.727986][T19175] FAULT_INJECTION: forcing a failure. [ 565.727986][T19175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.741160][T19175] CPU: 1 UID: 0 PID: 19175 Comm: syz.0.4661 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 565.741222][T19175] Tainted: [W]=WARN [ 565.741231][T19175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.741299][T19175] Call Trace: [ 565.741306][T19175] [ 565.741314][T19175] __dump_stack+0x1d/0x30 [ 565.741393][T19175] dump_stack_lvl+0x95/0xd0 [ 565.741421][T19175] dump_stack+0x15/0x1b [ 565.741442][T19175] should_fail_ex+0x25e/0x270 [ 565.741525][T19175] should_fail+0xb/0x20 [ 565.741586][T19175] should_fail_usercopy+0x1a/0x20 [ 565.741615][T19175] _copy_from_user+0x1c/0xb0 [ 565.741634][T19175] ___sys_sendmsg+0xc1/0x1e0 [ 565.741697][T19175] __x64_sys_sendmsg+0xd4/0x160 [ 565.741772][T19175] x64_sys_call+0x194c/0x3020 [ 565.741811][T19175] do_syscall_64+0x136/0x3c0 [ 565.741926][T19175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.741984][T19175] RIP: 0033:0x7f217010ce59 [ 565.742004][T19175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.742029][T19175] RSP: 002b:00007f216eb67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.742054][T19175] RAX: ffffffffffffffda RBX: 00007f2170385fa0 RCX: 00007f217010ce59 [ 565.742068][T19175] RDX: 0000000000008014 RSI: 00002000000014c0 RDI: 0000000000000006 [ 565.742131][T19175] RBP: 00007f216eb67090 R08: 0000000000000000 R09: 0000000000000000 [ 565.742143][T19175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.742156][T19175] R13: 00007f2170386038 R14: 00007f2170385fa0 R15: 00007ffe37637558 [ 565.742226][T19175] [ 565.753202][T12656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.924354][T19177] netlink: 'syz.5.4660': attribute type 2 has an invalid length. [ 566.111481][T19196] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4662'. [ 566.849648][T19217] loop5: detected capacity change from 0 to 512 [ 566.905261][T19217] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 566.917365][T15399] Bluetooth: hci0: command 0x1003 tx timeout [ 566.918341][ T3700] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 566.942446][T19217] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 566.952633][T19217] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4669: Corrupt directory, running e2fsck is recommended [ 566.966419][T19217] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 566.974780][T19217] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4669: corrupted in-inode xattr: e_name out of bounds [ 566.988642][T19217] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.988909][T19217] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4669: couldn't read orphan inode 15 (err -117) [ 567.010088][T19217] loop5: lost filesystem error report for type 5 error -117 [ 567.016560][T19217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.040373][T19217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.073536][T19217] loop5: detected capacity change from 0 to 512 [ 567.080121][T19217] EXT4-fs: Ignoring removed nobh option [ 567.171116][T19217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.188239][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4675'. [ 567.189548][T19217] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 567.211951][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4669'. [ 567.292932][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.295713][T19277] netlink: 'syz.0.4675': attribute type 2 has an invalid length. [ 567.316952][T19285] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.391643][ T8888] Bluetooth: hci0: Frame reassembly failed (-84) [ 567.518370][T19295] loop5: detected capacity change from 0 to 128 [ 567.541674][T19298] tmpfs: Bad value for 'mpol' [ 567.709474][T19303] loop5: detected capacity change from 0 to 128 [ 567.740712][T19303] FAT-fs (loop5): bread failed, FSINFO block (sector = 65535) [ 567.865714][T19303] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4685'. [ 567.877449][T19308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4687'. [ 567.941991][T19313] lo speed is unknown, defaulting to 1000 [ 567.966503][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4691'. [ 567.976905][T19315] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4690'. [ 568.050144][T19317] netlink: 'syz.4.4691': attribute type 2 has an invalid length. [ 568.065650][T19318] lo speed is unknown, defaulting to 1000 [ 568.236711][T19331] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4695'. [ 568.346322][T19341] loop5: detected capacity change from 0 to 512 [ 568.380275][T19341] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4699: bg 0: block 127: padding at end of block bitmap is not set [ 568.394826][T19341] loop5: lost filesystem error report for type 5 error -117 [ 568.398544][T19341] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.4699: bit already cleared for inode 11 [ 568.416904][T19341] loop5: lost filesystem error report for type 5 error -117 [ 568.435491][T19341] EXT4-fs (loop5): 1 orphan inode deleted [ 568.449061][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 568.449153][ C0] EXT4-fs (loop5): initial error at time 2000000780: ext4_validate_block_bitmap:441 [ 568.449392][ C0] EXT4-fs (loop5): last error at time 2000000780: ext4_free_inode:356 [ 568.530973][T19341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.623801][T19357] netlink: 'syz.0.4706': attribute type 21 has an invalid length. [ 568.754967][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.903518][T19369] netlink: 'syz.5.4711': attribute type 9 has an invalid length. [ 568.928981][T19369] macvlan2: entered promiscuous mode [ 568.934323][T19369] gretap0: entered promiscuous mode [ 568.939606][T19369] macvlan2: entered allmulticast mode [ 568.945021][T19369] gretap0: entered allmulticast mode [ 569.010144][T19378] loop4: detected capacity change from 0 to 512 [ 569.020758][T19378] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 569.081430][ T28] audit: type=1326 audit(2000000781.057:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.4.4714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03a62dce59 code=0x0 [ 569.239003][T19382] @0Ù: renamed from bond_slave_1 (while UP) [ 569.268059][T19386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.276595][T19386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.358682][T19388] vlan2: entered promiscuous mode [ 569.363934][T19388] bridge0: entered promiscuous mode [ 569.405786][ T3700] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 569.406481][T15399] Bluetooth: hci0: command 0x1003 tx timeout [ 569.595774][T19401] netlink: 'syz.3.4721': attribute type 2 has an invalid length. [ 570.238942][T19428] loop5: detected capacity change from 0 to 512 [ 570.561881][T19428] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 570.573429][T19428] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 571.190900][T19428] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4726: Corrupt directory, running e2fsck is recommended [ 571.224732][T19446] __nla_validate_parse: 6 callbacks suppressed [ 571.224803][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4733'. [ 572.193046][T19451] netlink: 'syz.6.4733': attribute type 2 has an invalid length. [ 572.216132][T19428] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 572.224420][T19428] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4726: corrupted in-inode xattr: e_name out of bounds [ 572.238253][T19428] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 572.259740][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 572.275369][ C1] EXT4-fs (loop5): initial error at time 2000000784: ext4_iget_extra_inode:5180: inode 15 [ 572.285349][ C1] EXT4-fs (loop5): last error at time 2000000784: ext4_iget_extra_inode:5180: inode 15 [ 573.282122][T19453] loop6: detected capacity change from 0 to 256 [ 573.294628][T19453] vfat: Unknown parameter 'check.relaxed' [ 573.500839][T19428] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4726: couldn't read orphan inode 15 (err -117) [ 573.587239][T19428] loop5: lost filesystem error report for type 5 error -117 [ 573.595935][T19458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4735'. [ 573.621370][T19428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.757930][T19467] netlink: 'syz.0.4739': attribute type 9 has an invalid length. [ 573.768247][ T28] audit: type=1400 audit(2000000785.727:1475): avc: denied { accept } for pid=19454 comm="syz.4.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 573.795997][T19464] loop6: detected capacity change from 0 to 1764 [ 573.816921][T19467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4739'. [ 573.849566][T19467] macvlan2: entered promiscuous mode [ 573.941391][T19467] gretap0: entered promiscuous mode [ 573.951268][T19467] macvlan2: entered allmulticast mode [ 573.965395][T19467] gretap0: entered allmulticast mode [ 574.233197][T19476] tmpfs: Bad value for 'mpol' [ 574.803442][T19494] loop6: detected capacity change from 0 to 4096 [ 574.838925][T19494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.924074][T19439] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 574.938567][ T28] audit: type=1400 audit(2000000786.837:1476): avc: denied { write } for pid=19489 comm="syz.6.4747" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 575.214798][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4750'. [ 575.474172][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4752'. [ 575.571695][T15637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.709195][T19511] tmpfs: Bad value for 'mpol' [ 575.714946][T19513] loop6: detected capacity change from 0 to 1764 [ 576.237878][ T28] audit: type=1400 audit(2000000788.197:1477): avc: denied { map } for pid=19521 comm="syz.6.4759" path="pipe:[62356]" dev="pipefs" ino=62356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 576.390603][ T28] audit: type=1400 audit(2000000788.197:1478): avc: denied { execute } for pid=19521 comm="syz.6.4759" path="pipe:[62356]" dev="pipefs" ino=62356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 576.680129][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4762'. [ 576.716610][ T28] audit: type=1400 audit(2000000788.637:1479): avc: denied { ioctl } for pid=19534 comm="syz.3.4764" path="socket:[63073]" dev="sockfs" ino=63073 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 577.917192][T19545] loop4: detected capacity change from 0 to 4096 [ 578.396300][T19545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.791275][ T28] audit: type=1400 audit(2000000790.667:1480): avc: denied { write } for pid=19536 comm="syz.4.4765" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 578.836328][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.819107][T19568] lo speed is unknown, defaulting to 1000 [ 580.033281][T12656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.064210][T19577] loop6: detected capacity change from 0 to 256 [ 580.091753][T19577] vfat: Unknown parameter 'check.relaxed' [ 581.304805][T19591] lo speed is unknown, defaulting to 1000 [ 583.959727][T19605] lo speed is unknown, defaulting to 1000 [ 584.162934][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 584.290063][T19619] netlink: 'syz.4.4786': attribute type 2 has an invalid length. [ 584.547970][ T8888] Bluetooth: hci0: Frame reassembly failed (-84) [ 584.622746][T19625] tmpfs: Bad value for 'mpol' [ 584.735284][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4792'. [ 584.807557][T19631] netlink: 'syz.5.4792': attribute type 2 has an invalid length. [ 584.858932][T19641] loop5: detected capacity change from 0 to 256 [ 585.021983][T19629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4791'. [ 585.135419][T19661] Cannot find set identified by id 0 to match [ 585.628085][T19680] loop4: detected capacity change from 0 to 256 [ 585.663987][T19680] vfat: Unknown parameter 'check.relaxed' [ 585.718985][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4801'. [ 585.877915][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4804'. [ 585.957903][T19712] netlink: 'syz.0.4804': attribute type 2 has an invalid length. [ 586.038952][T19729] tmpfs: Bad value for 'mpol' [ 586.152883][T19740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.162413][T19740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.189553][T19742] netlink: 'syz.4.4814': attribute type 4 has an invalid length. [ 586.202483][T19740] loop5: detected capacity change from 0 to 2048 [ 586.259865][T19740] loop5: p2 < > p3 p4 [ 586.264817][T19740] loop5: p3 start 65535 is beyond EOD, truncated [ 586.271180][T19740] loop5: p4 size 8192 extends beyond EOD, truncated [ 586.458814][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4818'. [ 586.535032][T19756] loop4: detected capacity change from 0 to 256 [ 586.541696][T19756] vfat: Unknown parameter 'check.relaxed' [ 586.601805][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4821'. [ 586.624267][T15399] Bluetooth: hci0: command 0x1003 tx timeout [ 586.630605][ T3700] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 586.677942][T19760] netlink: 'syz.4.4821': attribute type 2 has an invalid length. [ 586.711781][T19772] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4825'. [ 586.901436][T19789] loop5: detected capacity change from 0 to 1764 [ 587.069297][T19799] loop6: detected capacity change from 0 to 512 [ 587.095651][T19799] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4837: bg 0: block 127: padding at end of block bitmap is not set [ 587.109990][T19799] loop6: lost filesystem error report for type 5 error -117 [ 587.110455][T19799] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.4837: bit already cleared for inode 11 [ 587.118182][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 587.118259][ C1] EXT4-fs (loop6): initial error at time 2000001055: ext4_validate_block_bitmap:441 [ 587.118372][ C1] EXT4-fs (loop6): last error at time 2000001055: ext4_validate_block_bitmap:441 [ 587.216311][T19799] loop6: lost filesystem error report for type 5 error -117 [ 587.235007][T19799] EXT4-fs (loop6): 1 orphan inode deleted [ 587.261220][T19799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.312278][T19799] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4837'. [ 587.375404][T19836] tmpfs: Bad value for 'mpol' [ 587.411280][T19839] loop5: detected capacity change from 0 to 256 [ 587.419821][T19839] vfat: Unknown parameter 'check.relaxed' [ 587.553354][T19849] loop4: detected capacity change from 0 to 512 [ 587.587204][T19849] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 1: comm syz.4.4851: invalid block [ 587.614647][T19849] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 587.616217][T19849] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4851: couldn't read orphan inode 11 (err -117) [ 587.622075][T19862] tmpfs: Bad value for 'mpol' [ 587.650104][T19849] loop4: lost filesystem error report for type 5 error -117 [ 587.657499][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b91fe00: rx timeout, send abort [ 587.674014][T19849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.726270][ T28] audit: type=1400 audit(2000001055.634:1481): avc: denied { append } for pid=19848 comm="syz.4.4851" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 587.762885][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4860'. [ 587.857624][T19870] netlink: 'syz.5.4860': attribute type 2 has an invalid length. [ 587.868621][T12656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.918362][T19883] FAULT_INJECTION: forcing a failure. [ 587.918362][T19883] name failslab, interval 1, probability 0, space 0, times 0 [ 587.931080][T19881] loop4: detected capacity change from 0 to 256 [ 587.932537][T19881] vfat: Unknown parameter 'check.relaxed' [ 587.938405][T19883] CPU: 0 UID: 0 PID: 19883 Comm: syz.5.4862 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 587.938499][T19883] Tainted: [W]=WARN [ 587.938514][T19883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 587.938564][T19883] Call Trace: [ 587.938629][T19883] [ 587.938737][T19883] __dump_stack+0x1d/0x30 [ 587.938816][T19883] dump_stack_lvl+0x95/0xd0 [ 587.938892][T19883] dump_stack+0x15/0x1b [ 587.938960][T19883] should_fail_ex+0x25e/0x270 [ 587.939117][T19883] ? alloc_fs_context+0x41/0x570 [ 587.939205][T19883] should_failslab+0x8c/0xb0 [ 587.939277][T19883] __kmalloc_cache_noprof+0x7b/0x3d0 [ 587.939410][T19883] ? alloc_fs_context+0x41/0x570 [ 587.939508][T19883] alloc_fs_context+0x41/0x570 [ 587.939614][T19883] ? fs_context_for_mount+0x11/0x30 [ 587.939720][T19883] fs_context_for_mount+0x22/0x30 [ 587.939806][T19883] do_new_mount+0xe7/0x8d0 [ 587.939892][T19883] ? security_capable+0x7b/0x90 [ 587.940047][T19883] path_mount+0x4ad/0xb90 [ 587.940125][T19883] __se_sys_mount+0x28c/0x2e0 [ 587.940205][T19883] ? fput+0x8f/0xc0 [ 587.940293][T19883] __x64_sys_mount+0x67/0x80 [ 587.940379][T19883] x64_sys_call+0x2d61/0x3020 [ 587.940458][T19883] do_syscall_64+0x136/0x3c0 [ 587.940568][T19883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.940676][T19883] RIP: 0033:0x7f5064d3ce59 [ 587.940727][T19883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.940823][T19883] RSP: 002b:00007f506378f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 587.940901][T19883] RAX: ffffffffffffffda RBX: 00007f5064fb5fa0 RCX: 00007f5064d3ce59 [ 587.940963][T19883] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 587.941018][T19883] RBP: 00007f506378f090 R08: 0000200000000340 R09: 0000000000000000 [ 587.941135][T19883] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 587.941185][T19883] R13: 00007f5064fb6038 R14: 00007f5064fb5fa0 R15: 00007ffd4db5b748 [ 587.941246][T19883] [ 588.130828][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811baa3200: rx timeout, send abort [ 588.173974][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b91fe00: abort rx timeout. Force session deactivation [ 588.225664][T15637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.272938][T19899] tmpfs: Bad value for 'mpol' [ 588.334737][T19903] netlink: 'syz.0.4873': attribute type 2 has an invalid length. [ 588.401943][T19912] loop5: detected capacity change from 0 to 1764 [ 588.656195][T19922] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4880: bg 0: block 127: padding at end of block bitmap is not set [ 588.670635][T19922] loop6: lost filesystem error report for type 5 error -117 [ 588.671012][T19922] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.4880: bit already cleared for inode 11 [ 588.678717][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 588.678810][ C1] EXT4-fs (loop6): initial error at time 2000001056: ext4_validate_block_bitmap:441 [ 588.678868][ C1] EXT4-fs (loop6): last error at time 2000001056: ext4_validate_block_bitmap:441 [ 588.692708][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811baa3200: abort rx timeout. Force session deactivation [ 588.712382][T19929] vfat: Unknown parameter 'check.relaxed' [ 588.714169][T19922] loop6: lost filesystem error report for type 5 error -117 [ 588.771610][T19922] EXT4-fs (loop6): 1 orphan inode deleted [ 588.859840][T19922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.898948][T19937] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 588.906764][T19937] audit: out of memory in audit_log_start [ 589.020547][T19943] netlink: 'syz.4.4888': attribute type 2 has an invalid length. [ 589.221919][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b757000: rx timeout, send abort [ 589.604342][T19981] vfat: Unknown parameter '/dev/sg#' [ 589.734413][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b91ee00: rx timeout, send abort [ 589.742666][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b757000: abort rx timeout. Force session deactivation [ 589.770784][T15637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.887313][T19989] tmpfs: Bad value for 'mpol' [ 590.066253][T20003] 9p: Could not find request transport: f [ 590.072613][T20003] __nla_validate_parse: 5 callbacks suppressed [ 590.072632][T20003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4912'. [ 590.137032][ T28] audit: type=1326 audit(2000001058.104:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20006 comm="syz.3.4913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22bd96ce59 code=0x0 [ 590.177709][T20009] set_capacity_and_notify: 5 callbacks suppressed [ 590.177730][T20009] loop4: detected capacity change from 0 to 1764 [ 590.238850][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4913'. [ 590.242711][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b91ee00: abort rx timeout. Force session deactivation [ 590.289069][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4914'. [ 590.300567][T20013] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4913'. [ 590.355623][T20012] netlink: 'syz.6.4914': attribute type 2 has an invalid length. [ 590.493158][T20022] netlink: 604 bytes leftover after parsing attributes in process `syz.4.4916'. [ 590.529041][T20022] team0: entered allmulticast mode [ 590.534255][T20022] team_slave_0: entered allmulticast mode [ 590.540015][T20022] team_slave_1: entered allmulticast mode [ 591.042015][ T28] audit: type=1400 audit(2000001059.014:1483): avc: denied { setattr } for pid=20039 comm="syz.3.4923" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 591.253544][T20049] loop4: detected capacity change from 0 to 1764 [ 591.352382][T20055] loop6: detected capacity change from 0 to 256 [ 591.679655][T20058] Cannot find set identified by id 0 to match [ 592.292429][T20072] tmpfs: Bad value for 'mpol' [ 592.334175][T20075] loop6: detected capacity change from 0 to 512 [ 592.355886][T20077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 592.374057][T20075] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4933: bg 0: block 127: padding at end of block bitmap is not set [ 592.415372][T20075] loop6: lost filesystem error report for type 5 error -117 [ 592.420946][T20083] tmpfs: Bad value for 'mpol' [ 592.421773][T20075] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.4933: bit already cleared for inode 11 [ 592.444003][T20075] loop6: lost filesystem error report for type 5 error -117 [ 592.452594][T20075] EXT4-fs (loop6): 1 orphan inode deleted [ 592.465808][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 592.465844][ C1] EXT4-fs (loop6): initial error at time 2000001060: ext4_validate_block_bitmap:441 [ 592.466192][ C1] EXT4-fs (loop6): last error at time 2000001060: ext4_free_inode:356 [ 592.503723][T20075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.588378][T20077] netlink: 'syz.3.4936': attribute type 2 has an invalid length. [ 592.693169][T20093] netlink: 'syz.3.4941': attribute type 1 has an invalid length. [ 592.748410][T20070] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4933'. [ 592.765648][T20093] 8021q: adding VLAN 0 to HW filter on device bond6 [ 592.774030][T20093] bond5: (slave bond6): making interface the new active one [ 592.781883][T20093] bond5: (slave bond6): Enslaving as an active interface with an up link [ 592.823047][T20097] 8021q: adding VLAN 0 to HW filter on device bond5 [ 593.104545][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b599a00: rx timeout, send abort [ 593.509461][T20108] xt_NFQUEUE: number of total queues is 0 [ 593.604066][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b8d4a00: rx timeout, send abort [ 593.613757][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b599a00: abort rx timeout. Force session deactivation [ 593.660760][T15637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.117180][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 594.119947][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b8d4a00: abort rx timeout. Force session deactivation [ 594.134977][T20118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.143503][T20118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.163051][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4950'. [ 594.217606][T20121] lo speed is unknown, defaulting to 1000 [ 594.228809][T20118] loop5: detected capacity change from 0 to 2048 [ 594.261739][T20129] netlink: 'syz.4.4950': attribute type 2 has an invalid length. [ 594.303160][T20142] lo speed is unknown, defaulting to 1000 [ 594.311079][T20118] loop5: p2 < > p3 p4 [ 594.318167][T20118] loop5: p3 start 65535 is beyond EOD, truncated [ 594.325589][T20118] loop5: p4 size 8192 extends beyond EOD, truncated [ 594.378955][T20148] sctp: [Deprecated]: syz.3.4949 (pid 20148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 594.378955][T20148] Use struct sctp_sack_info instead [ 594.477129][T20121] lo speed is unknown, defaulting to 1000 [ 595.067195][T20218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4956'. [ 595.137225][T20226] xt_NFQUEUE: number of total queues is 0 [ 595.948356][ T28] audit: type=1400 audit(2000001063.924:1484): avc: denied { ioctl } for pid=20234 comm="syz.3.4961" path="socket:[65197]" dev="sockfs" ino=65197 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.047606][T20237] tmpfs: Bad value for 'mpol' [ 596.119780][ T3700] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 597.085023][T20251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.192636][T20251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.459189][T20259] loop5: detected capacity change from 0 to 4096 [ 597.482344][T20259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.601780][ T28] audit: type=1400 audit(2000001065.574:1485): avc: denied { write } for pid=20258 comm="syz.5.4967" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 598.542395][T20278] loop6: detected capacity change from 0 to 256 [ 598.558483][T20279] loop4: detected capacity change from 0 to 1764 [ 598.570424][T20278] vfat: Unknown parameter 'check.relaxed' [ 598.606585][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.892893][T20305] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4978'. [ 598.917885][T20305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.055849][T20317] lo speed is unknown, defaulting to 1000 [ 601.093856][T20383] loop5: detected capacity change from 0 to 4096 [ 601.108886][T20383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.115840][T20393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.134973][ T28] audit: type=1400 audit(2000001069.104:1486): avc: denied { write } for pid=20381 comm="syz.5.4985" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 601.155912][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 601.157911][T20393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.195981][T20393] loop4: detected capacity change from 0 to 2048 [ 601.286792][T20393] loop4: p2 < > p3 p4 [ 601.294519][T20393] loop4: p3 start 65535 is beyond EOD, truncated [ 601.307273][T20393] loop4: p4 size 8192 extends beyond EOD, truncated [ 601.487952][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4989'. [ 601.579869][T14212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.878078][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4993'. [ 601.933101][T20422] loop5: detected capacity change from 0 to 256 [ 602.436548][T20426] Cannot find set identified by id 0 to match [ 603.086187][T20435] loop4: detected capacity change from 0 to 512 [ 603.115043][T20435] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 603.181997][T15399] Bluetooth: hci0: command 0x1003 tx timeout [ 603.185174][ T3700] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 603.189060][T20435] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 603.204352][T20435] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5000: Corrupt directory, running e2fsck is recommended [ 603.218515][T20435] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 603.226744][T20435] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.5000: corrupted in-inode xattr: e_name out of bounds [ 603.240754][T20435] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 603.244467][T20435] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5000: couldn't read orphan inode 15 (err -117) [ 603.265523][T20435] loop4: lost filesystem error report for type 5 error -117 [ 603.279170][T20435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.329155][T20435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.406245][T20448] loop5: detected capacity change from 0 to 1764 [ 603.417662][T20435] loop4: detected capacity change from 0 to 512 [ 603.447502][T20435] EXT4-fs: Ignoring removed nobh option [ 603.596430][T20435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.618504][T20435] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 603.671502][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5007'. [ 603.824399][T12656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.881640][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5008'. [ 603.963814][T20459] ================================================================== [ 603.972556][T20459] BUG: KCSAN: data-race in hrtimer_interrupt / print_tickdevice [ 603.980251][T20459] [ 603.982603][T20459] write to 0xffff888237c179e0 of 8 bytes by interrupt on cpu 0: [ 603.990266][T20459] hrtimer_interrupt+0x6b/0x810 [ 603.995159][T20459] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 604.001150][T20459] sysvec_apic_timer_interrupt+0x6f/0x80 [ 604.006945][T20459] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.013003][T20459] __tcp_close+0x7bc/0x1120 [ 604.017683][T20459] tcp_close+0x28/0xd0 [ 604.021769][T20459] inet_release+0xcd/0xf0 [ 604.026143][T20459] sock_close+0x6b/0x150 [ 604.030454][T20459] __fput+0x29e/0x630 [ 604.034480][T20459] fput_close_sync+0xad/0x190 [ 604.039185][T20459] __x64_sys_close+0x55/0xf0 [ 604.043811][T20459] x64_sys_call+0x275d/0x3020 [ 604.048528][T20459] do_syscall_64+0x136/0x3c0 [ 604.053149][T20459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.059063][T20459] [ 604.061402][T20459] read to 0xffff888237c179e0 of 8 bytes by task 20459 on cpu 1: [ 604.069043][T20459] print_tickdevice+0x144/0x340 [ 604.073926][T20459] timer_list_show+0x6c/0x170 [ 604.078629][T20459] seq_read_iter+0x5f6/0x8f0 [ 604.083284][T20459] proc_reg_read_iter+0x110/0x180 [ 604.088344][T20459] copy_splice_read+0x47a/0x6b0 [ 604.093213][T20459] splice_direct_to_actor+0x261/0x680 [ 604.098604][T20459] do_splice_direct+0x119/0x1a0 [ 604.103479][T20459] do_sendfile+0x37d/0x640 [ 604.107930][T20459] __x64_sys_sendfile64+0x105/0x150 [ 604.113146][T20459] x64_sys_call+0x2dc4/0x3020 [ 604.117848][T20459] do_syscall_64+0x136/0x3c0 [ 604.122469][T20459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.128380][T20459] [ 604.130721][T20459] value changed: 0x0000008c9d6fcebe -> 0x0000008c9da11100 [ 604.137873][T20459] [ 604.140222][T20459] Reported by Kernel Concurrency Sanitizer on: [ 604.146386][T20459] CPU: 1 UID: 0 PID: 20459 Comm: syz.5.5008 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 604.157343][T20459] Tainted: [W]=WARN [ 604.161151][T20459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 604.171215][T20459] ==================================================================